Cloud Security

With the popularization of network technology, more and more ordinary people begin to use virtual banks on the Internet to process personal assets, query, transfer, payment or transactions. However, network security has become a concern for many

Taking the most typical remote management software for example, network management can help users solve problems remotely. However, when such software is in the hands of hackers, it becomes a "high-risk" weapon for remote control of users' computers.

Like smurf Currently, many DNS servers support EDNS. EDNS is an extended DNS mechanism, which is introduced in RFC 2671. Some options allow the DNS to reply to more than 512 bytes and still use UDP, if the requestor points that it can handle such a

  In the real environment, we will encounter the loss or theft of database backup disks. At this time, malicious destructive parties only need to restore or attach the database to view data. Next, I will introduce the Transparent Data Encryption

Since Microsoft released its flagship virtualization platform Hyper-V, security professionals have been wondering if Microsoft will catch up with its main competitor VMware. VMware has always been competitive in providing more virtual network

I. Vulnerability AnalysisLinux system security reinforcement analysis was recently conducted to scan and analyze vulnerabilities.OPENSSH has three major security vulnerabilities:1: OpenSSH GSSAPI handles Remote Code Execution

Some of the world's largest companies (such as Facebook, Google and Adobe) and many smaller companies are using Oracle's MySQL database server software. Its performance, reliability, and ease of use make it an indispensable part of thousands of Web

OpenSSL officially recommends win32 executable file version download: http://www.slproweb.com/products/Win32OpenSSL.htmlca.key CA private key: openssl genrsa-des3-out ca. key 2048 makes the decrypted CA private key, but this step is generally not

This ngx bug was found last year and was not written until recently.The Nginx ngx_unescape_uri function does not comply with the standard url decode when processing url decode, causing a series of wafAll have bypass vulnerabilitiesThe function with

Objective: To crack WEP EncryptionTesting System: WINXP/SP2Wireless Network Adapter: Intel PRO/Wireless 3945ABGTesting Software: Network Stumbler, OmniPeek 4.1, and WinAircrackTest server: DELL 640 M1. First, you should first use the Network

For Internet users, account and password theft is the biggest headache. In normal operations, account and password security problems are the most easily overlooked, I always thought that I would not be so unlucky, so I had to regret it when I was

What is DNS tunnel? DNS tunnel is the DNS tunnel. The DNS query process is used to establish a tunnel and transmit data. Why use DNS tunnel? When you are in a hotel, airport or other public place, there is usually a Wi-Fi signal, but when you visit

Websites are classified as network security. Therefore, attacks against websites are also classified as attacks. Fortunately, most of the time it was scanning and stepping on the site, there were 80 thousand million attempts to use a security

I. vro Network Service Security Configuration1. disable CDP (Cisco Discovery Protocol ). For example:Router (Config) # no cdp runRouter (Config-if) # no cdp enable2. Disable other TCP and UDP Small services.Router (Config) # no service

Source: TechTarget I. general website protection methods To address hacker threats, the network security administrator takes various measures to enhance server security and ensure normal operation of WWW services. The following methods can be used

Author: Chris Anley (chris@ngssoftware.com)Translated by: ghost soul (ky13) (www.m0ther.cn)Source: evil baboons Information Security Team (www.eviloctal.com) Note: This article is based on the ghost blog and submitted to the evil Babu information

Soul BLOG !! Lcx, Jianxin, and so on were already using this syntax in, and I waited for the younger generation to see it recently ......There is no injection point for testing at the moment. First, experiment with MSSQL on my machine.The following

It is actually a phishing scam. UBB call: [img] http: // 127.0.0.1/phpsec/image_injection.php [/img]Normal call: After accessing the page, open the Login Dialog Box and ask you to enter the account and password (you can only cheat children and

Tools The idea is to follow the empty prodigal heart (http://www.inbreak.net /? Action = show & id = 134). Because asp does not support socket operations, you can only create a new domain and delete it. the program interface is plagiarized with Lu

Google can still collect and penetrate information on a site. Next we will use google to perform a test on a specific site.------------------------------------------------First, use google to check some basic information about the site (some details