Cloud Security

Analysis of some recent changes to malicious office macro attachments In the past, the office macro series of malware did not rely on office. adobe vulnerabilities were popular, perhaps because the vulnerability mining costs were rising. Today's

PhpMyAdmin man-in-the-middle attack Vulnerability (CVE-2016-2562)PhpMyAdmin man-in-the-middle attack Vulnerability (CVE-2016-2562) Release date:Updated on:Affected Systems: PhpMyAdmin Description: CVE (CAN) ID: CVE-2016-2562Phpmyadmin is an

More than App Store game and application storage vulnerabilities are vulnerable to hacker attacks More than 1000 apps in the Apple App Store have security vulnerabilities and are vulnerable to hacker attacks, according to a research report released

Hacking Team's Technical Analysis on Mac malware code Last week, security personnel Patrick Wardle published an article about HackingTeam's new backdoor and virus implants. It also indicates that the Hacking Team becomes active again, bringing new

Security researchers found new Mac malware on HackingTeam Researchers found a newly developed Mac malware on HackingTeam, a result of speculation. Since last July, this notorious malware has caused the outflow of private emails and source code from

Noriben sandbox: deal with malware in minutes   We hope that everyone can do better in the new year, especially for faster and more effective analysis of malware. Several years ago, I built a malware analysis sandbox script for daily analysis and

Getshell + Privilege Escalation Analysis Today's military training, and then I had time to watch the station for a while at night. As a result, my buddy asked me to stay with him for a day. In fact, I spent the whole process with my girlfriend and

Public comments about improper bypass of command execution vulnerability repair on a site The public commented on a website command execution vulnerability and fixed improper bypass. #1 vulnerability referenceWooYun: Execute the st2 command on a

Configure fail2ban to protect Apache HTTP servers from attacks Apache HTTP servers in the production environment may be attacked in different ways. Attackers may use brute force attacks or execute malicious scripts to attempt to access unauthorized

Python crawler development-whole-site crawler and Web Mining In the complex environment of the Internet, crawlers of search engines are Crawlers for personal purposes. Commercial crawlers are rampant and attackers can snatch Internet or public or

An SQL injection vulnerability exists at a location in Ganji Rt Host: jiaoyou.ganji.cn  GET /bj/user/show/?pid=3&source=2&nopid=1 HTTP/1.1Referer: http://jiaoyou.ganji.cn/bj/user/show?pid=&source=2&nopid=1Accept: text/xml,application/xml,application/

There are two injection vulnerabilities in the main site of retao, involving million user information. 233 when someone else's homepage is displayed, he will definitely search for the homepage. 1. root @ Hacker ~] # Sqlmap. py-u" Mask Region

Last night, the cool dog main site was able to get Getshell (fast recovery speed) After a sleep, I got up and found that the vulnerability was completed. Do you want to be so fast during the weekend !!!!! The problem is thatBackup file found in the

You can click my link to know your Weibo nickname and some of your private messages. I helped with the glasses frame .. The jsonp hijacking vulnerability exists in the interface for Sina to obtain some private

How can I confirm your Vulnerability (discover Shell) How can I confirm the vulnerability on the giant network? Test found.[Email protected]1qaz2wsx! @#The account registered by the giant's network on the day of completion is a weak

Misuse image blogs for C & C Configuration 0x00 background A few months ago, I saw an article about Hammertoss malware in Russia, using Twitter as the C & C service. The abuse of TechNet in a similar way has also been reported [1 ]. After a brain

12306 at least four deep SQL injection vulnerabilities in the official Mailbox System Don't look at the title to find the vulnerability. Don't bother!The downloaded tangscan plug-in is amazing! The downloaded tangscan plugin detects  Http://mail.123

Incorrect configuration of a system in caoxin capital results in the Intranet access of the Getshell server. If the system is improperly configured, The getshell server can access the Intranet. Address: http: // 123.57.91.68/level2.jsp? Caid = 002 

A weak password in a Midea system causes Getshell to threaten the Intranet. Different port addresses are different systems. WooYun: Getshell is compared to this vulnerability because of a weak password in the marketing system of a dealer in

Three qualities that hackers need High school students and fresh college students are generally not very clear about what they want to grow. Even more, many people are still confused over the years. Most counselors or so-called life mentors are