Cloud Security

Real-time Monitoring of 3389 terminal Login A friend's Windows server was hacked, and some data backups were maliciously deleted, which helped him perform security reinforcement. Considering that the servers were all managed through Windows terminal

Measure the test taker's knowledge about DOS Vulnerabilities in the Android system.0x00 Preface There are some vulnerabilities in the Android system that can cause the system to restart. Of course, restarting the system is only a phenomenon. Some

Linux MIPS execve #include /*Sanguine@debian-mipsel:~/leaveret# cat > MIPS_36b_sc.s.section .text.globl __start.set noreorder__start:slti $a2, $zero, -1 #set a1 to zerop:bltzal $a2, p #not branch always and save raslti $a1, $zero, -1 #

What is anti-DDoS (Distributed Denial of attack) in an easy way) Preface"Since the first Internet architecture did not consider denial-of-service attacks, almost all Internet services suffered denial-of-service attacks ." This statement from RFC 473

Wargama-leviathan WriteupLevel 0 This is a simple introduction to the game. Of course, there is also a clear account and password. Open the web page and you will see it again.Level 0-> 1 Use the account and password obtained from the previous

Baidu statistics js hijacked for DDOS Github0x00 background At noon today, the largest Information Security practitioner zone.wooyun.org of the same-sex dating community in China, suddenly the browser m keeps popping up every few seconds: My first

NFS installation configuration in CentOS 6.5 I. Environment IntroductionNFS server: CentOS6.5 192.168.0.10NFS client: CentOS6.5 192.168.0.11Ii. Server installation and configuration1. Run the rpm-qa command to check whether the required installation

Decrypt 10 million passwords: view human nature through passwords (1) We already know a lot about the password. For example, most passwords are short, simple, and easy to crack. However, we know little about the psychological reasons for a person

2345 potential risks of poor security due to browser design defects It is not harmful, and can cause command execution under specific conditions.Detailed description: 2345 the browser does not have a security prompt for running some files locally,

Any vote of DamiCMS Any vote of DamiCMS The key code for voting is as follows. foreach($_POST['vote'] as $v) { var_dump($v); $v = str_replace("\n","",$v); $s =

Alibaba CTF 2015-XSS400 WriteUP I have been sleeping for two days over the weekend. AliCTF and 0ctf are racing against the flag. In fact, I almost fell asleep until Monday, it is a pity that Alibaba has scored XSS400 points in the afternoon, which

SQL Injection Vulnerability and solution caused by improper filtering of ThinkPHP The problem occurs in session. Thinkphp supports changing session handle. Handle includes Db and Memcache. The database can be used as the session storage as follows:

A full-version stored XSS plug-in WordPress can be used in the background to affect more than 30 thousand websites Today, I entered my blog background as usual. I opened the SEO Redirection plug-in setting interface to check the redirect status of

Phpyun v3.2 (20141226) Injection The first newly discovered item is In model/redeem. class. php Function dh_action () {$ this-> public_action (); if (! $ This-> uid &&! $ This-> username) {$ this-> obj-> ACT_layer_msg ("You have not logged on yet.

An SQL blind injection vulnerability exists in a substation of Tianji. SQL blind injection (with verification script) The Tipask Q & A system has 12 injection packages:

Mining XSS vulnerabilities in HTML5 mobile apps Now it is increasingly popular to develop mobile apps using HTML5. HTML5 is not only highly efficient in development, but also cross-platform and highly reusable in code. Zoho (the world's largest

Fanwe shopping shares the latest foreground Code Vulnerability One step and two steps are similar to the Devil's pace Defect file:/Core/function/global. func. phpAs follows:  /*** Display page ** @ param string $ cache_file cache path * @ param bool

Cross-origin Scripting Vulnerability (poc) in the browser provided by Huawei mobile phone)       Solution: Restrict script execution on builtins objects

B2Bbuilder latest SQL injection (DEMO) B2Bbuilder latest SQL injection (DEMO) The following code exists in module/buy/detail. php: query ('select valid_time from '. BUY. 'Where id = '. $ id. 'limit 1'); $ valid_time = $ db-> fetchField ('valid _

Mao10CMS SQL Injection Mao10CMS SQL Injection Vulnerability files:Application \ Article \ Controller \ IndexController. class. php Public function tag ($ tag, $ page = 1) {if (is_numeric ($ page) {// filter parameters $ condition ['type'] = 'Article