Cloud Security

Question 1: Cross-origin penetrationIn an intranet, the domain administrator permission of Domain a (a. AB .abc.com) has been obtained, and the entire domain has been controlled. Net view/domain: B shows that many machines exist in B domain (B. AB

Shortcuts have recently become a common communication carrier used to spread malware in targeted attacks. Symantec has found many shortcut files used to penetrate the network, as described in previous blog articles. I recently stumbled upon a case

Author: New4First, go to our dark group forum and see the following post: "black station essential-powerful hidden backdoors. ASP invincible uploader, and someone replied that there is a domain name that does not know what to do, because of

Test method:The Program (method) provided on this site may be offensive and only used for security research and teaching. You are at your own risk! ========================================================== ========================Joomla component

Author: 814ckhum0r 1. Overall Thinking: If asp resolution is disabled on the target website server and the aspshell cannot be executed, you can use the domain name registration information to obtain the technical administrator's mailbox. Through

Affected Versions:PhpMyAdmin 3.x vulnerability description:Cve id: CVE-2010-3263 PhpMyAdmin is a PHP tool used to manage MySQL through the WEB. The setup script of phpMyAdmin does not properly filter parameters submitted to the setup/frames/index.

Exponent CMS v0.97 Multiple Vulnerabilities  Vendor: OIC Group Inc.Product web page: http://www.exponentcms.orgAffected version: 0.97 Summary: Open Source Content Management System (PHP + MySQL ). Desc: Exponent CMS suffers from multiple

0x00I heard that the servers where McAfee is installed are abnormal. I have recently encountered several problems. I checked them online and found that I have discussed how to configure McAfee Security. I will learn and share it today. First, we

Original: lake2, respect copyright!Anti-injection for maple leaf. Check the Code:Dim Fy_Url, Fy_a, Fy_x, Fy_Cs (), Fy_Cl, Fy_Ts, Fy_ZxFy_Cl = 2 Processing Method: 1 = prompt information, 2 = Turn to page, 3 = Prompt before turningFy_Zx = "../"

BPDirectory is a website directory Program (commercial ). The BPDirectory Authentication Bypass Vulnerability may cause attackers to directly obtain administrator privileges. [+] Info:~~~~~~~~~BPDirectory Business Directory Authentication Bypass

Text/figure xyz123The remote overflow vulnerability has not been written for a long time. This time, we will first write a simple Xitami overflow vulnerability, which is a record of this vulnerability analysis technique and provides you with a

In this case, a file in webshell (webshell only) cannot be deleted and cannot be modified. The attribute can be deleted after attributes is removed, but the file is instantly "full of blood, in the original place" It seems that this situation has

[!] ========================================================== ========================================== [!] [~] CMS Lokomedia Local File Download Vulnerability[~] Author: Xr0b0t (xrt.interpol@gmx.us)[~] Homepage: http://www.indonesiancoder.com |

 Technical explanation of blind Injection Judge version number(Select % 20 count (*), concat (select % 20 @ version % 20), 0x3a, floor (rand () * 2 )) % 20x % 20 from % 20 (select % 201% 20 union % 20 select % 202) % 20a % 20 group % 20by % 20x % 20

A plug-in on a custom page of Worepress has the remote Inclusion Vulnerability. Plug-in name: wp custom pages version: 0.5.0.1 Please upgrade the new version as soon as you have installed it. Send a test. As follows: Windows % 2fwin. ini "> http:/

An ASP program that brute-force cracking MSSQL user password. The following versions can be used to close the browser after running. After running, a result file will be generated in the current directory. CODE:  '============ ASP Port export by

Time and Expense Management System is an ERP System developed using PHP. The Time and Expense Management System has the command injection, file upload, and reflected cross-site scripting vulnerabilities, attackers may intrude the website that has

RAyh4c Black BoxI haven't updated my blog for a long time. I flipped through a piece of code to test the gmail mhtml vulnerability in WIN7. I don't know where to lose the full version I wrote --! The MHTML vulnerability initiates an AJAX request in

The last time I saw ring3 H, I took WEBSHELL through this program, but he was very simple and had a function: It is easy to replace directly. Not much. I will focus on how to use SHELL in a version without this function. It seems that many

Judge version number (Select % 20 count (*), concat (select % 20 @ version % 20), 0x3a, floor (rand () * 2 )) % 20x % 20 from % 20 (select % 201% 20 union % 20 select % 202) % 20a % 20 group % 20by % 20x % 20 limit % 201) % 23 ">