Cloud Security

KANG Sheng's authcode function can be said to have made significant contributions to the Chinese PHP community. Including kangsheng's own products, and most Chinese companies that use PHP use this function for encryption. authcode uses exclusive or

Generally, the following keywords are used to filter strings:And | select | update | chr | delete | % 20 from |; | insert | mid | master. | set | =The most difficult thing to handle here is the select keyword. How can we break through them? Although

Fengxun foosun's registration file has a vulnerability. Hackers can use brute-force Administrator accounts and passwords. Vulnerability file: www.2cto.com/user/SetNextOptions. aspSimple Method: Violent Administrator

Today, I went to t00ls and found that someone was discussing webknight and I set up an environment locally yesterday. So I 'd like to see if I can skip webknight.Problem 1. By default, the software does not intercept background logon boxes 'or' =

1) Common XSS JavaScript injection (2) IMG Tag XSS use JavaScript commands (3) IMG labels without semicolons and without quotation marks (4) the IMG label is case insensitive. (5) HTML encoding (a semicolon is required) (6) modify the defect IMG

The easy-to-shop demo site has the file traversal vulnerability and can read the source code of any file. SnFirst Login easy shop demonstration station Background: http://demo.ekaidian.cn/shopadmin/index.php? Ctl = passport & act = loginEnter an

Many people know that NetBIOS is a popular transmission method in the computer LAN field, but do you still know that NetBIOS is a major security risk for Internet users.I. NetBIOS troublesNetBIOS refers to the network input and output system. In the

Title: OneFileCMS v.1.1.1 Multiple Remote VulnerabilitiesAuthor: mr. pr0n (@ _ pr0n _)# Homepage: http://ghostinthelab.wordpress.com/-http://s3cure.gr: Http://onefilecms.com/download/onefilecms_site_v1.1.1.zipTest version: OneFileCMS v.1.1.1Test

Register a member first, then .. Upload the trojan text of a zip fileShell address: http://www.admin5.com/plus/mytag_js.php? Aid = 999.In fact, there are still some processes, that is, the directory that can be uploaded cannot be executed, and the

When I opened it, I found that my number was blacklisted. The speed returned to the post. I was nervous. I found a system for the speed. Okay, I admit that I just read it, the array is not filtered and directly submitted to the query statement. The

SQL Injection 1:Vulnerability in file \ source \ cp_profile.php $ Value ){If ($ value ['formtype '] = 'select') $ value ['maxsize'] = 255;$ Setarr ['field _ '. $ field] = getstr ($ _ POST ['field _'. $ field], $ value ['maxsize'], 1, 1 );If ($ value

The background seems to have changed. It's just a simple sweep. The weak password is also met. You can also upload a specific type to obtain webshell.Detailed Description: Background path: Http://www.50cms.com/root/login.aspx   Weak password:

Remember that the previous blog recorded an error injection Article {Injection Technique: how to inject and use mysql three error Modes}, Today I saw another, and then share it with everyone http://xxx.cn/qcwh/content/detail.php? Id = 330 & sid = 19

1. user input output as is Method of exploits: xss attacks are carried out directly at the output location. Solution: to filter, the most common such as filtering, the following content input: http://xxx.com /? Umod = commentsoutlet & act = count &

Let's take a look at the features of MySql versions. Less than 4.0 does not support union queries The default value of magic_quotes_gpc above 4.0 is on (magic_quotes_gpc = onWhen magic_quotes_gpc in php. ini is On. All '(single quotation marks),'

Write a cainiao article. This website was launched on December 20 ,. The time relationship is written only today. Let's take a look at the website. The main site. I checked that there are no vulnerabilities.Take out the [Fans] Daniel wwwscan

MetInfo released the new version 5.1.5 on the 23rd and fixed the vulnerability mentioned in this Article. Of course, it should strictly be an arbitrary variable overwrite vulnerability .... ps: You are welcome to repost it in various forms. The

0x1: Information Network collectionThe curl header can be used for reference based on the penetration experience of the small series. The header can be obtained as follows: here, the centos installation curl yum install curl is automatically

0x01 for constructing get and post requests, all operations on the web can be completed as long as you have get or post requests. As mentioned in this http protocol, for the rooster side, allows the browser to send requests using javascript Var img

Summary PHP is a very popular Web development language. Many Web applications on the Internet are developed using PHP. PHP file inclusion is a common vulnerability in Web applications developed using PHP. Using PHP file inclusion vulnerabilities to