Cloud Security

1. For example, a Web horse url path http://www.xxx.com/aa.asp/1.txt  Then, after entering the web Trojan password, the submitted page is http://www.xxx.com/aa.asp, which directly reports that the password cannot be found at 404. In fact, we can

#! /Usr/bin/python## Joomla! Com_receivemart # Found by: TecR0c & mr_me# Discovery date: 11/2/2011# Code by: mr_me# Vendor: http://virtuemart.net/# Download: http://virtuemart.net/downloads# Dork: inurl :"? Option = com_receivemart "> 46 million

Brief description: The application is not configured for security. You can remotely access the system.Description: The jmx-console can be accessed anonymously. You can then use the default vulnerability configuration. Finally, you can smoothly

There are many ways to enable the remote host 3389 service. How many methods do you know? If you do not know how to enable the terminal service of the remote host, it doesn't matter! Here, I will introduce a kind of management tool that comes with

BY: Dark MoonToday, when I was bored, I found a simple system for analysis and learning.First open article. asp. See this statement dim SQL _injdata Set rsw.conn.exe cute ("select * from article where id =" & request ("id") %> receive all

# Www.3est.com# Author: village chief# Release Date: 2011-04.21 Vulnerability Analysis: /Index. php source code /*--------------*//* Omit unnecessary Code *//*--------------*/$ _ REQUEST = cleanArrayForMysql ($ _ REQUEST );$ _ GET =

------------------------------------------------------------------------ Software ...... phpMyChat Plus 1.93 Vulnerability ...... Blind SQL Injection Threat Level ...... Serious (3/5) Download ............

Brief description: The Save method of the ReportAll. ocx control does not filter the file name path, and any file overwrite vulnerability exists, Detailed Description: The Save method of the ReportAll. ocx control does not filter file name paths,

When we have a linux shell (multiple websites on the server ).This shell has the write permission to the root directory of the website, and can even view the directories of other websites.Therefore, such host settings are definitely

Brief description: Struts2 framework vulnerability.Detailed description: Or the struts2 framework remote command execution vulnerability.Proof of vulnerability: Http://profile.baihe.com/new/BasicInfo.action? OppId = 56155652 & (u0023_memberAccess

Prepared by: h4ck3aOfficial Website: www.86CMS.com Access this address firstCopy the content to the clipboard program code Http://www.bkjia.com/admin/cms86eWebEditor/asp/upload.asp? Action = save & type = image & style = popup & cusdir = 1.asp

# Software ...... Tickets 2.13 # Vulnerability ...... SQL Injection # Threat Level ...... Critical (4/5) # Download ...... http://www.ticketscad.org/ # Discovery Date... # Tested On... #----------------------------------------------------------------

By: 77600145Copyright: 3EST Information Security TeamI. CauseToday, I did my graduation project and discussed the webshell issue of a website in the group on the way. All said they couldn't take it down and joined the discussion queue. Read the

By:Darkmoon When executable files cannot be uploaded, I believe everyone has encountered another idea. You can upload a txt jpg file without modifying the suffix, and cannot upload an exe bat file with other files. I think a lot of people will

Googel Search Keyword: inurl: website/html /? 163. html  You can also construct keywords by yourself.  Open the website found, such as http://www.bkjia.com/website/html/163.html  On the homepageRegister a new user in "member login, Go back to the

Generally, they are trojans on webpages.  The most stupid one is to directly modify the generated index.htm file. Generally, you can add a code at the bottom of the source code to directly view the source code. You can regenerate the homepage once;

Exploit Title: Burning Board 3.1.5 Full Path Disclosure --------------------------------------------------------------------- Author: linc0ln. dll Date: 19/06/11 Site: http://linc0ln.pl/ @: Linc0ln [at] e-o-u.org ------------------------------------

Author: village chiefFile u_sc1.asp source code: 'Here, fuptype is accepted and saved to the session ("fuptype"). The next file must use session ("fupname") = request ("fupname ") 'Here, fupname is accepted and saved to the session ("fupname").

the authentication mode used by the element configuration application. The proper authentication mode depends on how the application or Web Services are designed. The default Machine. config is used to set the default Windows authentication for

# Exploit Title: LiteRadius # Google Dork: allinurl: locator. php? Long = # Author: Robert Cooper (admin [at] websiteauditing.org) # Software Link: http://www.escaperadius.com/er/products/literadius/lr.php # Tested on: [Linux/Windows 7] #