Cloud Security

The security configuration of Win2000 Server, after carefully configured Win2000 Server, can defend against more than 90% of intrusion and penetration. However, system security is a continuous process, with the emergence of new vulnerabilities and

By bbs.powers.com.cn (Note: The following issues are discussed in the ntfs file system) Set internet user permissions.For more information about how to delete virtual directories in iis, see IISHelp, IISAdmin, IISSamples, and MSADC.Useless

Security Protection is provided wherever privacy exists. As an important security protection method, encryption can be used in wireless network applications. With the popularity of wireless networks, it is not surprising to search for wireless

Ideas:Get the injection point and WEB root directory, and export the SHELLInstance:Successful injection:Http://www.abc.com/news.jsp? Id = 2The mysql version is later than 4.0. For various reasons, the load_file cannot be implemented by the union

Generally, browser ddos is mainly used to crash the browser, but has not seen any real anti-attack methods applied in the business. In a recent case, the attack steps are as follows: 1. attackers steal accounts and use tools to constantly refresh

① First, we must ensure the absolute security of our servers. I usually set the root password to more than 28 characters, and only a few people must know the root password for some important servers, this is set based on the company's permissions.

Even inexperienced administrators can successfully deploy Microsoft Office SharePoint Server 2007 within several hours. Although the basic deployment can be used normally, it is likely to achieve optimal security without the corresponding

WPA2 wireless security protocol recently discovered a shocking vulnerability! The reason for this article is that AirTight commented that, due to a neglected vulnerability, WPA2 is a "strong external engineer" and attackers can crack Data

Attackers often launch malicious attacks on the LAN. Generally, attackers use software such as "cyber law enforcement officer, network scissors, network agents, and P2P Terminator" to send packets to change the MAC address corresponding to the

Software Security In recent years, ActiveX control security problems have become increasingly serious. From anti-virus software to thunder, to violent audio and video players, it is truly a wave of waves. Recently, a RealPlayer ierpplug. dll ActiveX

Yuan Ge Advanced Heap Overflow exploitation skills 1. The peb address is in the normal mode 0x7ffdf000, And the peb loading address in the 3 GB mode is 0x7ffff000. Normally, 3 GB is rarely used. 2. Global function pointer peb offset 0x20, 0x24, and

Jon Oberheide presents a kernel exploitation challenge on CTF: Http://jon.oberheide.org/blog/2010/11/02/csaw-ctf-kernel-exploitation-challenge,It is actually a kernel stack overflow. It is said that only one team completed the exploit program and

By: riusksk (quange)Blog: http://riusksk.blogbus.comWhen the revc function is disconnected, we track and analyze it step by step and come:00401DE0>/$56 PUSH ESI00401DE1 |. 8BF1 mov esi, ECX00401DE3 |. B9 00040000 mov ecx, 40000401DE8 |. 6A 00 PUSH 0;

Wireless Networks are mostly used by families or companies. It facilitates Internet access and becomes an insecure channel of the network. Different levels of security options and configuration parameters may cause insecure installation. Although

1. cmd restore Storage Dbcc dropextendedproc ("xp_cmdshell ");Dbcc addextendedproc ("xp_mongoshell", "xplog70.dll ");Dbcc dropextendedproc ("xp_dirtree ");Dbcc addextendedproc ("xp_dirtree", "xpstar. dll ");Dbcc dropextendedproc ("xp_regread ");Dbcc

 Address: http://www.exploit-db.com/exploits/16940/ /*# Exploit Title:. NET Runtime Optimization Service Privilege Escalation# Date: 03-07-2011# Author: XenoMuta# Version: v2.0.50727# Tested on: Windows XP (sp3), 2003 R2, 7# CVE: n/ __________|/_ ___

Many of my friends accidentally hung up while sniffing. That regret .....Of course, you should choose as few services as possible to sniff. For example, if you want to sniff 1433 and 80 of the target, it will be useless if you sniff other

BlackICE software company barcode SDK (BIDIB. ocx) Arbitrary File Download and memory damage Url: http://www.blackice.com File: BIDIB. ocxVer.: 10.9.3.0CLSID: {D2797899-BE27-4CDB-892F-4FDC26EA9BA9} Flag.: script RegKey security: TrueInit RegKey

Vulnerability Update Time: Vulnerability causeDesign ErrorHazard levelLow Impact SystemDebian bind 9 Unaffected System HazardsRemote attackers can exploit this vulnerability to stop the BIND service program from responding. Attack

Usually collected-generally, the server reads a small amount of information from the registry if it has little restrictions on the registry. HKEY_LOCAL_MACHINESYSTEMControl001Services # obtain some service informationHKEY_LOCAL_MACHINESOFTWARECat