Cloud Security

Lan sharing permission settings: xp has no permission to access win7 share, and win7 has no permission to access xpLan sharing permission settings have always been one of the network skills that administrators must master. However, because the

Windows shellcode Development (2) In the first part of this series, we learned the definition of Shellcode and its working principle. To correctly compile the Shellcode for Windows, the author will describe the required information in this article:

How to clear Trojans Here are two tips to help you forcibly kill stubborn virus processes. Scan and kill by process name This method is implemented through the taskkill command in the WinXP system. before using this method, you must first open the

A hacker can "Hear" the key of an offline computer. Researchers at Tel Aviv University in Israel and the Israeli Institute of Technology have designed a method to steal computer data. This "unlucky" computer is not only not connected to the Internet,

WebDAV Local Elevation of Privilege Vulnerability (CVE-2016-0051) POC & EXP Vulnerability Information This vulnerability exists in Microsoft Web Distributed creation and Version Management (WebDAV). If the Microsoft Web Distributed creation and

Background Management + Sina Weibo for an important site of the giant's Network Background Management + Sina Weibo for an important site of the giant's Network Http: // 222.73.63.136/live_admin/application/singerShow/view/index.htmlAccount:

Learning web security from scratch (2) The previous article explains some basic xss knowledge. This article continues to study. I mentioned some theoretical things in the previous article, and I soon forgot about it. After a brief review, we will

Security-related HTTP headers As Web security issues become more and more serious, various browsers have strengthened their security policies and introduced many new HTTP headers. Recently, When I scanned the daily report and logged on to the system,

A weak password in haidilao background causes Getshell to involve full-site user data with a password. A weak password in haidilao background causes Getshell to involve full-site user data with a password. Haidilao forum administrator Weak Password 

Pudding mobile APP has SQL injection (containing more than 4000 million user data) SQL Injection for APP security Target: pudding mobile APP-pudding couponSQL Injection exists in the following locations: (app_name, UNION Query, Boolean blind

A USB flash drive gets rid of you: TEENSY (test) Mining Process 1: It has been a long time since the last contribution. Today, I wrote an article about my time to eat and record my experiences with xss over so long. In my opinion. Xss is javascript

Discuz! Conditional storage xss and ssrf (easily met) First, submit a chicken rib... In fact, the conditions are easily met.Detailed description: FileSource \ function \ function_discuzcode.phpFunction discuzcode  if(!defined('IN_MOBILE')) {

Test the vulnerability of an icloud phishing site Yesterday, a great guy hacked an icloud phishing site for the goddess for 10 minutes. He didn't want to receive a phishing email today, but also followed by a brush. But the phishing site of the

Website security dog WebShell upload interception Bypass The website security dog has a defect in processing the upload request, which leads to the failure of the upload interception for suffixes such as. asp. asa. Test environment: IIS 6.0Dongle

Qidian education background universal password/SQL injection vulnerability involving more than 3717 million user data Qidian education background universal password/SQL Injection Vulnerability Http://account2.gongfubb.com/home/admin? ACT = AC

Incorrect configuration of a system in caoxin capital results in the Intranet access of the Getshell server. If the system is improperly configured, The getshell server can access the Intranet. Address: http: // 123.57.91.68/level2.jsp? Caid = 002 

A system patch is not timely, causing shell execution to threaten 84 Intranet hosts. If the patch is not timely, can the command be executed at a high level? Address: http: // 218.89.135.237: 9000/hd/  This is the windows system s2-005 Command

Sohu mail persistent xss Trigger an email Use your own smtp tool (Link: http://pan.baidu.com/s/1jHiOhZS password: xqbp) send the following content as body  test Log on to the mailbox and click the email to trigger alert. 

Bilibili SQL Injection Vulnerability The last csrf was ignored and unhappy: (so I found an injection.PS: for a large review, give a front-end. So long, no front-end ever :( Injection point: http://live.bilibili.com/ I /operation? Month = 2016-01-01%

Use NSURProtocol to inject Test Data In previous blog posts, I have introduced the Unit Testing Method for accessing asynchronous networks and how to use simulated objects to further control the scope of unit testing. In today's tutorial, I will