Cloud Security

Phpweb + iis6 Parsing Vulnerability shell Process To achieve the desired efficiency, we can find phpweb sites in batches, Keyword: inurl: news/html /? 411. html can also be detected in batches using some web vulnerabilities, such as the Red/Black

FFmpeg hsf-_slice_header_init Function Denial of Service Vulnerability (CVE-2015-8661)FFmpeg hsf-_slice_header_init Function Denial of Service Vulnerability (CVE-2015-8661) Release date:Updated on:Affected Systems: FFmpeg Description: CVE

Troubleshoot a Linux trojan virus intrusion (DbSecuritySpt) A newly started company suddenly threw a development and testing machine directly to the public network. The output traffic increased by more than 300 M, which directly led to high server

Credential stuffing caused by an improper design of an osscmd Interface Credential stuffing caused by an improper design of an osscmd InterfaceDetailed description: Http://www.aoshitang.com/login.actionthe local code was not verified at the

A service defect in Chongqing Mobile may be caused by Intranet There are traces of intrusion. Security means that you do not know that what you are using has been hacked. Security means security.I will not go deep into it. After all, I am using my

After 28 rounds of the Return key: a Linux vulnerability can cause a "one-click" intrusion on the machine. Some people say that the definition of 'madge' is to repeatedly repeat something, but expect a different result. However, it turns out that

Ctf encryption I have done in those yearsRecently, ctf has made a lot of work. By the way, I have made some notes, including several articles on encryption, implicit writing, reverse cracking, and web. After these articles are compiled, they will be

Binary files protected by virtual machines in reverse order 0x00 Introduction In code obfuscation, virtual machines are used to run different machine instruction sets on a program. For example, a virtual machine can run the ARM Instruction Set on a

Reverse Engineering (I): Basics of assembly and Reverse Engineering   This series of articles will explain the various knowledge of reverse engineering, which is easy to understand. Assembly is the basis of reverse engineering. This article is not

SQL Injection in China Railway Express causes a large amount of information leakage China Railway Express has SQL injection, leading to a large amount of information leakage (Code, login name, and password of each national Branch) Http: // **.

UPack's working principle and instance analysis (I) Everyone knows that the UPack is a common topic in Software Reverse Engineering. To understand the compression during runtime, You need to master the basic PE file format and basic knowledge of

Webshell Security Detection (1)-traffic-based detectionI. Overview I have been paying attention to the security analysis of webshell, And I will share my experiences in this period of time. Webshell generally has three detection methods:The

Arbitrary login administrator vulnerability in xiaokaxiu, which has more than 0.5 billion million videos per day Arbitrary login administrator vulnerability in xiaokaxiu, a popular social network The daily video broadcast volume exceeds 0.5

Use multipart/form-data to bypass waf The LuManager high-risk SQL injection 0-day analysis mentions the use of payload as follows: Attackers can see that the multipart/form-data format is used to send payload. For applications, the data obtained

Chinese small and medium enterprises (SME) Web blockout # vulnerabilities cause 10828 enterprise accounts to log on to publish recruitment information Ten thousand eight hundred and twenty-eight enterprise member accounts can be logged on at will,

The SQL injection of Shien milk powder on a website involves 1.03 million member information. Milk PowderDetailed description: http://www.scient.com.cn/news/news.php?id=303 Parameter id injection point: Table: member2013[34 columns]+---------------

Leakage of sensitive user information due to design defects of the main website of Kaiser Travel Network I often receive promotions from Caesar tourism...Detailed description: 1. Caesar master site verification code design defects lead to

The csrf exists in the shipping address deleted from the network. Detailed description: Csrf exists in the shipping address. troubleshoot the problems in other places one by one.Delete the shipping address and capture packets; We can see that the

Getshell can be written to IIS on a website of Kingdee. Getshell can be written to IIS on a website of Kingdee.Detailed description: Improper IIS configuration, which can be written to webshell http://eas75.kingdee.com:85/Proof of vulnerability: #-*-

Weak device passwords can penetrate the entire company. Our company is familiar with ruijie's equipment. Ruijie's device is a word, garbage, garbageAs long as a small router is in the LAN and the same gateway is set up, the company's network is