Cloud Security

Focus on mobile application security and get out of the "code obfuscation" misunderstanding For a long time, to prevent mobile apps from being decompiled and cracked, most mobile developers choose code obfuscation technology to defend against

Record a Linux Server intrusion detection process0 × 00 Preface The story is like this. On the first day of the New Year, the customer responded that their servers could not be accessed. Looking at the routes, the customer found that the UDP traffic

Defend against attacks 0 × 01. Preface I am a cainiao security engineer. I had the honor to have participated in two security competitions, and some people had some personal experience, so I had this article.‍‍‍‍0 × 02. What will attackers do?‍‍‍‍ I

DDOS attack analysis method and AnalysisIntroduction to DDOS The full name of DDOS in English is Distributed Denial of Service Distributed Denial of attack. It is the most common and difficult to defend against network attacks. Similar to

I learned from the Superfish event0x00 preface & superfish event There are many reports at home and abroad about the Superfish incident. However, I personally feel that the vulnerability incidents are very sensitive in China, and they are the first

Commonly used iptables scripts #! /Bin/bashexport PATH =/sbin:/usr/sbin:/bin:/usr/biniptables-Fiptables-Xiptables-Z # remote SSH Login, we need to enable port 22 iptables-a input-p tcp -- dport 22-j ACCEPT # WEB server, enable port 80 iptables-a

CentOS7LVM logical volume partition automatic resizing Shell scriptApplication scenarios and known problems: Applicable to CentOS6 or CentOS7 (may be applicable to earlier versions such as CentOS4 or 5) The root file system (Extended File System)

Malicious Software hidden in jpg exif header information The backdoor program is divided into two parts. The first part is the combination of the exif_read_data function of the image header to be read and some preg_replaCe functions to execute the

How to decrypt the Flash Vulnerability in the Nuclear Vulnerability exploitation Kit In recent years, the Exploit Kit (EK) has gathered a variety of vulnerability exploitation tools to perform automated analysis and vulnerability exploitation tests

RSA encryption and decryption functions of ASP Rsa. asp test. asp  

Hubei Agricultural Machinery Safety Supervision promotion information network stored XSS + SQL injection (Cookies already exist) Hubei Agricultural Machinery Safety Supervision promotion information network stored XSS + SQL injection (Cookies

ADO. NET Quick Start-SQL injection attacksRelated Knowledge: You can construct an SQL command string through String concatenation. However, the concatenation of SQL command strings is an important cause of "SQL injection attacks. Consider the

Haikang life main site SQL Injection Vulnerability Haikang life main site SQL Injection Vulnerability POST /photography/look.jsp HTTP/1.1Content-Length: 23Content-Type: application/x-www-form-urlencodedReferer:

Use Cortana software to diagnose rogue software VVisitFault description Yesterday, the company's network was very slow, and my colleagues simply browsed web pages. We decided to take a look at the Network Analysis System with corai. The procedure

ElasticSearch Remote Code Execution Vulnerability Analysis (CVE-2015-1427) & advanced exploitation0x00 vulnerability Overview Combined with the previous article "ElasticSearch Groovy script Remote Code Execution Vulnerability Analysis (CVE-2015-1427

An UCweb interface can easily Crack user accounts. An UCweb interface can easily Crack user accounts.Brute-force cracking interface:   Http://haoma.uc.cn/unfreeze/checkAccount The nickname status query function allows you to use a combination of

Optimistic about your portal-data transmission on the client-insecure hidden form fields 1. Simple Description Applications usually send data to the server in a way that the end user cannot directly view or modify. In many cases, developers give

A weak password in a system in Jinshan cloud causes command execution (intranet allowed) Http: // 101.251.64.195: 8080/ Weak zabbix password causes Command Execution  However, it is worth mentioning that there is nothing in the Latest data of

Summary of use of character Security filtering functions in PHP In the WEB development process, we often need to obtain user input data from all over the world. However, we "Never trust the data input by those users ". Therefore, various Web

51 auto network password Modification Vulnerability for any user 51 cars can be scanned in batches on the registration page The following is a scanned number, which is only used for testing.  Retrieve the password on your mobile phone