Cloud Security

SQL server2000 databases are widely used. Once a security problem occurs, the loss is hard to estimate! Prevention should be taken in advance to prevent problems before they happen. Here, we will talk about the security configuration of the SQL

Enterprises such as servers, desktops, laptops, and mobile devices are facing more and more attacks. The consequences of these attacks become more and more serious. A small amount of data leakage may cause millions of dollars in losses. Therefore,

0x00 background In the past two days, a customer reported that his website often encountered a mysql 1040 error. His online users only had less than one thousand, and the mysql configuration was okay. The linode160 + knife was used for one month

Affected Systems: TP-LINK TD-8817 3.11.2.175 _ TC3086Description:--------------------------------------------------------------------------------Bugtraq id: 68024 TP-Link is a well-known network and communication equipment supplier. TP-Link

Using GPG for encrypted communication is the safest way. Keep your private key safe and exchange it with your friends in person. RSA 4096, you deserve it. It is said that developers are writing ECDSA algorithms, which is becoming more and more

Preface:The heartbleed vulnerability has pitted a wireless network. This time, it is used in a harsh way. The most common reason is the EAP-based Router, which is also used by many large companies. Original article addressBody:I have received a lot

DNS configuration instanceCase:Server IP Address: 192.168.127.200Www.abc.com 192.168.127.111 requires that the alias www1.abc.com be used for access.Tec.abc.com 192.168.127.222WKioL1OaxeGzOUyeAAHkQne6JHk825.jpgWKiom1Oaxg_zv1PCAAHcbCJuhYY228.jpgWKioL1

Register the user, then capture the data and analyze the file: http: // localhost/74cms_utf8/upload/plus/ajax_user.php send the post packet: username = M' & password = 111111 & member_type = 2 & email = m % 40163.com& time = 1401769527951 & act = do_

You do not need to log on or use getshell. The upload location is in plugins/phpdisk_client/client_sub.php. First, the user-agent is verified, and a username and password include "is obtained from the decryption string ".. /.. /shortdes/commons. inc.

Editor's note: In the web era, XSS vulnerabilities cannot be underestimated. Especially for UGC businesses, supporting "secure" HTML is a required feature of the business. This requires a very high security filter for UGC, and the storage XSS

Mssql SA permission exec master. dbo. xp_mongoshell "del c: \ bak" -- backup database name to disk = 'C: \ Bak' -- backup the entire database -- exec master. dbo. xp_mongoshell 'bcp database name. dbo. table name out c: \ bak-C' -- back up a single

Before 0x00 For how to detect XSS in Flash, everyone has their own methods, whether it is using automated tools (such as swfscan) or self-developed automation tools (decompile first, and then Audit The actionscript code) or manually audits the code.

The SQL injection vulnerability exists in this version, but the website program needs to be purchased. Therefore, it is unclear that the version number is obtained by reading the database server table. The ftp address and user password are obtained

1. floor brute-force Error /* Database version */ Http://www.bkjia.com/ SQL .php? Id = 1 + and (select 1 from (select count (*), concat (select concat (0x7e, version (), 0x7e ))) from information_schema.tables limit 0, 1), floor (rand (0) * 2) x

Traffic hijacking. After a period of silence on this old attack, it has recently started to stir up. Many well-known brands of routers have successively discovered security vulnerabilities, attracting domestic media reports. As long as the user does

Cross Site Request Forgery (Cross-Site Request Forgery) is a type of network attack, the attack can send a request in the name of the victim to the attacked site without the victim's knowledge, so that the operation under the permission protection

Previous: http://www.bkjia.com/Article/201406/310931.html introduced the system, although can defend against simple inline XSS code, but want to bypass is still very easy. Because it is in front-end protection, policy configuration can be found in

Default weak password account in the mailbox system of Beijing chundi Network Information Technology Service Co., Ltd. + privilege escalation for common users + password modification for any account + deletion of any files Jindi mail system has a

The Ubb tag of ThinkPHP has a code highlighting function that meets the following requirements: When xxx [/c ode] or [p hp] xxx [/p hp], it reads the xxx in the middle and highlights it. xxx is the path, not the specific code, for example, 1. After

Web substation SQL injection and sensitive information leakage an injection point... and a leakage of sensitive information ...,,,,Http://licaike.hexun.com/GjzDetail.action? ProdCode = 400008 & prodType = SThe prodCode has a problem.An error is