Cloud Security

Generally, you can log on as the root user to configure the system as Administrator by executing the "su-" command and entering the correct root password. However, in order to further enhance the security of the system, it is necessary to establish

Security has been a problem recently, such as Windows authentication, asymmetric encryption, digital certificates, digital signatures, TLS/SSL, and WS-Security. If time permits, I would like to write a series of articles to share and exchange with

1. Linux SSH Security Policy 1: Shut down the majority of hosts attacked on the unrelated port network, which are targeted by hackers who use scanning tools for a wide range of scanning. Therefore, in order to avoid being scanned, all ports, such as

Let's take a few pictures first. I tested them.See my test diagram. 1. First, make sure that "Account Security daemon" is enabled in the daemon function.   2. Check the code   3. run the command in bat format. During the running process,

This vulnerability was detected by testing the memory pressure of PATHALLOC (). First, PATHREC> points to the same user space pathrec epathobj: bFlatten and it will "Spin" for infinite linked list traversal. For example, PathRecord-> next =

Do you think Windows security scanning for Enterprise Desktop status can get accurate results? Think about it. In fact, every so-called "secure" and "solid" desktop I 've ever encountered has countless Security Vulnerabilities-many of which are

I will not talk much about Nginx. Below I will mainly record some useful configurations I have collected, most of which are related to server security. The following sections refer to "Top 20 Nginx WebServer Best Security Practices" on nixCraft.

IOS runtime attacks are currently popular in two ways:Dynamic Link Library InjectionTo modify the implementation of the API method by writing a customized dylib file and setting the DYLD_INSERT_LIBRARIES environment variable (seeMac hook-DYLD_INSERT_

For telecom enterprises, database security is crucial. Imagine what will happen to the Recharge System? What will happen to system problems when mobile phone users query bills at the end of the month? The following are some experiences of database O

Generally, websites can be accessed by domain names and IP addresses. Your website can be accessed directly through an IP address. This is no problem, but it may cause some risks:Because the search engine will also include the pages of your IP

H3C iNode is a management software designed and developed by Hangzhou H3C Communication Technology Co., Ltd. for user authentication and internet access. The software has a buffer overflow vulnerability. Attackers can remotely send attack packets

0x00 background The CTO of Bluebox, Jeff Forristal, reported a vulnerability in his official blog called the uncovering android master key, which generally does not tamper with the signature to modify the android code. Link:

Previous logRestrict nginx cross-directory browsingTo some extent, hackers are limited. However, with the increasing number of webshell functions, users can still access the areas they are not supposed to access through other methods, such as

# Squid Crash PoC # Copyright (C) Kingdee 2013 # BETA: squid-3.3.5 # officially released patches ::# http://www.squid-cache.org/Versions/v3/3.3/squid-3.3.8.patch#The Squid-cache service will respawn, looks like a kind of assert exception: #20:48:36

Preface:To figure out the entire process, we will analyze a simple DEMO we have written to illustrate the environment: OS: BT5 R3 64 bittools: gcc, gdbsource: cProcess:Let's take a look at this simple program. It's a login verification program. root@

VBScript (Microsoft Visual Basic Script Editon), Microsoft's Visual BASIC Script version). As literally disclosed, VBS (further abbreviated as VBScript) is a Visual Basic-Based Script Language.Lcx shares how to use vbs to execute shellcode. It is

Yesterday, a zero-day vulnerability about firefox17 (20.1) was published on the Internet. The vulnerability was reported to be used by the FBI to track users in the Tor network for investigation and evidence collection. POC: Streamlined

In the previous article, we mainly talked about physical access and how to export HASH to local computers. With the development of enterprise and cloud management, most small and medium-sized enterprises have begun to push wide areas, it should be

The best way to learn is to link theory with practice. When we know how to penetrate an attack, someone will try to simulate a real attack. During Penetration, when we find that some ports are opened on a machine, you can think about how to use the

Author: xyt Article Source: evil baboons These are the most basic things, and EST's friends don't need to join us ~~~PHP injection does not have powerful tools such as NBSI like ASP. In fact, after knowing the injection principle, manual injection