Cloud Security

BypassUAC: A Windows UAC bypass Tool     BypassUAC BypassUAC is a tool that uses the built-in AutoElevate backdoor in Windows to break Windows User Account Control (UAC) mechanism. System environment requirements 1. x86-32/x64 Windows 7/8/8.1/10

More than App Store game and application storage vulnerabilities are vulnerable to hacker attacks More than 1000 apps in the Apple App Store have security vulnerabilities and are vulnerable to hacker attacks, according to a research report released

The vro prohibits web version logon, computer logon, and LAN chat.Currently, refreshing the circle of friends is common for office workers. In particular, many office workers are still logging on to the web edition on their computers, making it

Lan sharing permission settings: xp has no permission to access win7 share, and win7 has no permission to access xpLan sharing permission settings have always been one of the network skills that administrators must master. However, because the

Android Application Security Development to prevent unintentional data leakage 4th of the Top 10 OWASP mobile security vulnerabilities are unintentional data leaks. When an application stores data in a vulnerable location, it may cause unintentional

OpenSSL high-risk vulnerability allows attackers to decrypt HTTPS traffic OpenSSL maintainer fixes a high-risk vulnerability that allows attackers to obtain keys to decrypt encrypted traffic such as HTTPS. Although the potential impact of the

Concepts about RSA, public key, private key, encryption, and signaturePreface As a programmer, I often hear such words as encryption and decryption. Asymmetric encryption is widely used. This article does not describe the principles of encryption

263 Improper configuration of an internal O & M platform for communications leads to executable system commands Misconfiguration, weak password for O & M personnel It is a shell with the root permission ..  Http: // 211.150.76.88: 8000/console

Leakage of sensitive information in multiple parts of the giant's Network (game source code + game documentation + website background + official forum + beauty baby certification) Leakage of sensitive information in multiple parts of the giant's

A large number of users in the giant's network can log on to multiple systems with their default passwords A large number of users in the giant's network can log on to multiple systems with their default passwords Http://wooyun.org/bugs/wooyun-2010-0

How can I confirm your Vulnerability (discover Shell) How can I confirm the vulnerability on the giant network? Test found.[Email protected]1qaz2wsx! @#The account registered by the giant's network on the day of completion is a weak

Learning web security from scratch (2) The previous article explains some basic xss knowledge. This article continues to study. I mentioned some theoretical things in the previous article, and I soon forgot about it. After a brief review, we will

Misuse image blogs for C & C Configuration 0x00 background A few months ago, I saw an article about Hammertoss malware in Russia, using Twitter as the C & C service. The abuse of TechNet in a similar way has also been reported [1 ]. After a brain

12306 at least four deep SQL injection vulnerabilities in the official Mailbox System Don't look at the title to find the vulnerability. Don't bother!The downloaded tangscan plug-in is amazing! The downloaded tangscan plugin detects  Http://mail.123

There is no need to log on to SQL injection in the Kai Lai OA system (with many cases) No Logon required Kai Lai technology OA system:Http://www.qioa.cn/product/xsd.htmlCustomer case:It affects many government and enterprise customers, but the case

A vulnerability in youxin can cause Intranet roaming (involving a large amount of internal Sensitive Information) It only proves that the vulnerability exists.Are you still recruiting security personnel? There are many problems. There are no

Jiuyou pseudo-static SQL injection involves 6.43 million user account and password information As soon as nine games are mentioned, my heart will hum: the vast world is my love ......    Proof of vulnerability: Web application technology: NginxBack-

Incorrect configuration of a system in caoxin capital results in the Intranet access of the Getshell server. If the system is improperly configured, The getshell server can access the Intranet. Address: http: // 123.57.91.68/level2.jsp? Caid = 002 

A system patch is not timely, causing shell execution to threaten 84 Intranet hosts. If the patch is not timely, can the command be executed at a high level? Address: http: // 218.89.135.237: 9000/hd/  This is the windows system s2-005 Command

Getshell can be used for a substation on the 19th floor. Getshell can be used for a substation on the 19th floor. It has been more than a year since the last Intranet roaming on the 19th floor. Some of them opened the dusty notepad and suddenly