Cloud Security

Source: Ghost blog Preface:Not long ago, I got a vbs script virus. My mother was confused, i'm lucky enough to find a complete introduction to the decryption process. Thanks to this wonderful post, I just got a step-by-step solution. Now I have this

No virus or Trojan exists in the system and cannot be completely isolated from the process. Even if the hidden technology is used, it can still find clues from the process. Therefore, viewing active processes in the system is the most direct method

Source: CCID Author: smtk Because VBS is easy to embed into webpages, more and more hackers use this method to spread Trojan viruses. When vbsvirus is detected, you can see the .vbs.exe file under Windows. The wscript.exe process exists in the

Nowadays, many malignant Viruses need to be scanned and killed using the exclusive killing tool, but some viruses will automatically prohibit the running of the exclusive killing tool. We often use other systems (such as DOS or PE) to scan and kill

Virus name: Trojan. Delf. rsd MD5 216a00003443fc9c46fe4d32aa13c390f After running, the virus sample is automatically copied to the % SYSTEMroot % directory: % SYSTEMroot % flashplay. dll%Systemroot=ge_1237.exeX: flashplay. dllX: readme.txt.

Many netizens want to take anti-virus after being poisoned and find that the anti-virus software cannot be started, and the installation of anti-virus software will also fail. Often, you can choose to format and reload, but Ghost is always familiar

One day, the firewall's performance monitoring suddenly experienced a problem, ranging from to every day ~ The number of connections that change between and. Today, the number of connections continues to change around. Due to exceptions, I

Kaspersky Lab recently received a report from a netizen about the theft of a QQ number after checking an image. With years of anti-virus experience, Kaspersky is keenly aware that this is not just a coincidence. Kaspersky virus analysis experts

Author: conqu3 Pax. Mac core member When someone in the group asks for help uploading, he broke through. Then I sent an address: http://www.bkjia.com/club/cafe_bbs.php? Cafeid = zmaica & ptype = board & sptype = insert & mode = insert & code =

Http://www.bkjia.com/member/ajax_membergroup.php? [Url = mailto: 00. & action = post & membergroup = @ % 60] action = post & membergroup = @ ''[/url] 'Union select pwd from '% 23 @__ admin' where 1 or id =

The author's website experienced a wide range of attacks one night. According to post-event statistics, the attacker used about 0.5 million concurrent and sustained attacks on the website, it seems that the load on the website application server is

1. There is an SQL injection in the classroom query area, 1 union select NULL, owner from all_tables database exposed 2.SQL Injection exists in password retrievalThe verification method is local javascript verification, and the server does not do

Many Elevation of Privilege kill are using the registry HKEY_USERS \ S-1-5-20_Classes position to add configuration to change some of the configuration information of the system,Allow hackers to escalate permissions!Precaution:=======================

This is caused by the mysql_close function. Reference: http://php.net/manual/en/function.mysql-close.php Mysql_close () closes the non-persistent connection to the MySQL server that's associated with the specified link identifier. If link_identifier

In fact, this idea comes from the rebound of nc, And the trojan connects to bypass the firewall .... ... When we directly access a cdn domain name, we must first pass through the cdn layer... what if we ask the server to connect to us ?? Can't we

An example of XSS + logic vulnerability verification.>. Only one reflected XSS is found>. The parameter that is not filtered is CatalogName.Http://www.m18.com/Style/CatalogSubscribe.aspx? CatalogName = "> & CommentUrl = http://www.m18.com/Catalog/F9

We can't afford to buy TV in house decoration. We can't afford to buy sharp or Sony. Look at Hisense in China and look at it. We can see the vulnerability. mysql root has a blank password in the background, it seems that Weibo can still be sent

Shell is offered by dual-sided bulls. When I plan to read "xuanyuan sword", I am told that I am bored and let me see the Elevation of Privilege. I am not interested immediately. Why, I have not done anything about double-sided scalpers. Can I do it .

1. spring-security-core 2. spring-security-ui 3. famfamfam, mail, jquery-ui, jquery, webxml 4. cal-client Modify the password encryption section of UserController and RegisterController in spring-security-ui. Add the following parameters to config.

The uploadfile. asp file used by the program is not verified, resulting in the creation of a malformed directory to upload an image Trojan to obtain the shell vulnerability.Exp: http://www.bkjia.com/admin/uploadfile. asp? Uppath = mad. asp & upname =