Cloud Security

Phpweb + iis6 Parsing Vulnerability shell Process To achieve the desired efficiency, we can find phpweb sites in batches, Keyword: inurl: news/html /? 411. html can also be detected in batches using some web vulnerabilities, such as the Red/Black

FFmpeg hsf-_slice_header_init Function Denial of Service Vulnerability (CVE-2015-8661)FFmpeg hsf-_slice_header_init Function Denial of Service Vulnerability (CVE-2015-8661) Release date:Updated on:Affected Systems: FFmpeg Description: CVE

Troubleshoot a Linux trojan virus intrusion (DbSecuritySpt) A newly started company suddenly threw a development and testing machine directly to the public network. The output traffic increased by more than 300 M, which directly led to high server

Credential stuffing caused by an improper design of an osscmd Interface Credential stuffing caused by an improper design of an osscmd InterfaceDetailed description: Http://www.aoshitang.com/login.actionthe local code was not verified at the

A service defect in Chongqing Mobile may be caused by Intranet There are traces of intrusion. Security means that you do not know that what you are using has been hacked. Security means security.I will not go deep into it. After all, I am using my

Ctf encryption I have done in those yearsRecently, ctf has made a lot of work. By the way, I have made some notes, including several articles on encryption, implicit writing, reverse cracking, and web. After these articles are compiled, they will be

Binary files protected by virtual machines in reverse order 0x00 Introduction In code obfuscation, virtual machines are used to run different machine instruction sets on a program. For example, a virtual machine can run the ARM Instruction Set on a

Reverse Engineering (I): Basics of assembly and Reverse Engineering   This series of articles will explain the various knowledge of reverse engineering, which is easy to understand. Assembly is the basis of reverse engineering. This article is not

Alimama travel website has SQL Injection (⊙ O ⊙ )... If a problem occurs at a point, check whether there are any problems with all similar points .... POST/lvyou/dest_index/AjaxGetTripList HTTP/1.1Content-Length: 66Content-Type:

Yisearch technology has a large number of webshells on a website that involve a large amount of user data. I only came here when I saw a vendor activity ~~~~ PS: a gift is good, and 20 RANK is good.Yisearch technology found a large number of

Arbitrary File Upload Vulnerability in a Haier System Arbitrary FCKeditor file upload in a Haier System File Upload address: http://home.ithaier.com/FCKeditor/editor/filemanager/browser/default/browser.html? Type = all & Connector =

Another stored xss vulnerability in xueqiu.com You have compared the previous vulnerabilities and confirmed they are not repeated. This problem occurs when you upload a PDF file and describe it.The problem is a bit strange, but it is indeed a

SQL Injection in China Railway Express causes a large amount of information leakage China Railway Express has SQL injection, leading to a large amount of information leakage (Code, login name, and password of each national Branch) Http: // **.

UPack's working principle and instance analysis (I) Everyone knows that the UPack is a common topic in Software Reverse Engineering. To understand the compression during runtime, You need to master the basic PE file format and basic knowledge of

Webshell Security Detection (1)-traffic-based detectionI. Overview I have been paying attention to the security analysis of webshell, And I will share my experiences in this period of time. Webshell generally has three detection methods:The

Arbitrary login administrator vulnerability in xiaokaxiu, which has more than 0.5 billion million videos per day Arbitrary login administrator vulnerability in xiaokaxiu, a popular social network The daily video broadcast volume exceeds 0.5

Use multipart/form-data to bypass waf The LuManager high-risk SQL injection 0-day analysis mentions the use of payload as follows: Attackers can see that the multipart/form-data format is used to send payload. For applications, the data obtained

The SQL injection of Shien milk powder on a website involves 1.03 million member information. Milk PowderDetailed description: http://www.scient.com.cn/news/news.php?id=303 Parameter id injection point: Table: member2013[34 columns]+---------------

Leakage of sensitive user information due to design defects of the main website of Kaiser Travel Network I often receive promotions from Caesar tourism...Detailed description: 1. Caesar master site verification code design defects lead to

Weak device passwords can penetrate the entire company. Our company is familiar with ruijie's equipment. Ruijie's device is a word, garbage, garbageAs long as a small router is in the LAN and the same gateway is set up, the company's network is