Cloud Security

Apache HTTP Server software was first launched 18 years ago and has been the most popular Web Server software for more than 10 years. Apache accounts for more than 50% of the Web Server market, this also makes it the most popular attack

Tomcat is a free and open-source WEB application server of the Apache Software Foundation. It can run on Linux, Windows, and other platforms, thanks to its stable performance, good scalability, and free features, it is favored by many users.

[0x00]-Overview [0x01]-application monitoring [0x01a]-insecure Data Storage [0x01b]-decompilation program installation package [0x02]-Man-in-the-middle attack [0x02a]-tool preparation [0x02b]-Man-in-the-middle attack [0x03]-server

Currently, network security and network address translation are widely used. For any of these technologies, it is very good. Many people are thinking about how to share two good technologies but make them safe. Network Security (IPsec) and Network

From FoolishQiangblog Some people often ask me this question "how to enter the intranet" and how to answer it. In summary, it is a sentence "break through the gateway and use port redirection to enter the intranet ". The first choice is to break

Set wireless encryption and change user name and password With the popularization of wireless networks in modern homes, people's security protection needs are constantly increasing. But how can we make the wireless networks in the home more secure?

First, let's briefly describe what is Http Authentication. The server returns a 401 status and a WWW-Authenticate header.   The WWW-Authenticate header contains descriptions of the Http Authentication box, such   Enter the user name and password

NBSI Injection Analysis and tracking report (MSSQL)Source: emotional network Author: SoftbugPreface:Writing a good tool is not easy, but writing an injection tool is not easy. This article systematically analyzes the testing ideas of Niu Ren by

Online shopping has increasingly become a lifestyle pursued by young people. But is online shopping safe enough? Is there enough "checkpoints" to prevent risks? This reporter recently conducted an online test on 10 popular shopping websites, and

As ASP script systems are widely used on the Internet, script attacks against ASP systems are becoming increasingly popular. In these attacks, attackers use injection, cross-site, violent library, upload, Cookie spoofing, and bypass to control the

1 SQL blind injection attack technology overview JavaphileSQL blind injection attack technology OverviewCoolswallow of Javaphile (coolswallow@shaolin.org.cn)Blind SQL Injection Techniques: A SurveyAbstract: This paper gives a survey of current Blind

| = -------------------------------- = || = ------ = [Browser hijacking caused by cross-site scripting] = ------ = || = -------------------------------- = || = ------------- = [By rayh4c] = ------------ = || = ----------- = [Rayh4c@80sec.com] = -----

Extracted from bloodsword  During injection, in the access and mysql environments, we usually obtain data through union. However, in the mssql environment, union often does not work. If the page does not report an error and openrowset is unavailable,

Riusksks blog Previously, an SQL injection vulnerability about A Better Member-Based ASP Photo Gallery was published on milw0rm:Http://www.milw0rm.org/exploits/8012And then it was officially repaired. If you open the following

Magic spring [B .S.N] Follow Script Security sites.google.com/site/bsnguanzhujiaobenanquan In the "Mining vulnerabilities in message books" article, I wrote a paragraph, that is, for the study of writing a sentence Trojan into the database, you can

= Ph4nt0m Security Team = Issue 0x03, Phile #0x05 of 0x07 | = --------------------------------------------------------------------------- = || = --------------- = [Browser hijacking using the window reference vulnerability and XSS vulnerability] = --

Source: External region of Alibaba Cloud On Sunday afternoon, it was raining heavily. I couldn't go out. I started Plurk and thought of the "XSS challenge" that was launched before Plurk. I only needed to find the vulnerability, if you confirm and

Because of the special nature of the admincp file. When a new connection is generated. It will occupy a lot of system resources. Therefore, when multiple IP addresses continuously access the admincp. php file, the server is vulnerable to DDOS

From kwang.cn If ($ route = "groups "){Require_once $ basePath./action/m_groups.php;} Elseif ($ route = "group "){Require_once $ basePath./action/m_group.php;} Elseif ($ route = "galbum "){Require_once $ basePath./action/m_galbum.php;}This is the

Test method:The Program (method) provided on this site may be offensive and only used for security research and teaching. You are at your own risk! # Exploit Title: Joomla Component Multi-Venue Restaurant Menu Manager SQL Injection Vulnerability#