Cloud Security

Although man-in-the-middle attacks are ancient, they are still at risk of being attacked by hackers, which may seriously harm servers and users. There are still many variants of man-in-the-middle attacks that can easily fool layers and intrude into

I remember a few years ago, Bluetooth was on the rise. At that time, it could cover a lot of Bluetooth Access Points within a dozen meters. At that time, I was still attending school and I was bored in class, I will find some Bluetooth Access Points

The drag-and-drop feature is currently supported by mainstream browsers, but it is still different in terms of function support and security. For detailed technical details, refer to MOZILLA'sDrag & DropChapter. In HTML5, drag and drop is a part of

The previous post popularized some basic concepts and common sense. Next, let's talk about some practical things: introduce common routines used by attackers. Attackers can perform the following steps: information collection, counterfeiting,

Some time ago, I was wondering how many broadband passwords our landlord had, but I was not very interested. I was bored last night and figured out how to find the broadband password in the router. I know the management account and password of the

The database plug-in has always been a blind spot in network security. Indeed, this vulnerability is hard to prevent. mdb is almost replaced with. asp to prevent database downloads.This attack is almost fatal. No matter how strict your website is,

On Weibo, a buddy sent a figure of MM. As a diaosi, he had to envy and hate it, so he had to see where it was. Here we recommend a google plug-in: (only names are provided, and google is not recommended) Put the MM photo into it to get the

Vulnerability Description: Injection caused by User_Article.Asp and the administrator password is exposed. Usage: http: // localhost/User/User_Article.Asp? ModeID = 1 action = addsclassid =-1 '% 20 union % 20 select %, 3, 4, 5, admin_name % 2B' | '%

I saw an article about exporting the Registry to break the password forever. This is a good news for a lot of hash-grabbing tools that have been killed and won't be killed by yourself, in fact, this was a long time ago. It seems that it was proposed

========================================================== ========== Interactivefx. ie cms SQL Injection Vulnerability ========================================================== ========== 1-=- =-= 0 0 _ 1 1/_ '/\__/_ '0 0/\ _, ___/\ _ ___, _/_ __

From Kingdee blog How to Use the asp webshell from t00ls. The premise of shell analysis is that the shell must be in plain text, so we should decrypt the webshell first. This is a typical example of using thirteen reverse encryption, and a function

Test method:The Program (method) provided on this site may be offensive and only used for security research and teaching. You are at your own risk! ========================================================== ========================Joomla component

From H4ckx7s Blog When observing a large station, you can see the Bird CMS management system in the background of a station, and remember what the omnipotent Password Vulnerability exceeded 1.1! I don't know what's wrong with the latest version! I

From ghost son s Blog Affected Versions:FooSun> 5.0 Vulnerability Analysis:In the file API API_Response.asp: If Request. QueryString <> "" Then // row 16thSaveUserCookie ()ElseSet XmlDoc = Server. CreateObject ("msxml2.FreeThreadedDOMDocument" &

Affected Systems: MyPHP. ws MyPHP Forum v3.0 (Final) Description: Bugtraq id: 27118 MyPHP Forum is a Forum that is easy to set up and easy to use based on MySQL and PHP. The input authentication vulnerability exists when MyPHP Forum processes user

The Cross-Site vulnerabilities mentioned here include cross-site scripting attacks, cross-site request forgery, and other same-source attacks. These attacks are currently very common attacks. This article can be viewed by Web developers or by

Not long ago, Twitter once broke an XSS. The tragedy was that the programmer's patch solution was faulty and the result was once again cracked.For detailed analysis, seeHtml "target = _

At work or other times, I often encounter some websites with anti-injection code, which is really a headache, however, on the other hand, I finally had a new topic that could be considered in depth. At the same time, I also saw many methods provided

-= Written in front, but not nonsense =- Update-1: I saw a discussion on the QQ collar and found that RSnake introduced this as early as 07 years ago.MethodIt seems that I am out. Update-2: It is said that the regular expression can be used to match

# Exploit Title: Joomla! Spam Mail Relay# Day: 11 Jan 2011# Author: Jeff Channell# Software Link: http://www.joomla.org/# Versions: 1.5.22, 1.6.0 Joomla! 1.5.22 & 1.6.0 both allow spam email to be relayedUnsuspecting victims via the core com_mailto