Ensure IIS security
IIS secure installation
To build a secure IIS server, you must fully consider the security issues during installation.
1. Do not install IIS on the system partition.
2. Modify the default installation path of IIS.
3. Install the
1. Advantages and Disadvantages of multiple services sharing a svchost.exe ProcessWindows system services are divided into two types: independent processes and shared processes. In windows nt, only the Server Manager scm(services.exe) has multiple
If you know an NT account and password, you can useNet use \ host ipc $ "password"/user: "user"Establish a connection with a remote host. This is a method that every hacker or friend who wants to become or is trying to become a hacker knows. I even
The network security caused by changing conditions and changes has left people concerned about it. Database, reminds us of the powerful ORACLE, ms SQL. Microsoft has the most vulnerabilities. Today, SQL injection is used to make ms SQL work well for
1. Password Security
The/etc/passwd file in UNIX systems contains information about each user that all systems need to know (the encrypted password may also be stored in the/etc/shadow file ).
/Etc/passwd contains the user's login name, encrypted
Author: Builder.com
The Internet brings your business to the world, but when you use the Internet, how do you prevent adverse effects from external sources?
Wayne Weisse, sales director of Network Associates high-tech solutions, believes that
Author: dudu from: blog Park
In February March 8, there was a problem that the homepage did not display content, because the. Text program did not perform script filtering on the User display name .. Text. In fact, script filtering is required for
Affected Versions:
Nullsoft Winamp 5.xVulnerability description:
Bugtraq id: 42591winamp is a popular media player that supports multiple file formats. The vp6.w5s component of Winamp has the stack overflow vulnerability when parsing malformed
Affected Versions:
Apple QuickTime Player 7.6.7 (1675)Vulnerability description:
Apple QuickTime is a popular multimedia player. QuickTime ActiveX Control (QTPlugin. ocx) implements IPersistPropertyBag2: Read (1000E330) to process the received param
VLAN-based attack methods are used by hackers Based on VLAN technology. How can they take effective preventive measures in the face of these innovative attacks? In this article, we will introduce the hacker's attack methods and the defense measures
I. IntroductionWith the popularization of personal computers and the development of the Internet, more and more people are accessing the Internet to obtain knowledge and information. However, the network is not so calm. Viruses and Trojans are
Groupadd snortUseradd-g snort-s/bin/falsePasswd-S snortMkdir-p/etc/snort/rulesMkdir-p/var/log/snort/archiveChown-R snort. snort/var/log/snortCd etc; cp */etc/snortSnifferSnort-dev-VUsing this command, only the IP address and TCP/UDP/ICMP packet
Lie to people, that is, the so-called "social engineering", and also include policies (the offending hacker Kevin Mitnick has been specifically implemented ), for example, assume you are an employee of a company so that you can exchange company
It is proved by mathematics that there is an encrypted password that will not be cracked if used correctly, but there is no chance to use it now. This is the one-time key (one-time pad) introduced by the author ).
From our experience, a certain
Redmine is a cross-platform project management system developed based on the ROR framework. It is a rising star in the project management system. Redmine has the remote code execution vulnerability, which may cause attackers to remotely execute
Linux Kernel Security Research-Stack Overflow
By wzt
I. background: Stack overflow is different from the Stack buffer overflow I have previously published. They all occur in the kernel stack overflow.Jon Oberheide mentioned a new method of stack
Registry Registrar Protocol (RRP) Domain Status Codes(Registry-Registrar agreement domain name status code)
RRP is defined by Verisign and used for. com/. net domain name status. This method is also used for some national domain names. There are
Create an administrator user that can never be deleted
Procedure:1. Create a. txt file on your computer.2. Enter content in it
@ Echo offNet user xixi 123456/add Note: The first xixi is the user name and the second 123456 is the password;Net
Affected Versions:MandrakeSoft shortate Server 4.0 x86_64MandrakeSoft shortate Server 4.0PHP 5.x
Vulnerability description:
PHP is a widely used scripting language. It is especially suitable for Web development and can be embedded into HTML.
The
Directly raise the administrator privilege under the Administrator account
Previously written, preventing forgetting, is equally effective for Windows 7
The result is that if the current user is an administrator, the permissions are directly
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.
A Free Trial That Lets You Build Big!
Start building with 50+ products and up to 12 months usage for Elastic Compute Service