Cloud Security

Hacker writes Haka-Part 1 Haka is an open-source network security-oriented language that can be used to write security rules and Protocol delimiters. In this section, we focus on writing security rules.0x00 what is Haka Haka is an open-source

Honeywell 93gas Detector information leakage (CVE-2015-7908) Affected Systems: Honeywell Midas gas detectors Honeywell Midas Black gas detectors Description: CVE (CAN) ID: CVE-2015-7908 Midas and Midas Black gas detectors are detectors used to

JAVA serialization, deserialization, and vulnerability remediation Last week, cyber security staff suffered a further setback in front of the black market. Joomla exposed high-risk 0-day vulnerabilities, which can be triggered without user login.

Kaspersky Total Security features Security Restriction Bypass Vulnerability (CVE-2015-8579)Kaspersky Total Security features Security Restriction Bypass Vulnerability (CVE-2015-8579) Release date:Updated on:Affected Systems: Kaspersky Labs Total

Schneider Electric Modicon M340 Buffer Overflow Vulnerability (CVE-2015-7937)Schneider Electric Modicon M340 Buffer Overflow Vulnerability (CVE-2015-7937) Release date:Updated on:Affected Systems: Schneider Electric Modicon PLC BMXPRA0100Schneider

Automated Analysis Platform for Cuckoo malware Author: kernux Topsec α-lab0x00 cuckoo Overview Cuckoo is an open-source automated malware analysis system. It is mainly used to analyze malware on the windows platform, but its framework supports both

The wonderful site of ASP + MySQL won shell Wonderful site of ASP + MySQLBored, casually google a site, click the link, asp, id followed by a ', immediately reported an error. However, the error message is still very bright. The mysql error message

A stored xss blind beat Administrator RT A very low-level xss reading APP with a large number of users'"> '"> Find a discussion area and enter the following information:   Proof of vulnerability: Returned cookie: Location: http: // **. **/

Espcms latest V6.4.15.08.25 arbitrary User Login Definitely the latest version!Version: V6.4.15.08.25 UTF8 official versionUpdated on: 12:29:04 Software size: 7.67 MBUpdated on the 25 th Appears at User Logon/Interface/memebermain. php function

China energy conservation and environmental protection group company email system design defects credential stuffing cracking has obtained multiple account permissions (internal information, sensitive information) RT China energy conservation and

China Water Association equipment Commission's website SQL Injection China Water Association equipment network-China Water Industry Authority-China Water Association equipment Commission's website, SQL injection to login website management

A good loan website bypasses SQL Injection somewhere (with a verification script) RTDetailed description: Vulnerability address: http://www.haodai.com/zixun/k_1*/ * Injection exists. Space is filtered, comma, less than, greaterA delay occurs when

Cool music MySQL blind injection (bypass filtering) Where Parameter: sid (GET) Type: AND/OR time-based blind Title: MySQL It seems that the BENCHMARK function is no longer usable, but the test finds thatTrue

Website injection of a certain State-owned company in Taiwan My skates are the most fashionable and fashionable... Code Region http://**.**.**.**/product/products.php?cid=3 Code Region [09:26:22] [INFO] the back-end DBMS is MySQLback-end

Anhui Graduate Employment Information Network SQL Injection # affects a large number of student archives http://**.**.**.**/ 0x02 details Time-based Boolean blind Injection 0x03 usage  Sqlmap can be tested and configured with scripts to bypass space2

SQL injection vulnerability in Xiamen small and micro enterprises loan repayment Emergency Fund Management System Vulnerability address: POST /ashx/SendMsg.ashx HTTP/1.1Host: **.**.**.**Proxy-Connection: keep-aliveContent-Length: 21Accept:

China Tie Jian e-commerce platform getshell (root permission \ various bidding information) China Railway Construction's e-commerce platform, design various bidding and winning information ~ URL: http: // **. **: 8000/ China Railway

Part of the current target OA file can be traversed and downloaded Entry level ~ Address: http://web.jingoal.com/#worklog (login required), may be shared with the microblogging attachment interface, part of the log attachments can be modified

From weak passwords to Getshell Http://extplat.minanins.com/console/login/LoginForm.jsp Weblogic is used for one of the sites of the Civil Security Department, and the console is exposed Weak Password: webloigc weblogic123 The port jumps to 9

Penetration skills-Some Opinions on safe dogs Security Attacks and defense are never outdated. Just like a website you infiltrate, you may not be able to penetrate it well at some point due to various technical conditions, but as you grow and study.