Cloud Security

How to Use Graph Theory to automatically search for domain administrators AD domain permission escalation is an important part of penetration testing. The commonly used domain permission escalation is centered on collecting plain text authentication

Privilege Escalation using Use-After-Free (UAF) in Linux Kernel Last month, the CVE-2016-0728 Local Elevation of Privilege Vulnerability let everyone's eyes again focused on Linux kernel security. Like CVE-2015-3636, CVE-2015-7312, and CVE-2014-2851,

How to find specific strings in a malicious sample   It is useful to search for specific strings in a malicious sample. For example, you may find malicious samples with similar code for different targets. This article will describe this point in

Analysis of DMA Locker, a new type of malicious ransomware     DMA Locker is a ransomware launched earlier this year. So far, this ransomware has a small impact, but we still want to remind you that it still exists.0 × 01 sample D35344b1fda-64ba083e5

An SQL injection exists in a parameter of retao Network (involving multiple databases) ...   Http://guanli.letao.com/letaozu/articlelist.aspx? The parameter id = 1697id has been injected.     sqlmap identified the following injection points with a

A health system in Liaoning Province has command execution (involving a massive amount of personal details/obtaining data in a difficult environment)   **. **. **. **/Nhis/index. the jsp has command execution. Let's talk about the data. The million

ClickJacking Analysis for Web Security) ClickJacking is a visual deception. There are two methods. One is that an attacker uses a transparent iframe to overwrite a webpage and then induces the user to perform operations on the webpage, at this time,

General system design defects in an insurance industry can be added, deleted, modified, and checked A general system design defect in an insurance industry can be directly operated on the database to obtain sensitive data (affecting a large number

A sub-station on Sina Weibo has SQL injection to be filtered SQL Injection exists in a substation on Sina Weibo URL: http://xueyuan.weibo.com/course/index? Categoryid = & orderby_fild = 3 & orderby_operate = desc & key_word = foreign t _ type = 0

A sub-station in Baidu has SQL injection that requires filtering or forced type conversion. A sub-station in Baidu has the SQL injection vulnerability. 1. vulnerability addressHttp://house.baidu.com/guilin/map/searchrect? City = guilin & minx = 999

A backend of Baidu has SQL Injection involving multiple databases. Involving multiple databases Http: // 111.13.112.18: 8080/A weak password is found in the background in Section C of Baidu.Account admin password 111111      An injection is found

Default Account and command execution of a website in TRS (you can access the Intranet and find intrusion traces) Command ExecutionThe default admin/zabbix account and password exist in om.trs.cn: 9200.  I have read serverip: 192.9.200.29 is indeed

The master site of Qijia network has SQL Injection ~~~~ Injection Point http://www.jia.com/citylist/ask_city_list.php? Callback = jQuery172026691810227930546_1452738150949 & provinces = 1 * & _ = 1452738167755Injection parameter

59. The interconnected main site has the SQL vulnerability that can be bypassed It hurts, but it still bypasses. 1, http://www.59.cn/domain/search.aspverification payload. Btnen = 1 & domain_tail = '/**/if (' B '/**/>/**/'A ') /**/WAITFOR/**/DELAY/**

SQL Injection in the official APP of Wei Feng (Analysis of SQL map full POST Base64 encoding instance) SQL Injection for APP security Objective: To view the Apsara stack IOS APPSQL Injection exists in the following areas:  POST

Some bureaus may find that improper service configuration may cause database leakage. Some bureaus are developed by Beijing jiuzhishang Network Technology Development Co., Ltd., a mobile phone application that uses food and interests for fast and

TOM password retrieval vulnerability can cause any mailbox password to be modified TOM password retrieval vulnerability can cause any mailbox password to be modified I used the mobile phone retrieval method for verification here.  Use your

APP security-SQL Injection in official Chinese mobile apps SQL Injection for APP security Target: Official mobile APP in ChinaCheck that SQL Injection exists in the following places: (data [1] [iid]/data [2] [iid]/data [3] [iid]/data [4] [iid ],

City beauty SQL injection vulnerability causes store sales data leakage Metropolis beauty SQL injection vulnerability: sales data of all stores leaked MSS sales service system address: http://mss.cosmo-lady.com/mss/logonNewAction.do? Method =

Getshell can leak employee information and user data due to a high-risk vulnerability in a provincial branch of Taikang Life Insurance. Getshell is a website vulnerability in a provincial branch of Taikang Life Insurance. Tens of millions of tables