Cloud Security

As hackers flood, firewall software emerged to prevent malicious supply. However, we should be able to correctly use the firewall software to truly serve us. Below I will introduce some experiences in the use of firewall software to you. I. Security

For symptoms, I first went online to find relevant information. First, I needed to show hidden files.Here: HKEY_LOCAL_MACHINESoftwareMicrosoftwindowsCurrentVersionexplorerAdvancedFolderHiddenSHOWALL: Change the CheckedValue to 1.It is still useless.

Recently, the anti-virus center of Jiangmin detected that a virus using the "image hijacking" technology is rampant on the Internet. The main characteristics of this virus are: After the virus runs, A virus process with 8 random digits and letters

We 'd better add this article to your favorites. As the body of anti-virus software grows, resources are occupying more and more resources, and there are more and more "streaking" people. In fact, as long as you have good habits, pay more attention

Yong Shuo e disk has the function of directly opening the TXT file uploaded by the user. When opening the TXT file, the server only filters keywords such as scripts in the text content, and only needs to use String. by encoding related keywords,

5173 unauthorized access to the backend of a substation, and an FCK still exists, but the file cannot be deleted or usedDetailed

Db permission: rootPossibile to getshellProof of vulnerability: http://mobile.10jqka.com.cn/main/dlquery_s.php? Bid = % 274229 & bname = % CD % A8 % D3 % C3 % C7 % F8 & seid = 1329 & sename = Android & mid = 61 & mname = Gpad & tyid = 2705  DB

Jumbotcms is a wide range of open-source. net cms programs. jumbotcms adopts the multi-layer security architecture recommended by Microsoft, which is widely used and has a high security factor. GetField of DbOperHandler class in jumbotcms5.XThe

I also posted this vulnerability on the French forum. Condition for exploits Message code   The next step is to wait. This is a new cms administrator who will definitely read the comment and visit case. php every day.  

Rem Copy Right by Samy http://www.bkjia.comCall SafeRequest Sub SafeRequestIf Request. QueryString <> "ThenKll_inje (Request. QueryString)If Request. Form <> "" ThenKll_inje (Request. From)If Request. Cookies <> "" ThenKll_inje (Request. Cookies)End

The general idea of this article is:UseSsh ' '@ 10.10.11.33Log in, And then record it in the ssh Login log, and then include the error log file with the vulnerability php to achieve the goal. Contains normal log files  Use a specific one-sentence

Title: Huawei HG866 Authentication BypassAuthor: hkmDeveloper: http://www.huawei.comAffected Versions: V1R2C01SPC202, R3.2.4.92sbn-R3.4.2.257sbn, 3FE53864AOCB16Test Platform: HG866GTA_VER.C, 01, 02SummaryHuawei HG866 GPON routers don't properly

Modify the CurrentFolder parameter and use..././to enter different directories./Browser/default/connectors/aspx/connector. aspx? Command = CreateFolder & Type = Image & CurrentFolder =.../& NewFolderName = shell. aspYou can view all the directories

A hotel system under phpweb.News/html/index. php  Hotelphpweb SQL injection// Define the module name and Page namePageSet ("news", "detail "); Trace the PageSet function.  Hotelphpweb SQL injectionFunction pageset ($ coltype, $ pagename){Global $

Http://lifestyle.rayli.com.cn/manager/index.php background LeakageArbitrary user name login such as 123 123SQL Injection http://lifestyle.rayli.com.cn/inseasonnow/userdish.php? Id = 3740362Nginx Parsing VulnerabilityTarget:

This time, the target is a virtual host and the data of one of the forums is required. The target station is discuz x2.5, and the last few 0-day attempts have been made, and the passwords of several logon ports have been tried again, without any

When talking about 00, we should be most familiar with upload truncation, % 00 and so on.00 usually indicates that the string ends. \ 0 is used in C, and \ u0000 is used in JS.About the application of \ 0 in XSS, it seems not to be a lot of it, the

The file upload code uses the whitelist mechanism, which is relatively safe, but the problem occurs in the whitelist mechanism verification.Here we use regular expression matching to obtain a shell by using the iis parsing feature. Verification Code:

Our server has another intrusion accident. A js script is inserted at the bottom of an html webpage,As a result, when a visitor opens a webpage, the anti-virus software warns of malicious code on the website. This is a common method in black chain

Author: relywind Affected Versions:KindEditor 3.5.2 ~ 4.1 Vulnerability exploitation:Open the editor and rename it 1.jpg to upload an image,Open file management, go to the "down" directory, and jump to the last page. The last image is a sentence we