Cloud Security

Log files are always a good tool for network administrators to find "disease sources" when checking for faults and troubleshooting network errors. However, due to the large number of Web log records, the analysis is difficult and the log

Smurf attacks are named after Smurf, the program that initially launched such attacks. In combination with IP Spoofing and ICMP reply, this attack method floods a large amount of network transmission to the target system, causing the target system

Summary This article will discuss the security of Apache WEB Server installation and configuration on the UNIX platform. We assume that the system administrator who has read this article has selected the relevant modules for his site, and can

Basic settings I. Four misunderstandings about online security The Internet is actually a world that comes and goes. You can easily connect to your favorite site, while other people, such as hackers, can easily connect to your machine. In fact, many

Currently, most virtual hosts disable the standard ASP Component FileSystemObject, because this component is an ASPProvides powerful file system access capabilities to read, write, copy, delete, and rename any files on the server's hard disk (of

I am very depressed because my DV Forum frequently uploads files with asp code. I want to solve the problem by using the following code: In my opinion, as long as you follow the following practices, you are not afraid to upload Trojans! The problem

Author: Huang Ying With the popularization of networks, network security has become more and more important. Today, we will introduce a very rare case. Writing this article is not to teach you how to attack others, but to raise your security

Sniffer is a common tool for collecting useful data. This tool monitors the network status, data flow, and information transmitted over the network. Internet Security System Company ISS defines Sniffer as: Sniffer is a tool that uses computer

Recommendation reason:In Windows, there is a client named tftp, which many hackers can use to upload some attack tools .......... This service was originally intended for the Network File Transfer Service. I did not expect it to become a "time bomb",

In the past few days, all the servers that run into it use windows security policies. For example, 3389 and 1433 can only access specific ip addresses. Even if the machine in the same network segment is completed, it cannot connect or scan some

Author: Matthieu Bonetti Riusksk (quange: http://riusksk.blogbus.com)   The recent (CVE-2010-4344) vulnerability has been widely exploited, allowing attackers to remotely launch attacks to systems that use Exim as a message transmission proxy and

OpenSSH is used as the SSH server on most Linux servers. Therefore, this article only applies to OpenSSH. In fact, these skills are very basic, but if you can use them well, it can indeed effectively improve the security of SSH. # The following

BlAck. Eagle [B. H.S. T] We are familiar with brute-force cracking techniques, but I have found brute-force cracking based on "Password Reset ".There are not many technologies, so I will introduce them in this article and describe the technologies

Nginx % 00 NULL bytes Arbitrary Code Execution (php) Vulnerability% 00. php to execute the codeAffected Versions:Nginx 0. 5 .*Nginx 0. 6 .*Nginx 0.7 Nginx 0.8 In vulnerable versions of nginx, null bytes are allowed in URIs by default (their presence

  I. penetration testing concepts The penetration test (penetration test) does not have a standard definition. Some foreign security organizations have agreed that penetration testing simulates malicious hacker attacks, to evaluate the security of

  In the previous article, we introducedCfengineFunctions, components, and Cfengine installation and required processes.Cfengine ConfigurationAnd client system preparation. Use Cfengine to reinforce the Solaris server. Iv. Cfengine

Disable the specified doscommandThe basic principle of this method is to restrict dangerous DOS commands to prevent unauthorized use of these commands to destroy hard disk data. The specific method is as follows:Use NotePad to open the Autoexec file

  Whether it is an increasing number of viruses, malicious hackers, or business theft, servers are the main attack targets for obtaining information. Obviously, server security issues cannot be ignored.   Nowadays, protection of important data is

The iptables script is a very simple iptables script. You only need to write the port to be opened to the "$ MPort" variable. Remember that up to 16 ports are allowed. Although this script is simple, it can meet our basic requirements. Sometimes,

First of all, this article is purely a guess. The actual situation must be different.   We can simulate an SQL injection attack that does not exist at all.   Return   405 Not Allowed -----------------------------------------------------------------