Cloud Security

A real case analysis of UDP Attack Packets that penetrate the iptables firewall reveals some security risks that are little known when using iptables. I hope to help you! Such attacks are rare and a good troubleshooting process.   Symptom By chance,

Redhat uses SELinux to enhance security. The closing method is as follows: 1. permanently modify selinux = "" in the/etc/SELINUX/config file to disabled, and then restart. 2. the setenforce 0 method to disable the firewall is as follows: 1.

[Article Title]: A themida shelling program LOADER cracking[Author]: rockhard[Author mailbox]: wnh1@sohu.com[Software name]: test.exe[Shelling method]: themida[Protection method]: themida[Tools]: ollydbg, VC[Author's statement]: I am only interested

Last article address: http://www.bkjia.com/Article/200801/23546.html I wrote an article about vbprogram cracking last time. This time I found that this method is not generic, so I wrote a new article. in fact, these two articles are not specifically

Arm3.61 enhanced IAT decoding protection. Here we only talk about the protection code tracking experience before IAT decoding.The program used this time is goodmorning issued in http://tongtian.net/pediybbs/viewtopic.php? T = 5395 & sid =

Our reverse world In the circle of software cracking or software encryption and decryption, we are no stranger to the word "reverse engineering" because of your interests, this makes everyone struggle with the word "reverse engineering" every day.

From: From Neekes Blog Haha, I'm interested. I'm willing to try anything. Take a look at the technical articles written by others, and manually record the steps. 1. Use OD to load the Notepad program that uses UPX with shell. Check the materials

From:Jgaoabc Space Recently, I did some research on the Beidou 4.1 shell, and found that this shell has good compatibility, high compression, and easier shell modification. Therefore, I would like to recommend my shell modification method, after

System: Archlinux, wireless network card: TP-LINK321G +, encryption method: WEP Preparations before cracking: Install aircrack-ng and install iw (as required) Cracking Process: 1. Start the monitoring mode of the wireless network card and run it in

Riusksks blog Today in the high-end debugging Forum saw someone asked: Open the word program is very slow, how to debug (http://advdbg.com/forums/4096/ShowPost.aspx ). Zhang yinkui, a legendary debugging expert, replied: "Append the debugger (WinDBG)

[Author]: MPL[Software name]: Vbsedit 5.2.4[Software size]: 8.5 M[]: Http://www.vbsedit.com/tr_download.asp[Shelling method]: No shell[Protection method]: do not understand[Language]: Microsoft Visual Studio. NET 2005 -- 2008-> Microsoft Corporation

The sharing video and music in the fresh fruit log can be used to insert some cross-site code to achieve the XSS effect. For details, see the proof. To achieve persistent control over users, you can send a log containing cross-site code and set the

A vendor hacked the domain name due to the social engineering of the domain name provider a few days ago. When I went to register the domain name, I checked the security. I didn't expect the main site could find sqlinject, and I still had root

Brief Description After the website is installed, install in The install Folder. php is renamed to install. php. lock, but we can access this file, so we can use the packet capture tool to reload the website. Usage instructions 1. FireFox directly

A few days ago, I got a shell from the station, windows2000 system. The Elevation of Privilege was successful, 3389 was not enabled, and 3389 was opened. After the server was restarted, lcx forwarded and 3389 logged on. After entering the server, we

This injection point can use error echo injection to blow up data. This article uses more troublesome blind injection for the purpose of explanation.Reading this article requires a little SQL basics. Blind note is actually very simple to understand,

Today, I am sorting out some js files and added markdown support to the People's Network in May. However, the freedom of UGC means we need to take some measures to maintain it, such as anti-XSS attacks. I wrote an email in early September. The

A typical method of website intrusion is to log on to the background and upload webshell. This article analyzes how to break through the upload restrictions and upload an IMG containing a Trojan horse.1. Find an upload location:When we find the

Google: intext: powered by Thaiweb inurl: index. php? Page = board. php exploitation Point 1: http://www.bkjia.com/index. php? Page = .. /.. /.. /.. /.. /.. /.. /.. /.. /.. /.. /.. /.. /etc/passwd utilization Point 2: http://www.bkjia.com/index. php?

Register an online car market account, retrieve the password, and open the given urlhttp: // service.cheshi.com/user/resetpassword.php? User = ******** & email = *********** % 40163.com& salt = eb5f16 & u = & c = the number of times this address is