Cloud Security

BadIRET vulnerability Exploitation The Linux kernel code file arch/x86/kernel/entry_64.S versions earlier than 3.17.5 did not correctly handle errors related to the SS (stack) segment register, this allows the local user to initiate an IRET command

Juniper Junos Remote Denial of Service Vulnerability (CVE-2014-6385) Release date:Updated on: Affected Systems:Juniper Networks JUNOSDescription:Bugtraq id: 72072CVE (CAN) ID: CVE-2014-6385 JunosE is an operating system used in the e-series

Analysis of ntpd Stack Buffer Overflow Vulnerability (CVE-2014-9295) from the perspective of source code  Buffer overflow in configure () First, the configure () function stack overflow is described as follows: Let's take a look at the patch

Wireshark Netflow parser Denial of Service Vulnerability (CVE-2014-6424) Release date:Updated on: Affected Systems:Wireshark 1.12.0Description:Bugtraq id: 69862CVE (CAN) ID: CVE-2014-6424 Wireshark is the most popular network protocol parser.

How can we solve the problem of Linux malware plaguing servers? Linux may not have the same malware problems as other platforms you are familiar with, but there are still some problems that plague Linux administrators. What is the best open-source

Citrix XenServer HVM Graphics Buffer Overflow Vulnerability (CVE-2014-4947) Release date:Updated on: Affected Systems:Citrix XenServer 6.xDescription:--------------------------------------------------------------------------------Bugtraq id:

Adobe Flash Player and AIR Security Restriction Bypass Vulnerability (CVE-2014-0535) Release date:Updated on: Affected Systems:Adobe Flash Player 13.xAdobe AIR 13.xDescription:--------------------------------------------------------------------------

I. Modify the partition table information of a hard disk The hard disk partition table information is critical to the hard disk startup. If no valid Partition Table is found, the hard disk cannot be started from the hard disk or cannot be found even

Release date:Updated on: Affected Systems:Apple Television 5.0Apple Television 4.4Apple Television 4.3Apple Television 4.2Apple Television 4.1Apple Television 4.0Apple Television 2.1Apple iOS Description:---------------------------------------------

Use ICMP tunneling technology for ICMP encapsulation and penetration Firewall 0x00 icmp Tunneling Technology ICMP tunneling technology, also known as Ping tunneling technology, we know that the ping protocol is icmp. When the firewall receives a

How to crack the mobile phone shielding device/signal jamming device I believe that students in the past few years know what it is and the most common radio interference equipment in the test room. The main cause is to interfere with the cell phone

Enhanced authentication and Data Protection Windows 10 is expected to be released by the end of 2015, which will be Microsoft's first operating system to run on all types of devices, including Windows PCs and mobile devices. Running a single

VulnVPN penetration platform practice VulnVPN is an excellent vulnerability platform tool for VPN penetration testing. I have to say that this software makes it much easier for us to perform a VPN security test. This article will guide you through a

Linux DDOS and CC attack SolutionBackgroundNowadays, DDOS attacks are becoming more and more frequent. DDOS Denial-of-Service can be implemented without any technology. Some webmasters often report mysql 1040 errors on their websites, and their

Powershell tricks: Bypass AV0x00 Powershell Introduction Powershell is like bash in linux and can be used by Powershell in windows. NET Framework is powerful and can also call windows APIs. After win7/server 2008, powershell has been integrated

The path to confrontation between vulnerability exploitation and Kaspersky0x00 Thank you I am particularly grateful to all of you for your support for your work this year. If you do not have any suggestions, you can only write some articles to make

Optimistic about your portal-data transmission on the client-adjust the http referer using the browser1. In the Internet, a large amount of data is transmitted through URL parameters. Most of the data is not transmitted through encryption. As I have

How can we better implement Web application penetration testing? The more enterprises rely on network communication and cloud-based data systems, the more likely they are to be attacked and damaged by external attackers. When considering the data

Some mobile phone information and LBS information may be leaked in non-Wi-Fi environments due to system interface defects of China Unicom Some mobile phone information and LBS information may be leaked in non-Wi-Fi environments due to system

Use bitwise inversion in PHP (~) Function creation backdoor, code variant Backdoor 1) PHP ~ Bitwise operators Some time ago, a foreigner posted an interesting things on twitter. After accessing a string suspected of garbled characters, it could