Cloud Security

The firewall is the first line of defense to protect our network. If this line of defense fails, our network will be in danger. Therefore, we need to pay attention to the precautions for installing the firewall. 1. The firewall implements your

The following articles mainly describe how to protect Windows system anti-virus security. For any Windows System of Microsoft, good anti-virus software is used to communicate with other computers, especially when connecting to the Internet using

Thanks to the popularity of smartphones, mobile phone viruses have gradually become the front-end, and the underground industry chain of viruses has gradually noticed this. In general, the current mobile phone virus is not like the PC virus (the

Iptables-I output-p udp -- dport 53-d 222.172.200.68-j ACCEPT iptables-I OUTPUT-p udp -- dport 53-d 61.166.150.123-j ACCEPT iptables-A OUTPUT-p tcp- m tcp -- sport 1024: 65535-d 222.172.200.68 -- dport 53-m state -- state NEW, ESTABLISHED-j ACCEPT

[Author] weiyi75 [Dfcg] [Author mailbox] weiyi75@sohu.com [Author's homepage] official Dfcg base camp [Tools] Ollydbg1.10b (Anti-Antidbg version), ImportREC1.42 [Cracking platform] Win2000/XP [Software name] PE file Analyzer[] Attachment

Discussion on the general shelling method of VB Author: fengliuyunyuInformation Source: evil baboons Information Security Team (Www.eviloctal.com)I want to search for the common shell removal method of VB. Baidu looked at the methods of the experts

Upload Arbitrary files at will I heard that it is good to borrow money at will. I registered a number and tried to buy a member first. When you upload a portrait, you can first find that you can select a full file, select a qq.exe point for upload,

An injection vulnerability was unexpectedly a root privilege.The results showed that all the servers were in a uniform password.Let's take into consideration the fact that various dads want to register on your website.Detailed description:Http://www.

The background template getshell of akcms dug up last week felt nothing new, and then carefully looked at the code and found a promising hole and code execution vulnerability, in addition, the problematic function is provided by the author to the

MSSQL + ASP Recently, I was working on a website. The password is pure numbers. If convert (int, () is converted, no error is returned, I don't know what functions or types others use to crack the password for data like "11111111", so I figured out

Test URLHttp://www.bkjia.comDmin/log/dispcont.PAdmin/log/dispcont. aspCheck the logon records of the Administrator due to lax filtering.Although the success is encrypted in iis5, a large part of the data can be cracked.You must find the

Recently I saw a vulnerability in the tipask system. It seems that only the root user can get the shell, but the background features are so rich. I tried another shell method, although it is not a killer, it is barely usable.Isn't the SQL Execution

Website penetration splitting and automatic software testing can be combined to discover more or less website vulnerabilities or design defects. Next, let's talk about my general idea of intrusion penetration and common software techniques.I. Manual

Reference: http://www.bkjia.com/Article/201105/89502.htmlI tried php webshell PhpSpy to test server security and found that the root Directory can be listed as Parent Directory. open_basedir was not set.  So immediately edit the php configuration

1. for everyone, a bbs2. reflective cross-site model can obtain cookie3. SQL injection and multiple injection points. information_schema.columns is available and injection is very convenient. for multiple data tables, select count (*) from XXX _

DedeCms is well known for its simplicity, practicality, and open source. DedeCms is the most well-known PHP open source website management system in China and the most popular php cms system, after more than two years of development, the current

Xivo 1.2 Arbitrary File Download under root privileges Author: Mr. Un1k0d3r developer: https://wiki.xivo.fr : https://wiki.xivo.fr /Index. php/XiVO_1.1-Gallifrey/Install_XiVO_With_CD impact version: 1.2 (last patched version) test version: Linux

Arbitrary downloading of arbitrary column directories in the background: admin/mod/uploadfile. mod. php $ baseDir = SITE_ROOT. 'static/upload/'; $ currentDir = $ _ GET ['dir']? $ _ GET ['dir']: ($ _ POST ['dir']? $ _ POST ['dir']: ''); // No

Related Articles: http://www.bkjia.com/Article/201211/168584.htmlVulnerability file: Client. class. php 29 public static function get_user_ip () {if (getenv ('HTTP _ CLIENT_IP ') & strcasecmp (getenv ('HTTP _ CLIENT_IP'), 'unknown ')) {$ onlineip =

Record: CheckMojo. java01package com. neeao. security. ibatis_ SQL _injection_check; 02 import java. io. file; 03 import java. io. IOException; 04 import java. util. arrayList; 05 06 import org. apache. commons. io. fileUtils; 07 import org. apache.