Cloud Security

QQ Browser Remote Arbitrary Command Execution Vulnerability (with analysis and use) 1. For the QQ browser, as long as it is a webpage under the domain name of qq.com, it has the permission to call some API Interfaces under external,

Will the open source movement come to an end? -- Talk about how to treat OpenSSL heartbleed The open-source movement is gradually accepted with the birth and widespread use of Linux operating systems. IT is a major change for the software and IT

Rising posture! How to crack the graphic lock of Android phones The graphic lock of the Android phone is a 3 × 3 dot matrix. The number of connections in order reaches the lock/unlock function. At least four points must be connected, and up to nine

Polar bastion host common user command execution (root permission) Polar internal control bastion hosts use advanced technologies to protect internal network devices and servers, and monitor and audit common access methods for such assets, it can

X. Org X Server 'xkb/xkb. c' Information Leakage Vulnerability Release date:Updated on: Affected Systems:X.org X ServerDescription:Bugtraq id: 72578CVE (CAN) ID: CVE-2015-0255 X. Org Server is the official reference implementation of X Window

"Blood cases" caused by the Ghost Vulnerability"0x00 background A security company recently discovered the glibc gethostbyname buffer overflow vulnerability, which is named as ghost because the Gethostbyname function of glibc caused a heap overflow

The GHOST vulnerability may affect WordPress and PHP applications. Last week, Glibc found a heap buffer overflow vulnerability called GHOST that can be remotely exploited. The vulnerability has been fixed by the upstream, however, some downstream

Test network security with Cortana SoftwarePreface Generally, most companies or enterprises deploy an IDS intrusion detection system to monitor network security. When an attack occurs on the network, IDS automatically generates an alarm. Although

Use iptables to automatically seal IP scripts in CentOS This script is used to analyze and count the secure log file. You can use iptables to block IP addresses with many ssh logon errors. #! /Bin/bash# Created by haiyunNum = 10 # Upper

Linux File tamper-proofing scriptIn Linux, the file tampering script file is a tamper-resistant script. Once a file is modified, an alert message is sent immediately. #!/bin/bash #description： check files shell #author：coralzd powered by

Anti-Virus Attack and Defense Research: self-starting using the registryI. PrefaceAs I mentioned in the previous article, as long as you do not double-click a virus Trojan, it will not run. When it comes to running, there are many ways to realize

Anti-virus attack and defense research: Add a section to implement code ImplantationI. Preface The method discussed in this article is to add a section, which can achieve the effect of private customization. The size of this section is determined by

How to correctly test and maintain the firewall?Eric Cole, a technical expert in this article, describes how to solve the problem of low firewall performance and fault through proper maintenance and testing. Most enterprises think that firewall is a

Create a permanent backdoor using NTFS data streams NTFS exchange data stream (ADS) is a feature of the NTFS disk format. In the NTFS file system, each file can have multiple data streams, in other words, in addition to the main file stream, many

Optimistic about your portal-data transmission on the client-insecure http information Header1. In the Internet, a large amount of data is transmitted through URL parameters. Most of the data is not transmitted through encryption. As I have learned,

Research on the New Arbitrary File Read Vulnerability0x00 Preface Boooom has discovered many Arbitrary File Read vulnerabilities on wooyun, which are like Http: // target/.../etc [wooyun]/passwd In this way. At that time, I felt very novel, because

Lenovo's website background security defects and SQL injection (including repair ideas) Security defects in the background: Find SQL injection, read files, and log on to the backgroundHttp://css.lenovo.com/lxymanage/login.php. The verification code

XSS cross-site scripting vulnerability explanation and Protection What is "xss cross-site scripting "? Baidu encyclopedia says this: Cross-Site Scripting (XSS) is not the abbreviation of Cascading Style Sheet (CSS, therefore, cross-site scripting

Yeah.net email storage XSS can hijack others' accounts First, the problem lies in the attachment Preview (currently, the mailbox body is filtered almost ), attachment preview: If you preview files of the doc docx type, Microsoft's Online Preview

Dom xss mining and Analysis of a business master station in QQ Attackers can steal the skey and uin from all browsers without blocking them. When mining flashxss, we accidentally discovered such a URL during decompilation: Show.qq.com is a main