Cloud Security

As a popular Web server as the main target of global network spoilers and worms, IIS has become the focus of Microsoft's trustworthy computer operations. IIS has re-designed the default settings and security. This article discusses the major default

Scan is the basis for all intrusions. There are many host detection tools, such as the well-known nmap. I don't have any new technologies here. They are old things and old things. Even if I have been referring to the Phrack document or even a

1. Working PrincipleThe TCP/IP protocol model consists of four layers. The network interface layer is located between the network layer and the physical layer, and consists of the NIC and the device driver. Data on this layer can be sent and

With the popularity of wireless networks, it is not surprising to search for wireless signals in malls, streets, and restaurants. These wireless hotspots are generally free to provide wireless networks for everyone and do not encrypt the signals.

We often see that the general anti-injection program of a certain version filters injection keywords, such as "; | and | exec | insert | select | delete | update | count | * | % | chr | mid | master | truncate | char | declare | "," |, however, this

It has always been thought that there are only spaces, tab keys, and comments/**/which can be used to cut SQL keywords. During this time, I saw the post on Feng Xun cms injection vulnerability, only then can I know that the original carriage return

By empty waves. HTTP Response Splitting attacks mainly address two problems One is header insertion. The other is the problem. Let's look at the following code: Test As you can see, this seems to have a vulnerability, but it has been

Author: blocking (bloodthirsty)Source: zookeeper Security Team (Http://bbs.x-xox-x.com)Hello everyone, I am blocking. It seems like Christmas is over now. First of all, I wish you a merry Christmas!I have been preparing for the test recently. I have

Sometimes, when the database of the target website is too large and the backup times out, we can use the following statement to back up the webshell Alter database CaanCn set recovery full -- Drop table [banlg]; create table [dbo]. [banlg] ([cmd] [

Author:Sh @ doM When a BT website successfully uploads a PHP file, the file name will be changed randomly once each time it is accessed. If you access the current file by clicking another operation item, the file will still be renamed. Very helpless,

1. view basic MYSQL information (Database Name, version, user)And 1 = 2 union select 1, 2, 3, database (), 5, version (), 6, user (), 7 ..../* Ii. Violence tableAnd 1 = 2 union select, 3, TABLE_NAME, 6, 7... from information_schema.TABLES where

At present, there are too many modified versions of ewebeidtor lite and ewebeditor 216 on the Internet. This problem also exists in one version after the injection vulnerability exists. This was found some time ago when Zun Bao penetrated the

Surging clouds I 've been tossing suddy lately.XSLTSecurity question, he wrote a good blog: http://bbs.2cto.com/read.php? Tid = 60523 I want to add snacks today. Limited energy, only sloppy writing.XSLT 2.0 is more powerful, but not fully supported

Old Xie's blogSQL Injection. Generally, modifying a file one by one is not only troublesome but also dangerous. Next I will explain how to prevent injection from the entire system.In the following three steps, we believe that your program will be

From: cool kids blog  Conn. asp prevents injection,Ftbbsmyinfo. asp has another JB injection, out of stock ..Paste ftbbsmyinfo. asp source code: ASP/Visual Basic Code01. 02. postuserid = request. QueryString ("postuserid ")03. ftbbsuser = request.

WoYiGuis BLoG Watch XSS_Attacks _-_ Cross_Site_Scripting_Exploits_and_Defense _ (Syngress-2007) this book, it is estimated that many Daniel has read, ah, on the computer has not been read, time is not much, when you have time, you can flip several

Today, I saw an article about mr_xhming. DedeCMSV53 arbitrary variable Overwrite Vulnerability BY flyh4tHttp://www.wolvez.org2008-12-12 DedeCMSV53 is released, but the variable overwrite vulnerability is not completely fixed. This vulnerability is

Affected Versions:Open Source Matters Joomla! Program introduction:Joomla! Is an Open Source Content Management System (CMS ). Vulnerability Analysis: Joomla! The HTTP_REFERER variable submitted by the user in the HTTP request is not properly

Affected Versions: LatestAuthor: the love of the silver GodI met this program during penetration with the silver God and the static stream, and found that this program can directly Getshell to be exact or use the hole in IIS.To put it simply, there

Author: L4nk0r [cn_lgz@126.com]Recently, I helped a computer repair website. The teacher gave me a domain name and I checked server security with curiosity.My website was written in asp. I tried a connection and tested it. I found that simple SQL