Cloud Security

Process and conclusion of CVE-2014-4423 Analysis Introduction Some time ago, "steamed rice" published an article on its blog "phishing attack (stealing the App Store password) on a non-jailbreaking iPhone 6 (iOS 8.1.3 )", try to reproduce the entire

X. Org X Server 'xkb/xkb. c' Information Leakage Vulnerability Release date:Updated on: Affected Systems:X.org X ServerDescription:Bugtraq id: 72578CVE (CAN) ID: CVE-2015-0255 X. Org Server is the official reference implementation of X Window

Advantech EKI-1200 Series Buffer Overflow Vulnerability (CVE-2014-8385) Release date:Updated on: Affected Systems:Advantech EKI-1200 Description:Bugtraq id: 72580CVE (CAN) ID: CVE-2014-8385 EKI-1200 Modbus gateways are bidirectional gateways that

ARP spoofing by network security experts The dark night gave me black eyes, but I used them to turn white eyes. If you have signed a forum using this sentence, you are a veteran hacker or an information security enthusiast. We will discuss remote

Hijack SSH session injection port forwarding0x00 Preface Yesterday, the links in A niuba group were actually suitable for leaving backdoors. They belong to the Post Exploitation stage. I have never used this method before. They are all dumpfounded

Shell script (strict terminal format control, beautiful output font color)[Cpp] view plaincopy #! /Bin/bash # # The following figure shows the font output color and terminal format control. # Font color 30-37 Echo-e "\ 033 [30 m black

Use portsentry-Intrusion Detection in CentOS Portsentry is a good choice to block the overwhelming network scanning behavior. This software is a free tool written by Rowland for detecting and blocking network scanning. The current version can be

Detailed procedure for removing rogue software System Safety Monitor (SSM) (Baidu search: Download SSM, for example ). After the "Dragon Sword" is entered into your system, it will be started along with the system, and reduced to the system tray

Basic Introduction to Android Trojan This article introduces Android-based mobile malware as a basic introduction. It provides an analysis and Tool Guide for beginners. The Trojan Horse to be analyzed is the syssecapp.apk in 2013. The Trojan Horse

WordPress 4.2.2 patch Truncation in 4.2.1 Vulnerability Analysis In the description of this patch, one of them is to fix the xss issue after the patch bypass in version 4.2.1, the following describes the specific verification process after the

Penetration Testing of changba (entering several backend and O & M systems and configuring VPN) A penetration test of changba. Attackers can obtain a large amount of sensitive information, access several backend and O & M systems (wiki, cacti, erp,

An email server of China Southern Airlines can remotely obtain administrator privileges. The artifact is found. Please be careful about worms ~ ssh [email protected]P@ssw0rd       [admin@smtp1 ~]$ netstat -antp(Not all processes could be

MS15-034/CVE-2015-1635HTTP Remote Code Execution Vulnerability Analysis   Preface On patch day April, Microsoft fixed a remote code vulnerability MS15-034 in HTTP. SYS by marking a "high-risk" CVE-2015-1635 patch. According to Microsoft's

Kaiyuan travel channel design defect causes reset of User Password If the previous vulnerability passes, it would be easier to reset the password. The design defect of the website is that the password reset link is a fixed value, no matter how many

LBE arbitrary number interception vulnerability and Solution LBE exports the blacklist, whitelist, and keyword interception databases to third-party programs in the form of ContentProvider without verifying the caller. As a result, the interception

NodeJS application repository phishingPreface The castle is always broken from the inside. A powerful system can also be controlled. If the intrusion is initiated directly from the human link, then the strong line of defense will also become a

Optimistic about your portal-data transmission on the client-Appendix-http information header descriptionAppendix, the http header information of the REQUEST in JAVA, which may be useful for reference. System. out. println ("Protocol:" + request.

Pack the latest version of ThinkSAAS Vulnerability SQL Injection + File Inclusion +...Learn from xfkxfk, pack multiple vulnerabilities, and want to go through a major vendor process. In the latest version, the tsUrlCheck () function has multiple

MvMmallv5.5SQL injection using php exp Vulnerability Type: MvMmall v5.5.1SQL Injection VulnerabilityDefault backend: admincp. php? Module = indexGoogle Search: "Powered by MvMmall v5.5.1 ″I. exploitation method: php exp Exploitation1. Install the

China Mobile Weibo storage XSS worm (with worm POC) 1. Forward Weibo2. Posting new Weibo posts3. Listen to me The problem lies in the long Weibo post of China Mobile Weibo.  You can insert 30 characters of code without filtering the title.  Page