Cloud Security

Startup attack analysis for Linux system full encryption Recently, our tan digital technology (GDS) researchers have discussed the cold start attack on Linux system full encryption. Everyone thinks this attack is feasible, but how hard is it to

Mozilla Firefox Denial of Service Vulnerability (CVE-2015-7192)Mozilla Firefox Denial of Service Vulnerability (CVE-2015-7192) Release date:Updated on:Affected Systems: Mozilla Firefox Description: CVE (CAN) ID: CVE-2015-7192Mozilla Firefox

A Cisco router is detected infected with a secret backdoor. Security company FireEye researchers reported that backdoor programs called SYNful knock were found on 14 Cisco routers in 4 countries. Cisco has confirmed this. The attack does not take

EMC Documentum D2 Cross-Site Scripting Vulnerability (CVE-2015-0549)EMC Documentum D2 Cross-Site Scripting Vulnerability (CVE-2015-0549) Release date:Updated on:Affected Systems: EMC Documentum D2 4.5 Description: CVE (CAN) ID:

PHP '_ toString ()' function type obfuscation Information Leakage VulnerabilityPHP '_ toString ()' function type obfuscation Information Leakage Vulnerability Release date:Updated on:Affected Systems: PHP PHP Description: Bugtraq id: 74417PHP is a

D-Link DSL-2760U-BN multiple cross-site scripting and HTML Injection Vulnerabilities Release date:Updated on: Affected Systems:D-Link DSL-2760U-BNDescription:--------------------------------------------------------------------------------Bugtraq id:

ESRI ArcGIS for Server open Redirection Vulnerability (CVE-2014-5122) Release date:Updated on: Affected Systems:ESRI ArcGIS for Server 10.1.1Description:--------------------------------------------------------------------------------Bugtraq id: 69341

Samba nmbd NetBIOS Name Service Remote Code Execution Vulnerability (CVE-2014-3560) Release date:Updated on: Affected Systems:Samba 4.0.0-4.1.10Description:--------------------------------------------------------------------------------CVE (CAN) ID:

One-time password for security management in linux Linux servers have always been known for their stability, efficiency, and security. Security is an important part, which is related to commercial secrets and the survival of enterprises. This

Control Meterpreter through DNS TunnelUsing DNS to control targets and penetration benefits doesn't I need to talk about more? As we all know, If you do not open a port, you can bypass most of the firewalls, Which is concealed. Cobalt Strike has a

Firewall-based Easy VPN configuration process Objective: To enable a client on the remote Internet to access internal resources of the LAN through an encrypted tunnel by making Easy VPN on the gateway ASA firewall device.The following figure shows

Automatic Call of anti-virus software for red umbrella There is no technical knowledge about this thing. It starts a new process with the same code as the command line. To put it bluntly, anti-virus software is needed. For example, you can create an

Hackers decrypt the Wi-Fi code within one minute and steal user information. The national Internet emergency center (CNCERT) warned last weekend that a variety of mainstream router products currently on the market have backdoors, which may be

Oracle out-of-band release for Java SE Vulnerability Analysis (CVE-2016-0636)0 × 00 vulnerability Overview Vulnerability No.: CVE-2016-0636, a variant of the Vulnerability (CVE-2013-5838) that Adam Gowdiak reported to Oracle on 2013. Oracle has not

The patch for Mac keeper vulnerability is invalid and can still be bypassed for attacks. Recently, security expert Patrick Wardle said that the patch released by Apple to fix the Mac OS X keeper vulnerability is invalid and cannot protect the

Information Leakage from multiple important departments due to the theft of iron's intranet roaming in China (redis + ssh-keygen Authentication-free login case) What Sparks will redis face when it encounters ssh?Http://antirez.com/news/96Http://zone.

Moutai e-commerce has multiple SQL Injection packages in the background (DBA permission/17 databases/47W members) Note:Http://www.emaotai.cn: 90/zyd/ Account: wangleiPassword 123456Get submit method SQL injection point:Http://www.emaotai.cn:

IT orange multi-site SQL injection 4 (involving a large number of databases) [HD] building network security with personal glory in the name of a team  1.Data Packets:  GET /investevents?scope=1&similar_money=2&sub_scope=75 HTTP/1.1Cookie:

Webshell implementation and hiding1. What is webshellwebshell introduction webshell? As the name suggests, web refers to the web server, while shell is a script program written in scripting language. webshell is a web management tool, the permission

Analysis on the four pose of uploading files to the target system in penetration testingWindows debug Method Windows has a program called debug, which can convert the hexadecimal machine code into executable files. In Windows, the debug method can