I. Target: EXECryptor2.3.9 main program
Ii. cracking tools: OllyDbg v1.10, ImportREC 1.6 Final, LordPE
Iii. Cracked by DarkBull # 126.com
4. Cracking Process:
1. Search for OEP
First, set the OD to stop at the system breakpoint, hide the OD, ignore
Irl digital media provides a comprehensive service for web design and online marketing agencies. Each web site developed by irl digital media may have SQL injection, which may cause leakage of sensitive information.
[+] Info:~~~~~~~~~[~] Title:...
A friend asked me to check a football site.
It is purely a personal record with technical knowledgeGoals: http://www.bkjia.com/(to replace the target site URL only, not to detect the site)Architecture: Linux + Apache + Mysql + PHPTo get the shell of
Q:
What is a trojan?
A:
The name Trojan comes from ancient Greek legends. in the Internet era, it usually refers to controlling another computer through a specific program (Trojan program. A Trojan usually has two executable programs: one is the
The enterprise website system is a small enterprise website source code customized for small and medium-sized enterprises. The code is open for free and can be modified and used independently, but it is strictly prohibited for commercial purposes.
You can simply search for a search injection vulnerability if it does not exist. If an error occurs, this vulnerability exists in MySQL 90%. Then, search for %. If the returned result is normal, there is a hole in 95%. Then, search for a keyword,
PHP itself has some problems with the old version, such as some serious bugs before php4.3.10 and php5.0.3, so we recommend that you use the new version. In addition, the vigorous SQL Injection is also widely used in PHP, so to ensure security, PHP
-- Obtain the names of all databases. Because dbid values from 1 to 5 are used by the system, the user must start from 6.
Select * from master. dbo. sysdatabases where dbid> 5
-- List all table names and IDs in the test database = 5575058Select *
Affected Versions:PhpMyAdmin 3.4.0
Vulnerability description:PhpMyAdmin is a PHP-based MySQL management program.PhpMyAdmin has multiple security vulnerabilities:1. Any variable in the super global $ _ SESSION sequence can be overwritten or created
Author: village chiefFile u_sc1.asp source code:
'Here, fuptype is accepted and saved to the session ("fuptype"). The next file must use session ("fupname") = request ("fupname ")
'Here, fupname is accepted and saved to the session ("fupname").
Brief description: The voting restriction is equivalent to the virtual setting.Address: http://health.hsw.cn/system/2011/05/11/050936197.shtml
Detailed description:
Address: http://health.hsw.cn/system/2011/05/11/050936197.shtmlFirame embedded
Background login verification is implemented through admin/check. asp. check the code
If Request. cookies (CookiesKey) ("ES_admin") = "" thenNote: here, the COOKIE is used to verify whether ES_admin is empty. We can forge a value so that it is not
Author: constanding
I happened to run into this program tonight and searched for it. I found that there are still many users. The hacker has not found the vulnerability of the program, so he found the source code, the fckeditor folder, and the
Affected Versions:SquirrelMail 1.x
Vulnerability description:
SquirrelMail is a PHP-based WEB mail service program.SquirrelMail has multiple security vulnerabilities that allow malicious users to launch cross-site scripting attacks and bypass
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.
A Free Trial That Lets You Build Big!
Start building with 50+ products and up to 12 months usage for Elastic Compute Service