Cloud Security

Currently, most intranet security products mainly use ARP spoofing blocking to prevent illegal access. However, ARP spoofing blocking has many shortcomings. Starling has put forward a new idea, the daily Intranet security system uses multiple

Well, I haven't written a blog for a long time. I think I should learn something. This is my sniffer recently. I want to learn it now. Don't make fun of it.Okay. Let's see how to use sniffer to capture the ftp user name and password.First, set the

Step 1: If you use vmware as a virtual machine, the mouse will always fail. After a version of 6.0.2 build-59824 is changed, the mouse will become very useful. But I still want to use the new version, so I can choose a linux system on the Internet,

Security researcher Jonathan Brossard created a conceptual verification hardware backdoor called Rakshasa, which is said to be able to replace the computer's BIOS (Basic Input/Output System) and endanger the operating system at startup, but it does

0x00 background PT is the abbreviation of PrivateTracker (Private seed server). It can collect statistics on user uploads and downloads. User Sharing rate. You can simply understand it as an upgraded version of BT. Only when the shared rate is set

We know that some network operators perform DNS operations for some purpose, so that the correct IP address cannot be obtained through the domain name through the normal internet access settings of the ISP. Common means include DNS hijacking and DNS

ASP vulnerabilities are very few, and it is not easy to find the actual location of the database. However, this does not mean that hackers can access the database without holes, generally, programmers often forget to carefully check for

Xss is very popular now. in addition, xss tools are everywhere. As a result, just like sqlinj, many websites are hard to find obvious xss bugs. In the past, we used to search for xss in black boxes, and the results were very obvious, for white boxes,

Method 1: brute-force cracking.The most prominent one is the user name and password. The key is how to break the password? I found a specialized tool for breaking the serv-upassword (serv-upasscrack1.0a.rar) on the Internet. It's too slow. What year

When a poor Web site causes your browser to perform unwilling activities on a trusted site, we say a Cross-Site Request Forgery (CSRF) attack has occurred. These attacks are hailed as "sleeping giants" in Web-based vulnerabilities, because many

A Stored Procedure for SQL Server Sa password cracking:If exists (select * from dbo. sysobjects where id = object_id (N [dbo]. [p_GetPassword]) and OBJECTPROPERTY (id, NIsProcedure) = 1)Drop procedure [dbo]. [p_GetPassword]GO/* -- Brute-force

Analysis Source:Know Security (http://www.scanw.com/blog) Threat nature:IntranetThe JS function playswf can dynamically create a flash player container ( ), the created flash player container mistakenly uses the allowScriptAccess attribute. The

Why? C9 static article publishing system version 2.3.8 does not strictly filter messages, resulting in inserting a sentence Code: Names = funstrs (request. Form ("names "))Code = funstrs (request. Form ("mg "))Title = funstrs (request. Form

Author link Hey, when I was reading a book in the restroom recently, I was directed to an article titled "adding superuser asp code". I heard that wscript. shell can be used to escalate permissions. The advantage is that the success rate is

Affected Versions:Mozilla Firefox 3.6.Mozilla Firefox 3.5.xMozilla Firefox 3.0.xMozilla Thunderbird 3.0Mozilla SeaMonkey 2.0Vulnerability description: Firefox is a popular open-source WEB browser. Firefox's addEventListener and setTimeout

Yesterday, the knife threw a problem in the group, saying that there was always an error when a sentence was inserted in the background. The friends in the group made a lot of ideas, but they still did not solve the problem. Later, this kid threw

Author: Mosquitoes A few days ago, I saw a legendary anti-deletion Trojan, encrypted, and decrypted. It was time to break it and I don't remember it. If you are idle, consider how to implement it. First, consider the attribute issue. Deleting a file

In recent years, SQL injection attacks have plagued a large number of enterprises and have become a nightmare for enterprises. Since middle August, a new round of large-scale SQL injection attacks have swept a large number of websites, and even

Previously issued a similar, support ASP and PHP version (Portal: http://www.bkjia.com/Article/201102/83466.html oldjun original,) Today I combined with a customer portal site security maintenance requirements, the method to prevent JSKY from

After a day, I finally completed one of the assignments assigned by Master (hiphoph4ck ~   ----------------------------------------- UTF-7 XSS Paper -----------------------------------------   ***************** 0x01. What is a UTF-7? *************