Cloud Security

All the code in this article is based on the CentOS 6.4 operating system as an example. It should be applicable in version 6.x. If other versions are different in the command path, the idea is the same. This article can also be called: CentOS

Vswitches play an important role in protecting the security of virtual infrastructure. Therefore, you can learn how to apply the VMware vSwitch Security Configuration to minimize the chance of your virtual infrastructure being compromised. To

Recently there was an IE 0day (CVE-2014-0322) used for hanging horses. Although this vulnerability exists in IE, in order to achieve successful exploitation, the sample also uses flash as an aid to break through various protection measures. The

After xx conducted a brutal overflow test on the pcman ftp software last semester (the FTP user name is exclusive and the version is unclear), I also began to learn about reverse and overflow, google searched pcman's ftp and found this overflow

Many people ask me which operating system is most suitable for hackers. I will tell you that almost every professional hacker uses Linux or Unix. Although some intrusion can be achieved through Windows and Mac OS, almost all hacker tools are

Mysql optimization settingsOpen the/etc/my. cnf file and modify the following settings. If not, add it manually. When adjusting the settings, please do your best, which depends on the configuration of your server, especially the memory size. The

Faults:The server is infiltrated. Intruders create self-run files, automatically create and execute files under/tmp, and automatically detect and disable iptables.Discovery process:1. log on to the server and run the netstat-anp | grep LIS command

The other day, FireEye released a new 0-day attack report using AdobeFlash, and Adobe released a security update based on the vulnerability. According to FireEye, many websites redirect visitors to the following malicious servers that contain

By default, Windows opens many service ports on our computers. Hackers often use these ports for intrusion. Therefore, understanding port knowledge will help us improve internet security. First, let's take a look at what is a Port: In network

RAID 5 is a storage solution that combines storage performance, data security, and storage costs. RAID 5 can be understood as a compromise between RAID 0 and RAID 1. RAID 5 can provide data security for the system, but it is more secure than Mirror,

Today is boring. I haven't opened my job, and I don't know what to do. I haven't come to my blog for a long time. Let's take a look at it today. Ah. No updates in 10 months. Update it today. This article is actually written by someone else. I will

Last year, I needed a hardware firewall. I tested three hardware firewalls with routing functions, there is Sangfor, hillstone, And a brand that won't be mentioned because of problems. Every firewall has been tested for one month. I have found some

Introduction In the eyes of ordinary people, rub is a very advanced technical activity. It is always difficult and difficult to do. I have lost my mind before I started learning it. In fact, it is too simple. It is no exaggeration to say that, as

0 × 00 CauseThis may cause some impact, so the document does not mention the name of the email system. This email system is used by many colleges and universities and educational institutions. Last year, a younger brother asked me if I could intrude

Cause One of our customers wants us to perform penetration tests on their websites to discover their weaknesses and help improve security. After obtaining the penetration test authorization from the other party, we began to analyze the website. Find

I learned these things in dvwa (Damn Vulnerable Web App). I installed dvwa in my free space. If you are interested, please check it out. DVWA If you want a user name and password, you can contact me: sq371426@163.com Dvwa is provided by google for

0x00 test environment Operating System: Windows Server 2008 R2 Enterprise Service Pack 1x64 IIS Version: IIS7.5 program: asp.net0x01 IIS7.5 Installation   Common http functions: Enable static content, default documents, HTTP errors, directory

There are also logical design defects in the shopping cart. The number of items can be negative, resulting in arbitrary tampering of the total amount. Detailed Description: Total Amount of Shopping Cart = item 1 × quantity + Item 2 × quantity

The latest version of XDCMS enterprise management system, due to lax filtering, can bypass restrictions, resulting in SQL injection in the XDCMS enterprise management system login function, look at \ system \ modules \ member \ index. PHP file:

0x01 ASP introduction: ASP is a server-side scripting environment that can be used to create and run dynamic Web pages or Web applications. ASP Web pages can contain HTML tags, common text, script commands, and COM components. Using ASP, you can add