Cloud Security

Recurrence of attacks against security vulnerabilities in versions earlier than elasticsearch1.4.3 The following versions of elasticsearch1.4.3 can execute groovy scripts. After being exploited, you can directly call the cmd command of widows and

Token story (CVE-2015-0002)0x00 Preface I like vulnerability research very much and sometimes find a significant difference between the difficulty of vulnerability mining and the difficulty of exploits. The Project Zero Blog contains many complex

How to bypass the remote lock function of IOS8 The remote lock function of IOS helps users remotely lock their lost Apple devices, so that thieves or the person who finds the device cannot access the content of the device. However, a security

ElasticSearch Groovy script Remote Code Execution Vulnerability (CVE-2015-1427) 0x00 Preface ElasticSearch is a JAVA-developed search and analysis engine. 2014, once exposed a Remote Code Execution Vulnerability (CVE-2014-3120), the vulnerability

Use the Mod_Security and Mod_evasive modules to protect Apache (1) For people in the host hosting industry, or if you host your own server and expose the server to the Internet, protecting the system from attackers is a top priority. Mod_security

Virus Trojan scan: Analysis of hexadecimal code of QQ Trojan Horse stealingI. Preface according to my personal habits, I will use some automated tools before using reverse analysis of viruses such as IDA Pro and OllyDBG, through static or dynamic

How to effectively target Bootkit Trojans Bootkit is usually infected with MBR or VBR. It copies the code to the memory and then executes malicious code. Sometimes, they hook the INT 13/15 interrupt handler to filter out memory and disk access and

A Baidu WebShell from SSRF to Intranet All stories start with a simple SSRF... 1. An SSRFHttp://apistore.baidu.com/astore/toolshttpproxy  Full functionality, including get post or something.2. Intranet DetectionFirst, obtain some Intranet ip

Web attack log analysis guide This is often the case: web applications face suspicious activities for different reasons, such as a child using an automated vulnerability scanner to scan a web site or a guy trying to perform fuzzy testing (fuzz) A

If an officially purchased interface is improperly designed, You can parallel unauthorized modification of others' information and orders. 1. Download an official APP, view your shopping cart, modify the uid in the burp, and perform brute-force

Phpyun v3.2 (20141222) frontend secondary injection (direct exit management password demo test) Non-blind injection. Directly output various managed data.The demo test is still performed. In ask/model/index. class. php  Function attention_action () {

An SQL injection vulnerability exists in a Kingsoft business system. An SQL injection vulnerability exists in a Kingsoft business system. Kingsoft Group Buying and Cheetah group buyingHttp://m.tuan.duba.com/Http: //

Attackers can exploit the ElasticSearch vulnerability to obtain webshell permissions of a website. ElasticSearch is usually deployed in many large enterprises. Therefore, further penetration makes sense after obtaining an intranet permission. In the

Security Implementation Analysis of ThinkPHP framework (1) The ThinkPHP framework is one of the popular PHP frameworks in China. Although it cannot be compared with those frameworks outside China, it has the advantage that the Chinese manual is

Discuz! Getshell Some forums may be stored in other directories without the utility direct convert. If you see that the data/directory of the conversion program cannot be written, you don't have to try

Technical Level: wp-slimstat high-risk vulnerability In the report "Popular WordPress traffic statistics plug-in Slimstat has a high-risk vulnerability that affects the global 1.3 million website" a few days ago in FreeBuf, xiao Bian has described

Netease SSRF can detect the Intranet Vulnerability URL: http://note.youdao.com/memory? Url = http://www.wooyun.org (register for login if you need) Where the body is previewed Content as a displayTrack the jump of a webpage  POST

Spring and Autumn tourism allows unauthorized modification of others' personal information Spring and Autumn tourism allows unauthorized modification of others' personal informationFirst, register two accounts, log on to one of the accounts, and

H5 Image Recognition vulnerability can cause malicious script executionI. Details: Http://read.html5.qq.com/image? ImageUrl = http: // XXX This service compresses third-party images for mobile users and uses HAProxy for load balancing. In actual

Cmseasy fix improper foreground unrestricted select union injection (bypassing webscan) Cmseasy repair improper foreground unrestricted select union InjectionDownload the latest version: Ballot_act.php: Function index_action () {if (front: post