Cloud Security

If your server is suffering from ASP Trojans, I hope this article will help you solve your problems.Currently, the popular ASP Trojan mainly uses three technologies to perform server-related operations.1. Use the FileSystemObject

Author: lake2 Source: http://blog.csdn.net/lake2/ Currently, it seems that mdb-format databases are frequently used to change to asp/asa to prevent downloading, but most of the time they do not work. Because we will get garbled characters when

OnHacksWho is intruding my system ?" In the previous article, I told you how to use Nmap to easily detect a honeypot. How to do it is interesting, but what is more interesting is that we should learn the principles behind it to truly grow. So, Why

I have been talking about phishing for a long time, but its threat is still very serious. The user's experience below can be said to be a classic case. It is not difficult to find out that it is not difficult to prevent phishing. Judy Bodmer, a

Response version:SAP Sapgui 7.1 vulnerability description:SAPgui is the graphical user interface client of SAP software. The SAPBExCommonResources activeX Control installed in the sap gui does not properly filter parameters transmitted to the

Faced with complicated wireless network security protection measures, do you still feel overwhelmed and difficult to start? Let's listen to the opinions of experts and find out what aspects should be taken to protect our network. Believe that what

I. Necessity of stress testing Today's IT infrastructure and applications are in an extreme environment. The network has been pushed to the limit, and the security industry and personnel are facing severe challenges. Service providers and enterprise

5up3rh3iblogIn the previous blog :《8-mounted CVE-2009-1140"CVE-2009-1140And80sec reported a local file probing Problem[Details of this issue have been published on wooyun].From ms's appreciation for the CVE-2009-1140 patch method and 80 sec

Security issues have always been a hot issue we have discussed. Through the analysis of wireless network security risks, we can understand some potential security risks. Let's take a look at the specific content. Many enterprises have deployed

Translator: Ghost [S.S. T] Install important data packets! Dsniff SMCdsniffDsniff is a tool set for network detection and penetration testing, such as dsniff, filesnscarf, mailsnscarf, msgsnscarf, urlsnscarf, and webspy (passively monitoring the

 In fact, many VPS service providers are individuals or teams, in order to make a more time-saving user management charging system, many people are directly applied WHMCompleteSolution (http://www.whmcs.com ), which includes PhotonVps. Although the

Some people have always thought that Elevation of Privilege in Linux is an advanced technology. In fact, Elevation of Privilege in Linux is not mysterious. To sum up the steps, you can simply divide them into five steps:1. Obtain webshell2. You have

As a system administrator, it is very important to perform a comprehensive security check on the system on a regular basis. Recently, some friends wrote that some inexplicable problems have occurred, for example, the biggest problem is that the

Version: Quick easy ftp server 4.0.0 (not tested in other versions) Test: W2K SP4 Quick easy ftp server 4.0.0 is not safe to use the wsprintfA function for string operations, resulting in the formatting String Vulnerability. The affected Commands

By SuperHei_at_www.80vul.com I. Preface in the document "penetration test under WEB2.0" last year, we mentioned that in the 2.0 era, the attack methods of attackers are changed to the target identity of the attack. For developers, security issues in

SYN flood attacks (SYN Flooding Attack) are attacks that use the imperfect TCP/IP three-way handshake protocol to maliciously send a large number of packets containing only the SYN handshake sequence. This attack method may cause the attacked

Modify the user password's Validity Period Mechanism The effective mechanism of User Password modification can effectively prevent users from automatically failing their accounts after they leave their jobs for a period of time. Even if the

In Ubuntu, The/etc directory contains three files related to user logon Access Control: passwd, shadow, and group. In the past, older Unix systems put hash-processed passwords directly in the passwd file. Now * nix stores the processed passwords in

NBSI Injection Analysis and tracking report (MSSQL)Source: emotional network Author: SoftbugPreface:Writing a good tool is not easy, but writing an injection tool is not easy. This article systematically analyzes the testing ideas of Niu Ren by

Disclaimer: This article is only for teaching purposes. I am not responsible for the consequences of attacks caused by this article. Because it is found that the harm is too large, the original text has been greatly deleted and modified, even if