Cloud Security

Http://blog.xfocus.net/index.php? BlogId = 2 What are your biggest concerns if your machine is intruded? In the face of this problem, I think most people will say the following keywords:Secret leakage caused by theft of tools, source code, and

What are the effects of illustrations on normal pages? It can increase the click rate for the website or use it for voting. Isn't that incredible? If you don't believe it, let me talk about how to use it!Generally, the website counter is on the home

Buffer overflow is an advanced attack method that causes overflow by writing ultra-long content to the buffer zone. Destroying the program stack allows the program to execute other commands to create ROOT permissions. However, the effect can be seen

Author: Liu Bin Source: China Computer news Policy-based security defense With the continuous improvement of network attack technology and the continuous discovery of network security vulnerabilities, traditional firewall technology and traditional

Users no longer seem familiar with this topic. In today's network, users can often hear such incidents, such as the Tangshan hacker incident two months ago, the hacker technology used is DDOS attacks. What makes this attack method terrible is that

I. Web Server Security PHP is actually a module function of the Web server. Therefore, you must first ensure the security of the Web server. Of course, to ensure the security of Web servers, you must first ensure the system security. This is a long

Maybe you finally got a batch of Windows-based computers, but your boss asked you to confirm that they are safe and reliable before getting them out. How can you confirm? Or, some evaluators who only know the security knowledge target you, and they

The anti-Trojan method is only applicable to webpage Trojans, with an efficiency of more than 90%. It can prevent more than 90% trojans from being executed on your machine, or even Trojans that cannot be found by anti-virus software. Let's talk

Recently, I downloaded a Chinese: DameWare NT Utilities 4.9.2.6 mini control and got the pigeon trick. The process is as follows:1. Due to the habit of using the netstat-an command under cmd to find a strange connection:TCP 192.168.0.8: 3155 220.176.

There are indeed many articles on network security, but there are not many good articles on home computers. Therefore, we decided to write a comprehensive security guide for our ordinary netizens. Make sure that we can access the Internet happily

Some FTP commands on the ComSndFTP server (Version: 1.3.7Beta) have the format character overflow vulnerability, which can cause DOS and the consequences of remote system code execution.Proof of vulnerability:#! /Usr/bin/perl-w# ComSndFTP Server

Recently, it was found that Linux is scanning SSH, MYSQL, and FTP for brute force cracking! Specifically, I wrote a script program to solve the problem. In theory, this script can be used as long as it is an external network application service,

This method was published at xcon2012 xcon.xfocus.net.Kxlzx http://www.inbreak.net Flow this and step by step: 1, down load struts2-showcase from struts.apache.org2, run struts2-showcase.3. open url:Http: // localhost:

I, Cloud computing is very popular, and various cloud implementation methods are also divided into many schools. However, no matter how it changes, there are some basic types, mainly divided into SaaS, PaaS, and IaaS. PaaS (similar to online

For more information about the concept of alternate data streams, see the bigworm translation article "unfavorable NTFS". This article only describes how to access ADS on IIS. Let's take a look at a very old vulnerability: Microsoft IIS 3.0/4.0: $

Theoretical BasisMysql injection exists. If the injected sleep statement is input with a large enough parameter, for example, sleep (9999999999 ). if the database uses the myisam engine and the injection point is a statement that locks the table

By: a guest on Sep 24th, 2012 | syntax: Python | size: 6.92 KB | hits: 3,930 | expires: Never #! /Usr/bin/python## Finding targets 4 31337z:# Gdb/usr/sbin/smbd 'ps auwx | grep smbd | grep-v grep | head-n1 | awk '{print $2} ''#-> To get

Recently Android burst SMS smishing vuln, first from the http://www.csc.ncsu.edu/faculty/jiang/smishing.html, then the poc is provided on github,Specifically, it is anyAppInWrite_smsAttackers can forge any text message from any sender.Affected

Is there any other method besides netuser11/ad? Sorry, "netuser11/ad" has expired. Someone has already submitted it to 360. Adding a user to the system permission indicates that 360 will be blocked. Here we will share a VBS script Seto =

0x01SummaryIn an Ognl expression, the variable content contained in the brackets "()" is executed as an Ognl expression. This feature of the Ognl expression leads to a new attack idea. By storing malicious code in variables, and then using this