Cloud Security

Remote control technology has been mentioned earlier. Many hacker software and plug-in software are bundled with Backdoor programs, the backdoor program is to open a port backdoor in your computer to connect to the hacker's master terminal. Once the

The core idea of permission string attacks is that A program A has A specific execution permission, and A program B does not have this permission. However, B can use the permissions of A to execute this permission. To put it bluntly, it is to use A

When the input point of the mysql database is injected, mysql information can be obtained through the built-in functions such as version (), user (), database (), and password, in fact, we can use mysql built-in variables to get more mysql

  Relatively simple Target: www. ***. com| -- Test open services| --> Overflow| --> Weak Password| -- Search for sensitive or vulnerable directories-> analyze the website directory structure| -- Get the SHELL by testing the whole site program Bug

Google: powered by Blue Dove Web Design Exploit: http: // server/path/file. php? Id = null [SQL] Example: Http: // server/sections/newsletter. php? Id =-30% 20 union % 20 select % 201, @ version  Http: // server/newsletter/newsletter_new.php? Id

As the saying goes, dripping water can penetrate the stone, tianyao grinding into a needle, bit by bit of effort, bit by bit of accumulation, continuous progress, growth is huge. I believe that the small sapling will grow into a big tree, but every

The Code is as follows: @ Echo off Gpupdate> nul Rem For Client only Ipconfig-w REG-p "HFUT_SECU"-o-x> nul Ipconfig-w REG-p "HFUT_SECU"-x> nul Rem ipconfig-w REG-p "HFUT_SECU"-r "Block TCP/80"-f * + 0: 80: TCP-n BLOCK-x> nul Rem ipconfig-w REG-p

I recently want to develop a tamper-proofing solution with my friends. I have listed some of the items on my own. I would like to ask you how to tamper with the web page and the corresponding methods. 1. webpage tampering(1) Obtain Webshell after

Author: icysun I don't know how to use shell after a long time. After entering the background, we can know the website path. This is very important. Directly export a single statement Select * from table1 into outfile c: est.txt. This is not

From hacker blog Soon, I connected to the oracle server and found that:1. the dba permission is not granted after the connection. 2. You cannot use SYS. DBMS_EXPORT_EXTENSION.GET_DOMAIN_INDEX_TABLES to escalate permissions. 3. Run SELECT

Recently, some netizens mentioned a new universal login password. For example, there are many login verification codes on the Internet:Program code Username = trim (Request. Form ("username ")) Password = trim (Request. Form ("password ")) SQL =

Author: BlueboyHe fooled me before he got it done ......After that, you will know what is going on .....................Sub backupdata ()Dbpath = request. form ("Dbpath ")Dbpath = server. mappath (Dbpath)Bkfolder = request. form ("bkfolder

View Editor VersionFCKeditor/_whatsnew.html----------------------------- 2. Version 2.2In Apache + linux, add a breakthrough after uploading files! Test passed.----------------------------- 3. Version Action =

# Exploit Title: dede cms Multiple XSS Vulnerabilities# Tested on: [Windows 7] ========================================================== ========================================================== =====================================================

As the largest community forum software service provider in China, relying on its powerful functions, extraordinary access speed and load capabilities, friendly and convenient user interfaces, high-quality customer services, leading domestic

Black boy from F rom Error code: Dim upload, file, formName, formPath, iCount, fileformatSet upload = new upload_F Function MakedownName () Dim fname   Fname = now () Fname = replace (fname ,"-","")   Fname = replace (fname ,"","") Fname = replace

EXP: -hi.baidu.com/5427518- Xday removal in concave yya 4.7 and earlier versions only for study, if the user violates the law, the user shall be at your own risk Note: 0. google: inurl:/otype. asp? Classid = 1. type the target site. If you are

From waiting for blog DedeCMS is also the zhimeng content management system. The latest version has been released to the official version 5.5. It is a pity that the new version has a new vulnerability. Therefore, Xiao heite has come to cheat me in

1. Determine version http://www.cert.org.tw/document/advisory/detail.php? Id = 7 and ord (mid (version (), 4.0)> 51 returns normal, meaning it is later than version and supports ounion Query 2. to guess the number of fields, you can use order by or

Nginx is a high-performance web server that is widely used. It is often used as a reverse proxy and supports PHP operations. 80sec finds that there is a serious security problem. By default, it may cause the server to incorrectly parse any types of