Cloud Security

This is my summary of writing a simple compression shell. During this period, I read a lot of materials, learned a lot of code, made a lot of notes, had some care and experience, and hoped to share and learn with you. Once again, I would like to

I have been learning about cracking recently. It is best for new users to find some typical learning methods. I have a software fit in my hand, so I uploaded it for them to learn. PASS the software. Use OD to open the software. First, find the error

Yesterday, I suddenly had a q, saying that I had a problem with the decryption method of a blog post I wrote. I asked him to check it out. It was too late yesterday and I had to take the test again today, so I went to bed, this afternoon, I just

I always wanted to learn how to move the pe file. After studying several articles, especially those in the cold morning, I tried to add a section and modify the oep myself, write it out for progress with the same dish as me.1. Add operations

[Shelling author] instantly stunned[Author email] [email] RegKiller2002@yahoo.com.cn [/email][Tools] OllyDBG, LordPE, ImportREC, PEiD v0.94[Shelling platform] WinXP SP2[Software name] Win98 notepadSoftware size: 568 KBProtection options: Standard

One-step tracing method: 1. Load OD without analyzing the code.2. Near CALL-F7, far CALL-F8, realize the jump down.3. There is a hop, And the next code is-F4 (right-click the code breakpoint and run it to the selected one)4. Large jumps (large span

The program in this article: http://www.fractalpc.com/resources/SetupFractalPC30.exeObtain the complete input table:Breakpoint: GetModuleHandleA. A normal breakpoint must be placed at the end of the function. Otherwise, it will be detected. When the

You may have seen such a vulnerability. Here we take the crazy Jiafu technology cms upload vulnerability as an example. Google Keyword: inurl: newslist. asp? NodeCode = Exp:Admin/uploadfile. asp? Uppath = mad. asp & upname = & uptext = form1.mad.

The vulnerability occurs on the android client of Yilong. All data on the Yilong Android client is transmitted in plaintext, including the login name and password. No problem is found during the test of hotel reservation because the server verifies

From the multi-play substation, let's review the previous two pop-up methods. Site: http://y.duowan.comPop-up window 1:The first pop-up window is easier to implement. Due to the vulnerability repair, it is impossible. To put it bluntly, you have to

In addition to posting this article, you can also post the FAQ in the tianma xingkong jar for your convenience.By: 0x0F3r From Discovery to exploitation, this vulnerability is a pain point.Let's talk about the process,Open the

First, focus on: first, a dom-type xss. url parameters are output in js. Original url in http://www.mogujie.com/upload/addpic? Callback = parent; prompt (/test/); // & code = 3002 it is easy to pop up the window at the beginning, but Jianxin tells

Title: phpMyRecipes 1.2.2 SQL Injection Exploit author cr4wl3r http://bastardlabs.info http://sourceforge.net/projects/php-myrecipes/files/ Demo: http://bastardlabs.info /Demo/phpMyRecipes.png Test System: Ubuntu Linux vulnerability page: viewrecipe.

Which of the following statements about injection attacks have been discovered very deeply? Common injection attack statements are also known to attackers, such as the classic 1 = 1, bamboo classifies these injection attacks into three categories:

I have to say that point N is really a broken thing, even if it is a commercial version developed by him, even if the commercial version comes with security settings, it won't be able to hide its tattering. Well, it's okay to complain. Next, the key

1. php: // The description in php.net, http://php.net/manual/zh/wrappers.php.php . Php: // filter is a metadatabase that is designed for filtering applications when data streams are opened. This is very useful for all-in-one file functions, such as

Problem site is: http://qing.weibo.com now my Weibo fans only 5 people ha! 3. I am looking for my personal attention. Pay attention to packet capture at this time! The post request is as follows: POST/blog/api/attentionpost. php HTTP/1.1 rialog = A00

The backend QvodCms_CreateHtml.asp can be accessed without logging in. The "generate custom template" can generate any file, the file content, and direct to any file on the website. Custom template save path: Config Solution:Add the

1. In the Renren advertising system, due to a defect in permission settings, you can access and modify any user or enterprise advertisement at will. 2. First, find the ad link on the homepage, and analyze the ad ID in this connection. The ad url

263 The helpcenter.263.net communication help center has an SQL injection. The user is root. As a big site, it may cause serious information leakage. Access http://helpcenter.263.net//plus/search.php with a browser? Keyword = as & typeArr [111% 3D @