Cloud Security

Five phases of file integrity monitoring, file integrity monitoring If the file integrity monitoring (FIM) solution is deployed well, the benefits are great: If you see unexpected or uninterpretable file modifications, you can immediately start the

A large number of WordPress websites are infiltrated and become the source of DDOS attacks Recently, Sucuri security researchers found that tens of thousands of WordPress sites were used for layer-3 DDos attacks. A total of 26,000 different

How can I recover data from Android phones correctly? Many people think that data recovery is a tool sweep. This idea is very wrong. To do a good job, you must join your personal thoughts instead of simply repeating the inherent actions. For example,

QR code vulnerability attacks on Android platforms0x00 Preface Currently, almost all Android apps have the QR code scanning function. If you do not consider the possible security problems of the QR code, scanning the QR code will be vulnerable to

Analysis of Camera App privacy data leakage0x00 PrefaceMany popular Android applications have leaked private data. We found another popular Google Play app, "Camera Ultimate", not only optimized users' photos, but also inadvertently

Cisco TelePresence System MXP series management flow creation Denial of Service Vulnerability Release date:Updated on: Affected Systems:Cisco TelePresence Systems (CTS)Description:CVE (CAN) ID: CVE-2014-3362 Cisco TelePresence is a Cisco

As a network manager, malware analysis may not be our most important task. However, if a malware affects your desktop application, you may consider the nature of this unfamiliar malicious code. In general, starting from behavior analysis, you can

Release date: 2010-08-23Updated on: 2010-09-03 Affected Systems:Wireshark 1.2.0-1.2.9Wireshark 0.10.8-1.0.14Unaffected system:Wireshark 1.2.10Wireshark 1.0.15Description:--------------------------------------------------------------------------------

Release date:Updated on: Affected Systems:Apache Group Struts 2.2.3Apache Group Struts 2.0.14Description:--------------------------------------------------------------------------------Bugtraq id: 51902Cve id: CVE-2012-1006 Apache Struts is an

Release date:Updated on: Affected Systems:Cisco IronPort Encryption Appliance 6.xUnaffected system:Cisco IronPort Encryption Appliance 6.5.3Description:--------------------------------------------------------------------------------Bugtraq id: 52030

Release date: 2012-10-08Updated on: Affected Systems:Adobe Flash PlayerAdobe AIRDescription:--------------------------------------------------------------------------------Bugtraq id: 55827Cve id: CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012

Release date:Updated on: 2013-01-31 Affected Systems:Apple iPhone 4.xApple iPhone 3.xApple iOS 3.xApple iOS 2.xApple TV 5.xApple TV 4.xDescription:--------------------------------------------------------------------------------Bugtraq id: 57595CVE

Fast-Track is a built-in penetration tool in the Backtrack tool. It shows her powerful Power in the modern penetration testing process, it also puts a lot of pressure on security personnel. When it comes to Fast-Track, the user is most familiar

OS X OceanLotus (Hailian flower Trojan) On April 9, May 2015, researchers from Qihoo 360 published a research report on OceanLotus Trojans. In the report, they analyzed in detail the trojan that attacked Chinese organizations. The report also

Virus Trojan scan: manually killing pandatvI. Preface At the beginning of this series of studies, I chose the "pandatv incense" virus as the study object. The reason for choosing this virus is mainly because it is representative. On the one hand, it

Currently, it is common to implement remote office via VPN. There are two main shortcomings of this method: first, to ensure that VPN users can access the Intranet at any time, the computers on the Intranet must be started up for a long time,

Analysis of password control security technology and attack examples The password control is a common control. This article mainly introduces some implementation and attack ideas of the security password control. 1. Comparison of the physical

PGP (Pretty Good Privacy) is a program developed by Phil Zimmermann in 1991 for data encryption and digital signature. It has been widely used to form an open standard OpenPGP, gnuPG is an open-source free program that implements this standard, this

SQL injection quick query table (on) 0x00 SQL injection quick query table Currently, only MySQL, Microsoft SQL Server, and some ORACLE and PostgreSQL are supported. Most examples do not guarantee that each scenario is applicable. In actual

This is an article I wrote before in the green corps. It was originally written by myself. I learned from a t00ls article and made improvements. The name of my account in the green corps is also leisureforest.There is no doubt about the authenticity.