Security knowledge: Exploitation of Trojans

Today, hackers have begun to deviate from the technology itself, and even those who only target Windows 98 vulnerabilities, and use the simplest Trojan tool to attack others have begun to claim that they are hackers. The hacker has actually

Security Configuration and maintenance of Apache WEB Server (II)

AuthName "member Zone"AuthType "Basic"AuthUserFile "/var/tmp/xxx. pw" -----> put the password out of the websiteRequire valid-user to the apache/bin directory and create the password file %./Htpasswd-c/var/tmp/xxx. pw username1 -----> the parameter

Protection of Apache server (1)

Summary This article will discuss the security of Apache WEB Server installation and configuration on the UNIX platform. We assume that the system administrator who has read this article has selected the relevant modules for his site, and can

Obstacles for hackers: Network Security Trilogy

Basic settings I. Four misunderstandings about online security The Internet is actually a world that comes and goes. You can easily connect to your favorite site, while other people, such as hackers, can easily connect to your machine. In fact, many

List of MySQL primary protection checks

Chris Anley chris@ngssoftware.com.Translation: zhouzhen [E.S. T] List of MySQL primary protection checks The following are important references to reinforce the security of your Mysql

Set permissions for your IIS

Currently, most virtual hosts disable the standard ASP Component FileSystemObject, because this component is an ASPProvides powerful file system access capabilities to read, write, copy, delete, and rename any files on the server's hard disk (of

Handle uploaded Trojans

I am very depressed because my DV Forum frequently uploads files with asp code. I want to solve the problem by using the following code: In my opinion, as long as you follow the following practices, you are not afraid to upload Trojans! The problem

Vulnerabilities caused by logical errors

Author: Old K Source: http://www.cha8.com/ In the previous phase, problems occurred in the chat room system on my personal website, and many abnormal pictures and styles appeared in the chat room .. I am confused. According to common sense, all

Seven methods to retrieve the restore genie Password

If you forget to restore the genie password, the trouble may be high. This problem cannot be solved by uninstalling the software, because you also need to enter a password during uninstalling. Don't worry, I have a solution! Method 1: temporary

Delete TFTP "time bomb"

Recommendation reason:In Windows, there is a client named tftp, which many hackers can use to upload some attack tools .......... This service was originally intended for the Network File Transfer Service. I did not expect it to become a "time bomb",

Microsoft's patch-based MHTML cross-origin vulnerability can be exploited (1)

Brief description: data can still be read across domains using third-party plug-ins such as flash. I personally think the main reason is that Microsoft and Microsoft's mhtml patch is not powerful?Description: assume that the attacker's controllable

Seven steps to protect Linux Server Security

The main consideration for installing a Linux operating system is the security of the operating system. How can we have a Secure Linux server? Many new Linux network administrators find that it is difficult for them to switch from a click-to-click

Hazards and handling of usp10

I hung up a VPN last night. As a result, I got stuck and thought it was a low sub-configuration. I didn't pay attention to it. It wasn't until I accidentally wanted to delete a directory. The computer prompts that the file was in use. At that time,

Brute-force penetration technology based on "password retrieval"

BlAck. Eagle [B. H.S. T] We are familiar with brute-force cracking techniques, but I have found brute-force cracking based on "Password Reset ".There are not many technologies, so I will introduce them in this article and describe the technologies

Discuz! X2.0 SQL Multiple Injection Vulnerabilities and repair

 DZ2.0 direct brute-force password management account (default prefix) /Forum. php? Mod = attachment & findpost = ss & aid = MScgYW5kIDE9MiB1bmlvbiBhbGwgc2VBytes29yZCkgZnJvbSBwcmVfY29tbW9uX21lbWJlciB3aGVyZSAgdXNlcm5hbWUgbGlRZSAnYWRtaW58eHx5 %

Php webshell scan with perl

There have been a lot of things over the past few days, but for convenience, I wrote a php webshell detection script to Show the effect. In order to minimize false positives and minimize false positives, we have made a lot of analysis and

Data Flow in the NTFS file system

The data stream format in the NTFS file system was already a few years ago, while the anti-virus vendorDoes not fully check this aspect of the file, this causes the virus scan program to be unable to find the code orVirus Scanning programs may

High-risk Ngnix vulnerabilities that Allow Remote Code Execution

Nginx % 00 NULL bytes Arbitrary Code Execution (php) Vulnerability% 00. php to execute the codeAffected Versions:Nginx 0. 5 .*Nginx 0. 6 .*Nginx 0.7 Nginx 0.8 In vulnerable versions of nginx, null bytes are allowed in URIs by default (their presence

Simple and common iptables scripts

The iptables script is a very simple iptables script. You only need to write the port to be opened to the "$ MPort" variable. Remember that up to 16 ports are allowed. Although this script is simple, it can meet our basic requirements. Sometimes,

Further exploration of chrome's tag correction Vulnerability

The previous article provided two prototype of the chrome tag correction feature vulnerability, which is a further extension of the idea of the vulnerability 11 issued by foreigners. I said the tag correction feature of chrome xss filter is a little

Total Pages: 1330 1 .... 1027 1028 1029 1030 1031 .... 1330 Go to: GO

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.