Cloud Security

From dark visitor How can websites prevent common XSS cross-site scripting attacks? Let's start with the principle of XSS cross-site scripting attacks. Basic Principles of XSS cross-site scripting attacks on websites 1. Local exploitation

Nowadays, various hacker tools can be seen everywhere. They can be used to launch malicious attacks on computers on the Internet, or even exploit system vulnerabilities to intrude into and steal personal privacy information. Therefore, you must

About partitionsIf a potential hacker attempts to attack your Linux server, he will first try Buffer Overflow. In the past few years, buffer overflow is the most common form of security vulnerabilities. More seriously, the buffer overflow

Surging clouds   The Struts2 wave is indeed very fast, and it also has something to do with POC. I wanted to write something, but I found thatNeeao has already been written very well.I don't want to draw any more.It is recommended that

The. exploit-db website broke out in July 14Struts2 Remote Arbitrary Code Execution VulnerabilityThis vulnerability is very harmful. It can be said to be the root of a hundred machines. As long as the Struts2 and webwork framework systems are used

Recently, this vulnerability is very popular. In short, it is a malicious constructed shortcut that can execute file code.Only a few learning skills + limited time, the specific content will not talk about, just put some connections up. Symantec's

General ApproachGeneral Method1. Identify which log sources and automatic tools you can use during the analysis.Confirm which log sources and automated tools can be used during analysis.2. Copy log records to a single location where you will be able

Linux is a Unix-like operating system. Theoretically, the design of Unix itself has no major security defects. For many years, the vast majority of security problems found on Unix operating systems mainly exist in individual programs. Therefore,

These locations are often exploited by viruses to gain control of the system as soon as possible at startup, thus damaging the user's computer. These self-starting locations

In modern life, passwords are like locks in our lives. The purpose of locking is to prevent intrusion. However, when we use scientific means to simplify our understanding of the world, we fall into the network of Self-woven passwords-often, while

This article analyzes the information security situation and status quo, and describes the impact of the virus industry chain composed of vulnerability mining and vulnerability exploitation on existing security technologies and concepts. According

Html "target = _ blank>Peng I saw some people comment on the articles I wrote a long time ago, so I read them again. In fact, I still agree with my own point of view. I just don't want to think about these things now, these are just the issues I

Affected Versions:Linux kernel 2.6.x vulnerability description:Bugtraq id: 42900,42936Cve id: CVE-2010-2954 Linux Kernel is the Kernel used by open source Linux. The irda_bind () function in the net/irda/af_irda.c file of Linux Kernel has an error

Surging clouds Two days ago, I saw eggplant playing...Http://www.packetstormsecurity.com/1009-advisories/ie8-forcedtweet.txtIt is also a very serious vulnerability. We all know that the same-origin policy restricts scripts from reading data across

If you don't understand what CSS-String-Injection is, read the blog of the following two cool people:《Another powerful cross-origin Vulnerability"Htmll "target = _ blank>IE8 CSS cross domain bug"In fact, I am talking about a problem, but I think the

Affected Versions: Squid Web Proxy Cache 3.2 Squid Web Proxy Cache 3.1 Squid Web Proxy Cache 3.0Vulnerability description: Bugtraq id: 42982Squid is an efficient Web Cache and proxy program, initially developed for the Unix platform, Now it has

The IP address is equivalent to the house number of the network user. The so-called IP Address Spoofing means that an attacker impersonates another person's IP address and sends packets. Because the IP protocol does not authenticate the IP address

Zero-day attacks can destroy a network. They will attack vulnerabilities in applications that developers do not know or have not developed the corresponding patches. Hackers can exploit these vulnerabilities to execute code on your network, or even

Although the virtual data center can save costs and improve efficiency, it is estimated that only about 16% of all servers have been virtualized. In addition, many CIOs say they have not moved to virtual or cloud computing models because they are

Affected Versions:Linux kernel 2.6.x vulnerability description:Cve id: CVE-2010-2653 Linux Kernel is the Kernel used by the Linux operating system. In Linux Kernel, the drivers/char/hvc_console.c driver has a race condition in the hvc_close