Cloud Security

0 × 01.1What is gateway First, let's briefly explain what a gateway is. The Gateway works in the transport layer or application layer of the OSI Layer-7 model and is used for the connection between different networks of the high-level protocol.

We should all know the requirements for security password setup: Use a complex long password; use a mix of numbers, uppercase and lowercase letters, and special characters as much as possible; the same password should not be reused; different

There are three main types of network attacks by using ICMP Packets: Death Ping, ICMP DoS attacks, and redirection-based route spoofing. I. Death Ping 1.1 attack principle-limits the length of Ethernet packets, ultra-large packet networks adopt

Shortcuts have recently become a common communication carrier used to spread malware in targeted attacks. Symantec has found many shortcut files used to penetrate the network, as described in previous blog articles. I recently stumbled upon a case

  After obtaining the SA password, the Server Manager or? Predecessors? Restrict the use of net.exeand net1.exe, and you cannot add an administrator account. We know that VBS has a winnt object in the Active Directory (ADSI) to manage local

Cosine Function I have seen several articles written in foreign countries. I still have a Paper. I forgot where to put it.And then see the ghost: http://www.bkjia.com/Article/201003/45234.htmlMr_xhming of:

ARPSpoof spoofs company webpages to be hacked ipconfig /all  Ping website URL Arpspoof.exe/n   (Click to view the big picture) Figure 8-39 to obtain the IP address of the gateway Server  

Author: icysun I don't know how to use shell after a long time. After entering the background, we can know the website path. This is very important. Directly export a single statement Select * from table1 into outfile c: est.txt. This is not

Recently, I have been contacted by many data porters in Europe, America, Japan, and South Korea databases. It is very difficult for many target sites to get them. However, what we see is data rather than webshell, webshell only facilitates data

Google: inurl: showhelp. asp? Title = about us Showhelp. asp file   Id = request ("id ")Thetitle = request ("title ")If id = "" and thetitle = "\" thenResponse. redirect "tip. asp? Tipstr = No parameter. Please return"Response. endEnd ifIf id <> ""

In this series of articles, we will fully explore how to comprehensively prevent SQL injection attacks in the PHP development environment, and provide a specific development example. I. Introduction PHP is a powerful but easy-to-learn server-side

Many Web applications generally have the ability to read and view files on the server, most will use the submitted parameters to specify the file name, such as: http://www.nuanyue.com/getfile=image.jgp When the server processes the uploaded

Affected Versions: FooSun> 5.0Vulnerability description: In the file User favorite. in asp: Elseif Request ("Action") = "sort" Then // 21st rows if Request ("id") = "" Or Request ("classID ") = "" thenstrShowErr = " the parameter is invalid!

Local test successful Analysis Code: /* Save the uploaded image file to the default path */$ Default_path = ../tmp directory, upload, image /;/* Check whether the $ default_path variable exists */If (! File_exists ($ default_path ))/* Make the

Exponent CMS v0.97 Multiple Vulnerabilities  Vendor: OIC Group Inc.Product web page: http://www.exponentcms.orgAffected version: 0.97 Summary: Open Source Content Management System (PHP + MySQL ). Desc: Exponent CMS suffers from multiple

0x00I heard that the servers where McAfee is installed are abnormal. I have recently encountered several problems. I checked them online and found that I have discussed how to configure McAfee Security. I will learn and share it today. First, we

Affected Versions:Symantec IM Manager 8.4.15Symantec IM Manager 8.4.13Symantec IM Manager 8.4.5Symantec IM Manager 8.4Symantec IM Manager 8.3 Vulnerability description:Symantec IM Manager provides authentication support for enterprise IM networks,

Original: lake2, respect copyright!Anti-injection for maple leaf. Check the Code:Dim Fy_Url, Fy_a, Fy_x, Fy_Cs (), Fy_Cl, Fy_Ts, Fy_ZxFy_Cl = 2 Processing Method: 1 = prompt information, 2 = Turn to page, 3 = Prompt before turningFy_Zx = "../"

====================== ∷ Scanwebshell If (@ set_time_limit (0) ini_set ("max_execution_time", 0 );$ Time = explode ("", microtime ());$ Starttime = $ time [0] + $ time [1];Echo "path of this FILE:". str_replace (\,/, dirname (_ FILE _). " ";$ Scan_

In many cases, we often encounter SQL injection that can be used to list directories and Run Command, but it is not easy to find the directory where the web is located, so it is difficult to get a webshell. This is a good trick: Exec master. dbo.