Cloud Security

Mac-based youdao dictionary XSS Vulnerability Mac-based youdao dictionary, which has the XSS vulnerability during word translation. You can easily refer to the box using SVG labels.Detailed description: 1. Open the youdao dictionary and select the

Multiple D-Link products, HNAP command, Remote Privilege Escalation VulnerabilityMultiple D-Link products, HNAP command, Remote Privilege Escalation Vulnerability Release date:Updated on:Affected Systems: D-Link Wireless Router Description:

Apache Batik Information Leakage Vulnerability (CVE-2015-0250) Release date:Updated on: Affected Systems:Apache Group Batik Description:CVE (CAN) ID: CVE-2015-0250 Batik is a Java-based application toolkit that uses the SVG format for multiple

PostgreSQL Information Leakage Vulnerability (CVE-2014-8161) Release date:Updated on: Affected Systems:PostgreSQL 9.4PostgreSQL 9.1PostgreSQL 8.4Description:Bugtraq id: 72538CVE (CAN) ID: CVE-2014-8161 PostgreSQL is an advanced object-relational

Use sslsplit to sniff tls/ssl connections I recently demonstrated how to use mitmproxty to execute mitm attacks on HTTP (S) connections. When mitmproxy supports HTTP-based communication, it does not know other TLS/SSL-based traffic, such as FTPS,

Seven reasons for blacklisting you Common sense tells us that users are the weakest link in IT risk management, especially for "naive and brave" users ...... But how did hackers use this naive (lack of protection awareness) to access user terminals

Black out student cards at Oklahoma State University0x00 basic magnetic stripe knowledge All content in this article is for study and research purposes only. If it is used for illegal purposes, you are solely responsible for any consequences! Note:

Modify SSH port for CentOS VM instance security and disable ROOT login In fact, Linux is safe, but if the password is not complex enough, if the lower case + number is 12 digits in total, your SSH uses the default port, A powerful hacker can crack

How to correctly test and maintain the firewall?Eric Cole, a technical expert in this article, describes how to solve the problem of low firewall performance and fault through proper maintenance and testing. Most enterprises think that firewall is a

What is SQL injection attacks in an easy way (Episode 1) Let's take a look at what SQL is summarized by blame shu:   Are you talking about SQL or goddess? I cannot tell you clearly. Although basic things are boring, they are very important. So

Multiple Injection packages in a system of yiche I found that many people recently submitted a hole in the car, making it a hot topic. Problem site:Http://log.yiqi.autodmp.cig.com.cn/Use the previously collected accounts to check the injection

Zookeeper Vulnerability Analysis For those who do not know ZooKeeper, it is a well-known open-source project that supports highly Reliable Distributed Coordination. It is trusted by many security companies around the world, including PagerDuty. It

Inject pseudo-static websites As for the pseudo-static website injection method, laruence literacy comes. Generally, the url of the dynamic script website is similar to the following: Http://www.91ri.org/news.php? Id = 111 This is what happens after

DOS/DDOS Summary (This article is based on the online materials and the author's own understanding. It is only for learning and should not be used for illegal purposes. If your rights and interests are inadvertently infringed, please contact me in

PHP automated code auditing technology0x00 As there is nothing to update in the blog, I will summarize what I have done. As a blog, I will mainly talk about some of the technologies used in the project. At present, there are many PHP automated

Web security engineer-growth record Environment: dvwa1.7 Database: mysql knowledge: SQL statement (Click me) before SQL injection, we are familiar with select statements. 1. Open our SQL Terminal2. After Entering mysql, we can see that we have

Test 178 Intranet through a storage XSS Test the 178 Intranet attachment payload through a storage XSS Site: http://apt.178.com/The input is not filtered when an app or ringtone resource is added.As follows:  After the upload, it will be displayed

Loose loose Password Reset Vulnerability As a financial website, hailun.com is China's largest loan search and service platform. The password reset vulnerability affects the security of funds in all user accounts of the entire system. Please pay

Prevention of CSRF for Web Security Cross Site Request Forgery (Cross-Site Request Forgery) is a type of network attack, the attack can send a request in the name of the victim to the attacked site without the victim's knowledge, so that the

Bypass youdao cloud note reading Password I am a fan of youdao cloud notes. I have nothing to test today. Note has a private Notebook function. You need to enter the reading password during reading, so we can keep important things confidential. When