Cloud Security

IP addresses in the LAN are accidentally occupied by others, which seriously affects the management and maintenance efficiency of the LAN. To improve the LAN management and maintenance efficiency, it is necessary to restrict the arbitrary

Like other business analyses, the Security Test of network applications has three possible results: your test results, your vulnerability assessment, and the truth. No matter whether you use a commercial or free scanner, you can collect a lot of

The IIS Guest account is used for anonymous access. Its account and password are stored in three places: metabase. xml, SAM database, and IIS security configuration. To be able to use the anonymous access function, the password information in the

From: network security technology blog Today, I updated my article and had a holiday with hoho. "" We found that many VPS used subnet isolation during previous penetration. So I want to test whether subnet isolation can completely solve ARP IN A

Disclaimer: This article is for security learning purposes onlyRecently, I tried to test wireless signals in the community. Based on the fact that most vrouters currently support wps, you must know that aircrack and reaver are the two tools. They

In the first article in this series, we introduced the situation of DDoS attacks on our customer service system and the reasons why we decided to use self-built CDN to solve this problem. Afterwards, we introduced the specific construction plan of

Question 1: Cross-origin penetrationIn an intranet, the domain administrator permission of Domain a (a. AB .abc.com) has been obtained, and the entire domain has been controlled. Net view/domain: B shows that many machines exist in B domain (B. AB

========================================================== =====-Release date: November 11th, 2009-Discovered by: Dawid Golunski-Severity: Moderately High========================================================== ===== I. VULNERABILITY---------------

Common google keywords:Foo1 foo2 (that is, association, such as searching xx Company xx beauty)Operator: fooFiletype: 123 typeSite: foo.com is more interesting than directly viewing the website and can get a lot of unexpected information.Intext:

# Exploit Title: Cype Content Management System Remote SQL Injection Exploit # Date: January 1st, 2010 # Author: Sora # Version: Revision 241 # Tested on: Linux (Backtrack 3)

Dedicated waiting When using php programs, we all pay more attention to website security. So how does php defend against injection? The addslaches () function that comes with php itself is a little weak and cannot be too reassuring. Now I want to

Gogorq I believe many of my friends will use this method. Before I write this article, I do not know which type to classify. Original? Reprinted? Finally, let's discuss it.During the intrusion process, we will use the same server-side method to

As the saying goes, dripping water can penetrate the stone, tianyao grinding into a needle, bit by bit of effort, bit by bit of accumulation, continuous progress, growth is huge. I believe that the small sapling will grow into a big tree, but every

FoosunCMS is a powerful Content Management Software Based on ASP + ACCESS/MSSQL architecture. It is the first open-source, modular CMS site building system integrating web2.0 elements in China.FoosunCMS does not properly filter user input. Remote

Test method: The Program (method) provided on this site may be offensive and only used for security research and teaching. You are at your own risk! \ | ///\--//(@@)---- OOOo -- (_)-oOOo --------------------------------------------------Direct News 4

Usage:Directly access xxx. asp? Bin = zs generates a bin. asp. connection password under the current directory as zs!PS: This file can avoid ScanWebShell, but the generated bin. asp will be scanned and killed. delete bin. asp after use! Pass =

#! /Usr/bin/python ######################################## ################################ # Title: Optimal Archive 1.38 (.zip) 0day SEH PoC # Author: TecR0c-http://tecninja.net/blog & http://twitter.com/TecR0c # Found by: TecR0c # Download: http:/

Affected Versions:Apache Group ActiveMQ 5.3.1Vulnerability description: Apache ActiveMQ is a popular message transmission and integration mode provider. The input validation error exists in Apache ActiveMQ. The user submits the error to admin/index.

Affected Versions:PHP PHP Vulnerability description: PHP is a widely used scripting language. It is especially suitable for Web development and can be embedded into HTML. Str_pad () function, str_word_count () function, wordwrap () function, strtok

SQL injection attacks are the query strings requested by inserting SQL commands into the Web form input field page to spoof the server to execute malicious SQL commands, obtain the data required by hackers Based on the program's return.