Cloud Security

Introduction to shellcode development on Windows (1) This article briefly introduces shellcode development technology and its features. Understanding these concepts can help us write our own shellcode. Further, you can modify existing

Lobotomy: Android Reverse Engineering Framework (Part1) If you have followed the previous articles on Android security, you should be familiar with rotlogix. He is keen on the mobile security business and plays a binary role. This series of

How to establish an Internet risk control system I have been a startup for more than half a year. Over the past six months, I have been tired and productive, with pain and happiness. I don't have to mention it any more. It should be a common feeling

Reverse Engineering (I): Basics of assembly and Reverse Engineering   This series of articles will explain the various knowledge of reverse engineering, which is easy to understand. Assembly is the basis of reverse engineering. This article is not

A site in HC has the SQL injection vulnerability involving more than 20 thousand pieces of user data. HC household electronics City has the SQL injection vulnerability, involving 27033 pieces of user dataVulnerability URL:

A command execution vulnerability exists in an important system of skyworth. You need to delete the shell and upgrade it. No one submitted it, which is very dangerous. Vulnerability addresses: http://skyhome.skyworthbox.com/Skyworth smart Router 

Huatu education has a vulnerability that kills 21 database servers in the intranet and involves millions of users. Seckilling 21 database servers on the Intranet. The affected sites include but are not limited to: face-to-face, online schools, books,

Simple Analysis and debugging of CVE-2015-7547 Overflow Vulnerability 0x00 vulnerability information Recently, glibc has a stack overflow vulnerability. For details about the vulnerability, refer to the following link. CVE-2015-7547: glibc

Weak Tianji net password causes Arbitrary File Reading Vulnerability Gift Packs Rt Http: // 219.239.88.138/phpmyadmin  Weak Password root/root  Database Leakage  And phpinfo.  Http: //

An SSRF vulnerability in zhihu main site can detect the Intranet The https://www.zhihu.com/question/38548957/answer/77482000 was found to answer this question.It is really a bit interesting. I answered the question of the subject using actual

12306 at least four deep SQL injection vulnerabilities in the official Mailbox System Don't look at the title to find the vulnerability. Don't bother!The downloaded tangscan plug-in is amazing! The downloaded tangscan plugin detects  Http://mail.123

Click my link and I will probably access your jumeiyou account. Click my link and I will probably access your jumeiyou account The Weibo login request bound to jumeiyou product is  Http://passport.jumei.com/ I /extconnect? Site_name = sina_weibo &

An SQL injection tool (dba permission) for a system of China Eastern Airlines) This should be a homepage ....Leaked a large amount of information about the company's employees ..... Http://bus.satrip.com/login/login.aspx_ VIEWSTATE = % blank %

Analysis of phishing attacks against well-known password storage software LastPass Recently, the author discovered a phishing attack against LastPass, which allows attackers to steal a verification code for a user's email address, password, or even

A vulnerability exists in a core system of Yanzhao property insurance. The getshell Intranet affects hundreds of thousands of messages. Yan Zhao property insurance was approved by the China Insurance Regulatory Commission in December 3, 2013 with a

Activity row design defects can be logged on to other user accounts Sign up for the meeting of tangscan. It is easy to use the activity line, so I simply read it... The title is obviously too vague for others to directly discover problems. The

Energy security: an intranet roaming caused by command execution by SINOPEC The execution of commands on a certain station of Sinopec caused Intranet roaming!Detailed description: Http: // 61.50.187.141/login! Login1.action Http: //

A health management system SQL Injection exposes tens of millions of residents. I think you can give me a full score...Detailed description: I still remember the https://www.bkjia.com/bugs/2015-0147241. You can't open the portal. FUZZ, the main user

ARP spoofing technology-obtain images of the Intranet destination IP addresses accessing the QQ space The article is for study only. do not violate the law. Requirement: Virtual Machine Kali linux SystemCommand "ip query command: ifconfigecho

Use Shodan and Censys for Information Investigation     In the initial stage of penetration testing, online resources such as Shodan and Censys can be used as a starting point to identify technical traces of the target organization. This article