Cloud Security

Try to analyze the computing Verification Code 0x00 Preface The original intention of the verification code is human-machine recognition. However, most of the time is only used to increase the time cost and reduce the frequency. If it is only for

Hacker writes Haka-Part 1 Haka is an open-source network security-oriented language that can be used to write security rules and Protocol delimiters. In this section, we focus on writing security rules.0x00 what is Haka Haka is an open-source

Juniper screnos VPN decryption Information Leakage Vulnerability (CVE-2015-7756)Juniper screnos VPN decryption Information Leakage Vulnerability (CVE-2015-7756) Release date:Updated on:Affected Systems: Juniper Networks ScreenOS

RHEL & CentOS & OEL5 & 6.x high-risk vulnerability repair This article only targets the aligreennet vulnerability scan results. The following high-risk vulnerabilities exist in RHEL, CentOS, and OEL5.x x64. The solutions are provided here. After a

Example of starting or stopping a shell script in centos #! /Bin/bash # The next lines are for chkconfig on RedHat systems. # chkconfig: 35 98 02 # description: Starts and stops Server # The next lines are for chkconfig on SuSE systems. #/etc/init.

Use Python Shells to bypass anti-virus software 1. bypass anti-virus software Why? 1. Bypassing anti-virus software is safer than disabling anti-virus software; 2. demonstrate how fragile and interesting anti-virus software on the client is. How? If

Analysis of the pseudo "Student transcript" Agent Trojan Review: When the graduation season is approaching, student transcript has always been the focus of parents' attention. Alibaba mobile security lab has previously discovered a malicious App

OS X-how does malware start? 0x00 background A few days ago, I read a report published by US network security company bit9: 2015: The Most Prolific Year for OS X Malware. The main content of the report is about the malware on the OS X platform in 20

Linux system full encryption startup attack, linux encryption attack Attack Since there are no ready-made tools on the market that can perform such attacks, we have made our own tools and named them EvilAbigail. Edevil maid attacks can be targeted

Discussion on PHP-based Automatic Webshell Detection For network maintenance personnel, I am afraid the biggest headache is that the website is hacked, and a backdoor is left, and even the server is Elevation of Privilege. Hacker usually leaves a

A stored xss blind beat Administrator RT A very low-level xss reading APP with a large number of users'"> '"> Find a discussion area and enter the following information:   Proof of vulnerability: Returned cookie: Location: http: // **. **/

711 weak software Station Service password getshell Rt Weak phpmyadmin password getshellRoot/root It took a little effort to write a shell, and it was useless for dogs and horses. Later, my teammates reminded meWrite your website as .jpg -------

Tang Dynasty scanner parallel excessive access to view sub-domain name \ ip Meow Simple and rude, parallel excessive permissions. After logging in, you can directly view other task IDS by modifying taskids (other enterprise users)I also called the

Activity row design defects can be logged on to other user accounts Sign up for the meeting of tangscan. It is easy to use the activity line, so I simply read it... The title is obviously too vague for others to directly discover problems. The

An SQL injection vulnerability exists in a substation of levision. An SQL injection vulnerability exists in a substation of levision. Http://app.m.letv.com/android/mindex.phtml? Version = 3.3.0.1 & pcode = 010110106 & mod = minfo & ctl = video & act

A post-type SQL injection vulnerability exists in a website of alimama. POST/Loupan-Search? A = index & g = Loupan & m = Search HTTP/1.1Content-Length: 176Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: http:/

Man-in-the-middle attack & defense methods One very interesting thing about network security is that, as technology changes, the old network attack methods will be used again. Just like MiTM ). The objective of this attack is to put an attacker in

When network spying is applied to counter terrorism, data flow sorting is crucial. The original intention and foundation of all intelligence warfare means lies in strengthening national defense. This article discusses the progress made by

58. Multiple groups of mailbox passwords in the market group were leaked I was too busy recently and didn't have time to submit the vulnerability. But I suddenly found that wb was not enough to enter the zone. I was very depressed. The previous

Japanese researchers use mobile phones to launch DDoS attacks on connected cars Hiroyuki Inoue, an associate professor at the Graduate School of Information Science at the City University of Hiroshima, Japan, shows how to use an APP and a custom