Cloud Security

As the saying goes, it can be said that the source of most application security problems is caused by the input entry, but the input entry Security Detection cannot solve all potential security problems, the reason is very simple, that is, when

Struts2 has the remote code execution vulnerability again. For details, see 《Struts2 Remote Code Execution Vulnerability Analysis (S2-013)"The following is a temporary solution provided by the LH Team:Modify the file: org. apache. struts2.views.

Postfix is a free software engineering product funded by IBM and developed by Wietse Venema. It aims to provide users with choice of email servers other than Qmail. Postfix has been well considered in terms of fast, easy to manage, and providing as

The new features of Windows 8.1 are intended to attract corporate IT departments that are not interested in Windows 8 operating systems. Microsoft Windows 8 missed out on its strong enterprise features. Consumers' strict criticism of the user

We are no longer familiar with Swiss Army Knife nc, which is often used for packet sending, file transfer, and reverse shell. In the penetration test process, if we want to rebound shell, we usually do the following: Nc-l-vv-p 2222-e/bin/bashIn

For telecom enterprises, database security is crucial. Imagine what will happen to the Recharge System? What will happen to system problems when mobile phone users query bills at the end of the month? The following are some experiences of database O

Analysis on the principle of Buffer Overflow1.1 process memory DivisionDepending on the operating system, a process may be allocated to different memory areas for execution, but no matter what operating system or computer architecture, the memory

1. Account Security 1.1 lock the user-created account in the system to view the account: # cat/etc/passwd # cat/etc/shadow to view the account and password file, and confirm the unnecessary account with the system administrator. For some Reserved

0x00 Rsync Introduction Rsync, remote synchronize is a software that implements remote synchronization. It can keep the permissions, time, soft and hard links, and other additional information of the original file while Synchronizing files. Rsync

Tomcat is a classic open-source middleware. It is widely used in production and has multiple instances and multiple ports for tomcat clusters. However, we need to pay attention to the security issues. Today we will give a simple demonstration of a

H3C iNode is a management software designed and developed by Hangzhou H3C Communication Technology Co., Ltd. for user authentication and internet access. The software has a buffer overflow vulnerability. Attackers can remotely send attack packets

Preface:To figure out the entire process, we will analyze a simple DEMO we have written to illustrate the environment: OS: BT5 R3 64 bittools: gcc, gdbsource: cProcess:Let's take a look at this simple program. It's a login verification program. root@

I. Enhanced security protection tool SSH is short for the Secure Sockets Layer. It is a set of program groups that can be safely used to replace public programs such as rlogin, rsh, and rcp. SSH uses public key technology to encrypt the

In the previous article, we mainly talked about physical access and how to export HASH to local computers. With the development of enterprise and cloud management, most small and medium-sized enterprises have begun to push wide areas, it should be

IIS6 website permissions. Generally, you can configure the IUSR _ computer name and network service User Permissions:Here, the IUSR _ computer name is the website anonymous access account, and the network service is the website application pool

Directory I. Concept of SQL Injection Two SQL statements can be injected in two ways. Three defense methods The first type of query is that the account and password are in an SQL statement. Once they are separated, they will not be

Put it in conn. asp. Block address bar attacksUrl = Request. ServerVariables ("QUERY_STRING ")If instr (url, ";")> = 1 thenUrl = Replace (url, ";", ";"): Response. Redirect ("? "& Url)End ifShield form attacksFor each item in request. formStritem =

Author: Super Hei I. Preface:Version: Okphp BBS v1.3 open-source Edition: Http://www.cncode.com/SoftView.asp? SoftID = 1800Due to PHP and MYSQL, injection of PHP + MYSQL is more difficult than that of asp, especially the construction of statements

  1. Determine whether injection exists.; And 1 = 1; And 1 = 2 2. Determine whether it is mssql.; And user> 0 3. Determine the Database System; And (select count (*) from sysobjects)> 0 mssql; And (select count (*) from msysobjects)> 0 access 4. The

Author: ameihong (SAI glacier [E.S. T])Source: evil baboons (www.EvilOctal.com)Note: This change can only be used at the beginning of website construction. If you change it halfway, the problem may occur. This article has been published in and