Bkbll (bkbll # cnhonker.net) http://www.cnhonker.com
Note: This is just a temporary note.
1. Origin of VulnerabilitiesOn bugtraq, someone released an exploit for IE iframe. The method is very clever and can be basically used for 2 K IE6. The Ox is
The following describes how to detect hacker intrusion when there is no intrusion detection system. Hacker intrusion features generally come from the following four aspects. If a hacker intrude into the system, you can find the intrusion traces in
This article will show you five types of hacker attacks that are not particularly concerned about, to remind everyone that they must be paid the same attention as other hacker attacks in the process of preventing hacker attacks, to further reduce
TTL is a value in the IP protocol package. It tells the network whether a packet (such as an ICMP packet) is discarded because it takes too long in the network. There are many reasons that the package cannot be delivered to the destination within a
1. Record the current timeDoscommand: dat/t & time/t
2. log on to the user sessionDos command: net sessionsTool: Psloggedon.exe Logonsessions.exe
3. Record opened filesDos command: net fileTool: psfile.exe open? Les.exeOthers: view the opening
When hackers attack other people's computers, the first thing they usually do is to determine whether the host is online. The method for judging is simple, that is, using the Ping command. The method is to enter "Ping IP Address" at the command
Appendix: Create a method that cannot open or delete files
Take creating a 6618. folder as an example:1. Enter:Md 6618 ../
2. You will find that a 6618. folder is built.
3. This folder cannot be deleted even if it cannot be opened by double-clicking
Once upon a time, Communication Security Assurance Technology had nothing to do with storage products. Anyone who mentions the communication security of the storage channel will be ridiculed. Yes. Have you ever seen a hacker break the system from a
Author: c. mToday, Google searched for inurl: file filetype: asa and found a lot!
Http://www.roulvwang.com.cn/aux/ (& $ =$ &)./aux. asa? File =/revkh/ 82522/about: blankHttp://www.zhongliu888.cn/com4/ (& $ =$ &)./lpt5.asa? File =/AFXCK/47493/about:
InHTTPSPage, such(IncludingScript,Iframe) RequestsHTTP. By default, the browser will prompt:
1, IE8
2. FireFox
Similar prompts are displayed in Opera and Safari (Chrome is not prompted during the test ).
Non-secure.
The prompt for this browser
Affected Versions:FreeBSD 8.0FreeBSD 7.2 vulnerability description:Bugtraq id: 42533
FreeBSD is an open-source Unix system that runs on the Intel Platform and can be freely used.
The setusercontext () function in the lib/libutil/login_class.c file
Wireless networks are more vulnerable to intrusion than wired networks, because the computers at the attacked end do not need to be connected to the computers at the attacked end, attackers can access your internal network and access your resources
Author: Liu HuiTime: 2004-04-22Source: Tianji
[Document Introduction]The Local Policy Section of the security template combines the security settings of the Audit Policy, user permission allocation, and security options into a centralized and
Brief description:
Msnshell is a multi-functional msn auxiliary tool in China. It has a convenient and powerful chat encryption function, making it widely used. However, this application has several remote code execution vulnerabilities that have
M4R10
Cause Analysis of connection failure:
1. We cannot connect to the terminal service because the terminal port is changed.
2. The server is in the intranet and we cannot connect to the terminal service.
3. We cannot connect to the terminal
Preparations
Download sslstrip. Are we downloading the latest version? Wget http://www.thoughtcrime.org/software/sslstrip/sslstrip-0.7.tar.gz
Visit http://www.thoughtcrime.org/software/sslstrip/#for more help
Installation:
Python setup. py
Affected Versions:Novell eDirectory vulnerability description:Novell eDirectory is a cross-platform Directory Server.
An eDirectory NCP implementation vulnerability exists. Remote attackers may exploit this vulnerability to cause a server crash and
When selecting a password, try to rewrite a sentence so that you can easily remember it. For example, "chang'e 2 was successfully launched this year's national day !"
Then select the first pinyin letter for each word and it becomes "jngqjceehcgfsl".
An article in the S, which I recently saw during my BLOG review, found quite interesting. record it and practice shell when I have time to implement it.
An absolutely YY bash rootkit is purely funny.
Bash Command Execution Process: alias-> function->
ASLR (address space layout randomization) is used to distribute the entry data points of the system code in the memory, so that the entry data points are in an unpredictable position. In this case, it is difficult to locate system functions when
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.
A Free Trial That Lets You Build Big!
Start building with 50+ products and up to 12 months usage for Elastic Compute Service