Familiar with concepts and preparations

This is my summary of writing a simple compression shell. During this period, I read a lot of materials, learned a lot of code, made a lot of notes, had some care and experience, and hoped to share and learn with you. Once again, I would like to

Cainiao cracking example

I have been learning about cracking recently. It is best for new users to find some typical learning methods. I have a software fit in my hand, so I uploaded it for them to learn. PASS the software. Use OD to open the software. First, find the error

Manually add pe section and modify oep

I always wanted to learn how to move the pe file. After studying several articles, especially those in the cold morning, I tried to add a section and modify the oep myself, write it out for progress with the same dish as me.1. Add operations

Conversion of MD5 password digits

The full name of MD5 is Message-Digest Algorithm 5 (information Digest Algorithm)You can manually convert between 32-bit and 16-bit passwords. You only need to remove the first eight and last eight digits of the 32-bit password format, in this way,

The software is simple, except for advertising.

QQ: 283626198, the younger brother is very good, Don't P me D brother will ah D injection tool v2.32 artifact unlimited version, the younger brother in the military spectrum do not know whether there is a backdoor? It's a pity that the official

Exposing AMR privacy-od arm program with KEY removed by hand

04x

[Shelling author] instantly stunned[Author email] [email] RegKiller2002@yahoo.com.cn [/email][Tools] OllyDBG, LordPE, ImportREC, PEiD v0.94[Shelling platform] WinXP SP2[Software name] Win98 notepadSoftware size: 568 KBProtection options: Standard

Basic manual shell removal knowledge

One-step tracing method: 1. Load OD without analyzing the code.2. Near CALL-F7, far CALL-F8, realize the jump down.3. There is a hop, And the next code is-F4 (right-click the code breakpoint and run it to the selected one)4. Large jumps (large span

Summary of messy Softwrap shelling

The program in this article: http://www.fractalpc.com/resources/SetupFractalPC30.exeObtain the complete input table:Breakpoint: GetModuleHandleA. A normal breakpoint must be placed at the end of the function. Otherwise, it will be detected. When the

General Contract Management System 1.5 Registration Algorithm Analysis

 [Document title] General Contract Management System 1.5 Registration Algorithm Analysis[Author] XXNB[Author's email][Author Home Page] http://free.ys168.com /? Binbinbin7456[Cracking tool] OD[Cracking platform] XP SP2[Software name] General

Tencent Weibo, a dual-purpose DOM-XSS, reflection, backdoor

A hacker posted a microblog containing the word "once a month. Out of curiosity, I clicked in. Then open the XSS scanner under development, so there is this article... 1. I saw this microblog. I clicked it out of curiosity about the "keyword"

Modify url parameters to break through the upload restrictions and use webshell.

You may have seen such a vulnerability. Here we take the crazy Jiafu technology cms upload vulnerability as an example. Google Keyword: inurl: newslist. asp? NodeCode = Exp:Admin/uploadfile. asp? Uppath = mad. asp & upname = & uptext = form1.mad.

Iron travel network 1 yuan to buy a ticket

The vulnerability occurs on the android client of Yilong. All data on the Yilong Android client is transmitted in plaintext, including the login name and password. No problem is found during the test of hotel reservation because the server verifies

Mogujie.com xss, which is used to filter out cookies

First, focus on: first, a dom-type xss. url parameters are output in js. Original url in http://www.mogujie.com/upload/addpic? Callback = parent; prompt (/test/); // & code = 3002 it is easy to pop up the window at the beginning, but Jianxin tells

IN statement INJECTION SKILLS

Which of the following statements about injection attacks have been discovered very deeply? Common injection attack statements are also known to attackers, such as the classic 1 = 1, bamboo classifies these injection attacks into three categories:

Netease album reflective xss, which can take user cookies (including results and processes)

Netease photo album users' feedback is reflected in xss, so users can easily get their cookies. I have already submitted this document. I am hereby submitting the document because I have not provided any proof of case... Bytes1. In the feedback area

Point N commercial edition vulnerabilities: 0-day elimination and exploitation methods

I have to say that point N is really a broken thing, even if it is a commercial version developed by him, even if the commercial version comes with security settings, it won't be able to hide its tattering. Well, it's okay to complain. Next, the key

Php: // use of filter in php Vulnerability

1. php: // The description in php.net, http://php.net/manual/zh/wrappers.php.php . Php: // filter is a metadatabase that is designed for filtering applications when data streams are opened. This is very useful for all-in-one file functions, such as

How do I brush tens of millions of followers of Sina's loose blog?

Problem site is: http://qing.weibo.com now my Weibo fans only 5 people ha! 3. I am looking for my personal attention. Pay attention to packet capture at this time! The post request is as follows: POST/blog/api/attentionpost. php HTTP/1.1 rialog = A00

Movcms does not log in to view the file source code

The backend QvodCms_CreateHtml.asp can be accessed without logging in. The "generate custom template" can generate any file, the file content, and direct to any file on the website. Custom template save path: Config Solution:Add the

Renren advertising system arbitrary advertisement Modification & amp; stored xss

1. In the Renren advertising system, due to a defect in permission settings, you can access and modify any user or enterprise advertisement at will. 2. First, find the ad link on the homepage, and analyze the ad ID in this connection. The ad url

Total Pages: 1330 1 .... 1085 1086 1087 1088 1089 .... 1330 Go to: GO

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.