Cloud Security

1. Familiar with the concepts of data and commands, as well as loading concepts related to the early stage (completed) and learning to write and compress the shell series.2. Structure Analysis of pe files (completed) learn to write compression shell

[Debugging environment]: WinXP, Ollydbg1.10C, WinHex, LordPE, UPXAngela, ImportREC ---------------------------------[Shelling Process ]: In fact, this article is just an Ollydbg version of UPX in "encryption and decryption" 2nd.It is very convenient

By: xpfoxChina Telecom in various regions is currently trying to promote the advertisement software developed by China Telecom, which is based on the sky. Taking a closer look, he is useless to improve user security!In this case, the PPPoE dial-up

Author: shangjian Release date: Vulnerability Type: File Upload Vulnerability file: gd_ChkLogin.asp Vulnerability description: I paste some code for analysis.   Dim user1, pass1, rs, SQL User1 = trim (request ("textfield") "gets the input user name

Discuz! X is a community-based professional site building platform launched by Comsenz. It enables forums, personal spaces (SNS), portals, and groups) the application Open Platform is fully integrated to help websites implement one-stop

Brief description: Chinese Network Enterprise platform VulnerabilitiesFor details, there is an unauthorized access and injection in the background of china.com!Proof of vulnerability:     Http://saas.china.com/admin? Alias = sms Injection

Vanilla Forum is an open-source Forum system. The local File Inclusion Vulnerability in Vanilla Forum 2.0.17.9 may cause sensitive information leakage. [+] Info:~~~~~~~~~Software ...... Vanilla Forum 2.0.17.9Vulnerability ...... Local File transfer

Today, I saw an image in the NuclearAtk blog album. Which has a txt extension name for executing the program I only saw the image and didn't know how to describe it in the original text. So I'm also curious about what kind of new tricks and tricks I

We found an open-source project for Instructors: Http://code.google.com/p/hustoj/ First, we must support teachers' open-source behaviors. I learned the source code and found several security risks. It is estimated that it was written by several

Source: Traces Space Code http://www.venshop.com/down/venshop.rarSmall Program, forget itAd_chk.asp: Determine the Administrator Logon status If Request. cookies ("venshop") ("admin_name") = "" or Request. cookies ("venshop") ("admin_pass") = "" or

Affected Versions:PJBlog3 V3.2.8.352 Vulnerability description:PJBlog is an open-source and free Chinese personal Blog system program. It adopts asp + Access Technology and has a high operating efficiency and update rate. It also supports the new

I just captured the LFI (Local File Include, Local File inclusion) attack from the website access log. The attack parameter is .. /.. /.. /.. /.. /.. /.. /.. /.. /.. /.. /.. /.. // proc/self/environ00:Capture LFI attacks-Local File Include Local

Google Dork: intext: "Powered by Proactive CMS" XSS http: // www.2cto.com/index. php? Action = search & q = 1 1 Directory Traversal: http: // www.2cto.com/lavate/cute. old/Dialogs/Tag. Frame. php? Setting = & Style = .. /.. /.. /.. /.. /.. /.. /.. /

In addition to the navigateToURL/getURL mentioned in the previous section, another as function that often has XSS defects is ExternalInterface. call. This function serves as the interface for the javascript communication between FLASH and the host

CSDN stores stored XSS somewhere, which can steal user cookies. The problem lies in the personal search. The title and tag are not filtered. After an XSS statement is inserted, it can be executed. The premise of influencing others is that the

Www.2cto.com: Old articleI don't know why recently. It may be a coincidence that I have come into contact with a lot of XSS things. I also read some articles about XSS. As a result, XSS has a certain understanding and ideas, of course, it is based

Through learning http://www.bkjia.com/Article/201211/168278.html Vulnerabilities and http://www.bkjia.com/Article/201211/167652.html In this article, we conducted some tests on the authentication method for binding a third-party website and found

1. In the Renren advertising system, due to a defect in permission settings, you can access and modify any user or enterprise advertisement at will. 2. First, find the ad link on the homepage, and analyze the ad ID in this connection. The ad url

Today, I have no intention of discovering the company's standardized management backend address for inbound traffic. I have read many web security-related articles and entered single quotation marks in my account, on the page where the logon prompt

After research, it is found that a defect of the rich text filter can successfully bypass the XSS and kill all browsers.1. Do some basic tests first. --> filter --> do not filter --> it is not a simple keyword. 2. This should not be filtered. 3.