Cloud Security

Defense scheme of Arp Firewall: 1. Bind the Mac address and IP address of the Gateway in the local Arp cache table (using the "arp-a" command, you can see that the gateway Mac address and IP address status are static ). Role: prevent other machines

Some time ago, the user information of major websites was leaked. Some websites still use plain text for account transmission. I have been thinking about why there are such a large vulnerability in information security in China. In fact, the most

Leng fengge+ ------------------------------- +I. QuestionDuring Penetration Testing, when we get webshell, we may encounter the following problems:(1) When you get the WebShell and easily get the server System, but when you find that this server has

As we all know, DNS, as a basic Internet service, plays a vital role in the normal operation of the entire internet. Of course, the attacker with ulterior motives understands this truth and always wants to use various attack methods to disrupt the

Sometimes we need to know the security of a website. You can mount Jinshan and rising's cloud Security Detection System at the bottom of the website, as shown in:If you need to know the scanning effect, check the two URLs:Kingsoft RisingBut I don't

When we inject mysql database input points, we can obtain mysql related information through built-in functions such as version (), user (), database (), and password, in fact, we can use mysql built-in variables to get more mysql information during

The vulnerability only tests the latest v3.8 version. I do not know whether the vulnerability exists in the earlier version. The PHP version of ewebeditor does not use a database to save configuration information. All information is stored in

// Cp. phpif (! $ Sax_uid |! $ Sax_pw |! $ Sax_logincount |! $ Sax_hash) {// as long as this condition is not met, you can verify loginpage ();}... if ($ sax_group = 1) {// to obtain administrator permissions, you must also ensure that the $

In the latest discuz! 7.2 comes with a new application plug-in manyou. In this new plug-in, the passed parameters are not checked. When GPC is off, the injection vulnerability is generated. Vulnerability Analysis:File./manyou/sources/notice.

#! /Usr/bin/python # Exploit title: SAP MaxDB Malformed Handshake Request Remote Code Execution # Date: 2010.03.26 # Author: S2 Crew [Hungary] # Software link: sap.com # Version: 7.7.06.09 # Tested on: Windows XP SP2 EN # CVE: ZDI-10-032 # Code: ##

========================================================== ========================================================== ========== | # Title: Faweb_2 Mullti Vulnerability | # Author: indoushka | # Web Site: | # Tested on: windows SP2 franzais V. (Pnx2

Test method: The Program (method) provided on this site may be offensive and only used for security research and teaching. You are at your own risk! ######################################## ############################## PHP 5.3.0 getopt () Denial

Keywords: Inurl: Search. Asp? Range = Product & Keyword =Inurl: ProductBuy. Asp? ProductNo =Inurl: (ProductShow. asp? ID =) Explosive User: Http: // 127.0.0.1/hitcount. asp? Lx = LiangJingCMS_DownSort & id = 1% 20and % 201 = 2% 20 union % 20

Although it can minimize the losses caused by Trojans and backdoors, the best way is to prevent them from happening. 1. Basic backdoor defense skills First, you must disable unnecessary ports on the local machine or only allow access from specified

Chars blog If the server supports PHP, you can add php to the file format set in the forum settings. View the upload address in the background file management office. This background Elevation of Privilege Vulnerability was accidentally discovered

To be honest, if a website's front-end is prone to injection vulnerabilities, the chances of having a universal password in the background are basically A hundred percent. However, some people say that if the GPC magic conversion is enabled for the

BBSGOOD is the first Forum in China to use caching technology. BBSGOOD's post and list homepage can generate static HTML files. 1. In the DelShortInFo. asp file:Selectid = trim (RequestCStringSafe (Request ("selectid") // 11th rowsIf selectid <> ""

Prerequisites for serv-u privilege escalation: the Administrator has not set a local management password. if yes, you can install UsersLocal Administrator Domain in the serv-u installation directory. an MD5 value is found in Archive, which is the

Test method:The Program (method) provided on this site may be offensive and only used for security research and teaching. You are at your own risk! OpenSSL Security Advisory [01-Jun-2010] Two security flaws have been fixed in OpenSSL 0.9.8o and