Cloud Security

Firewall Technology In ancient times, people often build a brick wall between apartments. Once a fire occurs, it can prevent the fire from spreading. Extend to another apartment. Naturally, such a wall is named "firewall ". Now, if a network

Author: news source: Computer newspaper In the article force-Close processes that cannot be killed, the methods mentioned need to use third-party software. Is there a simpler idea? Here I will provide you with two tips to help you forcibly kill the

The purpose of this article is to let everyone know what to do after encountering a Trojan. This trojan is my first contact. I think it will be helpful to you in my experience in Trojan killing. I have not studied the details of this trojan, such as

Recently, I had heard of the unserialize issue, but I did not study it carefully. During this period of time, I saw the use of the unserialize function while auditing a system. It took me some time to study it. At the same time, I would like to

1. http://www.buynow.com.cn/search.php? Goods_id = 122079535 [SQLi]2. http://www.buynow.com.cn/article.php? Article_id = 220 [SQLi]3. http://www.buynow.com.cn/goods_kinds.php? Act = list & cat_id = 50020211 [SQLi]4. http://www.buynow.com.cn/help.php?

After initiating this post, it is estimated that many people will not bother to see the question. In the PHP + MySQL environment for a long time, no matter whether it is a program or an injection attack, it is impossible to execute multiple

If the original comparison information such as snapshot, Hash, and timestamp is not retained, this can only be traversed ...... The Method for Determining the file modification time is not advisable because the attacker may greatly modify the file

5173 the verification code of an application is so scum: http://promotion.5173.com/CodeAward/pages/vildcode.aspxDirect:Set-Cookie: Code = YO6A; expires = Fri, 09-Mar-2012 09:20:51 GMT; path =/ What are you doing with the verification code? To reduce

This vulnerability is very similar to the original vulnerability method! Enable iis6 registration when two conditions are met Register an account-> document attachment management-> upload a file. Before creating a new directory, you can create a *.

Developer Website: pluxml.orgAffected Versions: 5.1.5 and earlierTested version: 5.1.5Patch time: 16 10000l 2012Problem type: local file inclusionRepair status: author correctedHigh riskLogs High-Tech Bridge SA Security Research Lab has discovered

Log on to the show group, click "forgot password", and select "Reset mobile phone number ".Http://tuan.xiu.com/account/repass.phpEnter the mobile phone number of the account and click "Get Verification Code". Capture packets or use firebug in

SQL Injection on a channel of catwalk network and security problemsDetailed description:First, some information leaks:Http://media.xiu.com/info.phpHttp://media.xiu.com/user.phpHttp://media.xiu.com/test. SQL Then we found SQL

 First thought like this: The client uses a kitchen knife, the password is cmd, And the url is test. php? Ts7 = assert There is no signature, but the disadvantage is that assert is exposed in web logs. You can use post:  Append data with ts7 =

PS. It seems that someone has mentioned traffic attacks. In this case, it is recommended to find a hard-defense machine, a large-bandwidth machine, or shut down the machine directly. We will not discuss it here,CC attacks only consume personal

About the administrator password.In this article, you have obtained the MD5 of the administrator password! I do not know that the ec Administrator password encryption method has changed from that version. $ ec_salt = rand (1, 9999); md5 (md5 ($ pwd )

Just a while before I got started, my website has been infected with Trojans, and the basic website has been under attack. I have been busy solving this problem. Today, I have made some achievements, so I will share with you. If you have any good

Insert the QQ space log into XSS to enable friends to open a pop-up window in their QQ spaceIn fact, I don't know what XSS is. I also accidentally discovered it! A pop-up window appears when a friend opens his QQ space! You can try it!I don't know.

To obtain the visitor's real IP address, most users assign the visitor's real IP address to X-Forwarded-For (XFF ). However, because XFF is an HTTP request header with http _ at the beginning, such http information can be forged. In fact, these

1. Use the character filtering vulnerability to submit malicious js Code. When the user opens the page, execute 2. Enter the image address, css, and other places that are directly executed during page loading, enter malicious javascript [javascript:

There is a magic array in the country's micro PHP168, which can cause full-site user data leakage. The leaked content includes the password ciphertext, email address, password salt, IP address, and other sensitive information of the whole site user.