Cloud Security

Analysis of DMA Locker, a new type of malicious ransomware     DMA Locker is a ransomware launched earlier this year. So far, this ransomware has a small impact, but we still want to remind you that it still exists.0 × 01 sample D35344b1fda-64ba083e5

CrypBoss, HydraCrypt, UmbreCrypt and other ransomware have been "cracked" I have previously briefly analyzed that when a computer is infected with ransomware, the malicious program encrypts the files on the computer, making it impossible for users

Python crawler development-whole-site crawler and Web Mining In the complex environment of the Internet, crawlers of search engines are Crawlers for personal purposes. Commercial crawlers are rampant and attackers can snatch Internet or public or

In those years, we will explore SQL injection and get started with nothing to filter.0x01 background Congratulations, Master Seay's masterpiece code audit: enterprise-level web code security architecture. Two days later, I was deeply touched. I have

Default Account and command execution of a website in TRS (you can access the Intranet and find intrusion traces) Command ExecutionThe default admin/zabbix account and password exist in om.trs.cn: 9200.  I have read serverip: 192.9.200.29 is indeed

An SQL injection vulnerability exists at a location in Ganji Rt Host: jiaoyou.ganji.cn  GET /bj/user/show/?pid=3&source=2&nopid=1 HTTP/1.1Referer: http://jiaoyou.ganji.cn/bj/user/show?pid=&source=2&nopid=1Accept: text/xml,application/xml,application/

59. The interconnected main site has the SQL vulnerability that can be bypassed It hurts, but it still bypasses. 1, http://www.59.cn/domain/search.aspverification payload. Btnen = 1 & domain_tail = '/**/if (' B '/**/>/**/'A ') /**/WAITFOR/**/DELAY/**

Java RMI Service Remote Command Execution call The Java RMI service is Remote Method Invocation ). It is a mechanism that allows an object on a Java Virtual Machine to call the object method of another Java virtual machine.In Java Web, RMI is used

How to Use Graph Theory to automatically search for domain administrators AD domain permission escalation is an important part of penetration testing. The commonly used domain permission escalation is centered on collecting plain text authentication

A substation in Jinshan network has the Blind XXE vulnerability. You can customize XML files. See http://wooyun.org/bugs/wooyun-2016-0168457Problem Website: http://chat.kefu.xoyo.com/live800//services/IVerification? Wsdl  The custom XML file is as

Last night, the cool dog main site was able to get Getshell (fast recovery speed) After a sleep, I got up and found that the vulnerability was completed. Do you want to be so fast during the weekend !!!!! The problem is thatBackup file found in the

Some bureaus may find that improper service configuration may cause database leakage. Some bureaus are developed by Beijing jiuzhishang Network Technology Development Co., Ltd., a mobile phone application that uses food and interests for fast and

TOM password retrieval vulnerability can cause any mailbox password to be modified TOM password retrieval vulnerability can cause any mailbox password to be modified I used the mobile phone retrieval method for verification here.  Use your

Fast delivery has SQL Injection involving 0.26 million of order information including amount and other details Fast delivery of one SQL injection (0.26 million order information including amount and other details) 1. log on to express delivery and

City beauty SQL injection vulnerability causes store sales data leakage Metropolis beauty SQL injection vulnerability: sales data of all stores leaked MSS sales service system address: http://mss.cosmo-lady.com/mss/logonNewAction.do? Method =

The unauthorized access of a kubernetes website may expose sensitive user information such as names and phone numbers. To be honest, this place is really amazing. 1. register an account and log on:  2. Select any product and go to the order

One weak password system vulnerability package for executing two commands in skyworth can threaten the Intranet. Vulnerability packaging (2 command executions & 1 weak password), 20rank on the list Http: // 119.147.144.221: 8000/admin/login. action 

Front-end security of Web Attacks: XSS attacks  XSS(Cross-site scripting cross-origin scripting) attacks are the most common Web attacks, focusing on "cross-origin" and "client execution ". Some people divide XSS attacks into three types: 1.

Getshell can leak employee information and user data due to a high-risk vulnerability in a provincial branch of Taikang Life Insurance. Getshell is a website vulnerability in a provincial branch of Taikang Life Insurance. Tens of millions of tables

Three qualities that hackers need High school students and fresh college students are generally not very clear about what they want to grow. Even more, many people are still confused over the years. Most counselors or so-called life mentors are