Cloud Security

Kingsoft guard Stack Overflow Vulnerability (DoS attack allowed) Details: Kingsoft guard Stack Overflow Vulnerability STATUS_STACK_BUFFER_OVERRUN encountered(1c50.1f10): Break instruction exception - code 80000003 (first chance)*** ERROR: Symbol

0x00 Memcache Overview Memcache is a high-performance distributed memory object cache system. By maintaining a unified and huge hash table in the memory, Memcache can be used to store data in various formats, including image, video, file, and

Since almost all hacking tools and platforms are developed on Linux/Unix systems, this series of tutorials is designed for those who want to become hackers but are not familiar with Linux. We have learned some basic commands in the previous

After ln-s is used, the main usage code for accessing private directory files is as follows: xhrContent code is as follows: Wait a few seconds.public void donow(){try{cmdexec("mkdir " + "/data/data/com.example.testtiantian/tmp/");cmdexec("echo " +

When talking about SQL servers, almost all system administrators and database administrators agree that not all administrators are aware of complex passwords. It seems that this may be convenient for technical support personnel to perform simple

Application Fingerprint RecognitionFingerprint recognition is the first step in web application testing. Fingerprint Recognition provides a lot of useful information for testers. To some extent, it exposes the vulnerabilities of other

With the widespread use of web, more and more enterprise websites mix user-generated content, online live broadcast, and interactive content with traditional images and texts. However, Web2.0 has a huge impact on enterprise security. Many Web

Different from COOKIE, SESSION is a file stored on the client, while SESSION is stored on the server, enhancing the security. If the verification method of a WEBSHELL is SESSION, we can detect the server Trojan.My environment is IIS + PHP, in PHP.

Background do not introduce the database injection vulnerability in jspcms of jsppeng. This cms system has been widely used and tested on some sites in major universities in Jiangsu Province. In jspcms 60%, there are multiple versions of jspcms,

MetInfo: The latest SQL blind injection vulnerability allows you to blind administrator information. D: \ wamp \ www \ MetInfo5.2 \ img. php Row 7th $ dbname can overwrite this variable Http: // localhost/case /? Settings [met_img] = met_admin_table

Information Detection: Target Site: http://icfcs.xxxxx.jpServer IP: 210.166.xxx.76 (Japan)Environment platform: PHP/5.1.6Server System: Apache/2.2.3 (Red Hat)Open the home page of the website, open a link at will, and manually test whether the

In fact, you can find out how to use the xss .. But the account is hijacked. You may think there are two difficulties. I will teach you here .. 1. If the victim's cookie is received. In fact, you can make a script on your website to collect cookies..

In the early days, we used xss in this way. Transmit data such as cookies to your serverHowever, for more complex attacks, remote js loading is required due to restrictions such as string length. A simple example This is more concise The src

I. IntroductionCitrix XenApp™It is an on-demand application delivery solution that virtualizes, centrally deploys, and manages all Windows applications in the data center, it can also serve as a service and deliver applications to all users through

1. First, let's talk about the front-end service. It is estimated that many sites have been supplemented. It is targeted at phpcms 2008, the second attack category, and the second parsing getshell. In upload_field.php  $ upload_allowext =! Empty ($

Website security is a top concern for every website developer and operator. Once a website has a vulnerability, it will inevitably cause great losses. In order to improve the security of the website, the website should first prevent injection, and

The error is a common function, so there are more than one injection. Here we will use something that is relatively simple to use for writing. Lib/default/ballot_act.php Function index_action () {if (front: post ('submit ') {if (! Front: post

When I post for the first time, I will give you a thought of yesterday.Tested CMS: site building star.Because it is easier for SEO to do pseudo-static operations, many CMS also have pseudo-static operations. However, pseudo-static is mainly used to

Baidu album, which is not filtered somewhere, exists in XSS Cross-Site 1. baidu post bar has a function to add images to favorites 2. click "add to Favorites" to capture the request. 3 has been added to favorites. this is a get request. 4. copy this

You can directly upload a dynamic script to obtain webshell. Download the cms code from the official website. In the edit directory under the source code directory, the batupload. aspx file is decompiled to see the source code as follows: protected