Cloud Security

Appendix: Abbreviations table AH: Authentication HeaderBTP: Back-traffic ProtectionCA: Certification AuthorityCBC: Cipher Block ChainingCLNP: Connectionless Network ProtocolDES: Data Encryption StandardESP: Encapsulating Security PayloadGSS-API:

Writer: demonalexEmail: demonalex [at] dark2s.org   "Overflow" has always been one of the most common (or preferred) means for many Black Hat hackers. With the increasing popularity of security culture,A large number of public shellcode ("overflow"

This article will explain to you what you see in the firewall record (Log? What do these ports mean? You will be able to use this information to determine whether I have been attacked by a Hacker? What does he/she want to do? This article is

If you have experience in Internet cafes or data center management, you must know that virus is a headache. Most of the current viruses have strong replication capabilities and can be transmitted over the LAN, A large amount of system resources are

Today's anti-virus tools have many categories and varied categories, but many cannot completely solve all kinds of stubborn viruses. It's really amazing. Sometimes a lot of anti-virus tools are used to eradicate the virus, especially the various IE

Broadband also gives us a faster Internet access speed, but also brings convenience to the spread of viruses. How to prevent viruses becomes a crucial issue. We can kill viruses in the following ways. Step 1: Make sure you have a strong password for

I thought that the real-time file prevention and control function of anti-virus software was enabled, and it was impossible for the virus to "go to the door". However, one thing I experienced a few days ago actually gave me a try. After I processed

Speaking of viruses, it's always a bit mysterious. I think it's so painful to compile the first dos virus in the past. It took more than three months from the beginning to the end, and it's also a mess, recently, I was wondering if I was infected

VM service providers may be attacked by hackers during operation. Common attacks include SYN and DDOS attacks. By changing the IP address, it is possible to find the attacked site to avoid the attack, but the service interruption takes a long time.

A virus that I have experienced. after hard work, I finally got it done. I have summarized my two experiences for you to share. The eight-bit random number virus is a type of IEFO virus. The virus is characterized by the inability to enter the safe

This kind of article will get angry. Recently, a large number of industry users reported that the robot dog virus has had a serious impact on their normal production and living order. Industry users in Internet cafes, school data centers, and local

Last month, I discussed Google's XSS Vulnerability and provided an example that demonstrates it. I was hoping to highlight why character encoding consistency is important, but apparently the addslashes () versus mysql_real_escape_string () debate

Question: In a recent penetration test, I had a certain idea about permission improvement, not to mention how clear it is, but from scratch. Test process: 1. First, test the target. After testing, it was confirmed that the target website adopts the

 /*-----------------------------------------------------------------------WebCalendar -----------------------------------------------------------------------Author: Egidio Romano aka EgiX www.2cto.com n0b0d13s [at] gmail [dot] com:

Blind Note: You need to log on and cannot submit it frequently. It is too painful to perform in-depth tests.Vulnerability proof: It is too painful to do a simple test, but this can be the whole UC database;After logging on to UC, capture uid and tgt

Arbitrary Code Execution of the potato substation. There are several activity pages on the same server.Detailed description: Command execution vulnerability in phpthink frameworkHttp://a.tudou.com/specapp/index.php/module/action/param1/##@phpinfo ()}

Although Flash is installed on all computers connected to the Internet (Adobe's problem with the constant Web Multimedia format), it seems that it will soon be replaced by the new standard HTML5. According to Adobe, "HTML5 is now widely supported by

What is an xss vulnerability?  XSS, also known as CSS, is abbreviated as CrossSite Script, which means cross-site scripting attacks in Chinese. The specific content refers to malicious attackers inserting malicious html code into Web pages, when a

Vulnerability 1 Upload a new file:  It is dangerous to directly upload files to the images folder of the website. Solution: Delete the FCK editor and use another editor.Alternatively, find the editors/fckeditor/editor/filemanager/upload/php/upload.

Three xss, two phishing games, and one playing