Cloud Security

Cert avl combined with cheetah for in-depth analysis of "Domino" malicious APP market apps Once, there was a malicious APP in front of me, and I didn't recognize it, I will not regret it until I download it, The most painful thing is, I don't

Analysis of IAT Hooking security implementation methods 0 × 01 IntroductionThe Hook import table (IAT hooking) is a well-documented technique used to intercept imported function calls. However, many methods depend on some suspicious API functions

Android APP discovers a general Denial of Service Vulnerability When 0xr0ot communicates with Xbalien about all types of exceptions that may cause application Denial-of-Service (DoS), a common Local Denial-of-Service vulnerability is found. This

Analysis of Petya extortion Trojan Recently, the security vendor G-Data released a report saying that a new extortion Trojan Petya was found. This trojan is characterized by first modifying the MBR Boot Sector of the system, then executing malicious

An Analysis of the magic anti-virus method: "using notepad for anti-virus" Antivirus methods use common operations, such as anti-virus software and Process Manager to close unfamiliar processes. Today, I want to learn about the magical anti-virus

Webshell cleanup-driver-level file hiding on the server Today, my friend's website is infected with Trojans. Baidu and Google search will find keywords such as guns and support. I have not found the cause for a long time, so I asked my younger

About Web security, 99% of websites ignore these   Web security is a problem that cannot be emphasized. We find that many websites in China do not implement full-site https, and there are few practices for other security policies, the purpose of

P2P financial security-the main site of jingjinlian has the SQL Injection Vulnerability (ROOT)   Objective: www.jjlwd.comSQL Injection exists in the following areas: (endTime in POST, time blind injection)  POST

Install Xiaomi APP client for blind playing (background viewing triggers logged on to CEO background) On June 23, 20 million, the Internet home decoration supervision platform "Install beebot" had completed A round of financing of Yuan in June. The

The information of opened rooms leaked by hotels in biguiyuan must be filtered out. Rt   POST /WEB/resvpage/searchinfo.aspx HTTP/1.1Host: crs.bgyhotel.com:8089Content-Length: 173Accept: application/json, text/javascript, */*Origin:

HurryTop Logistics System (leakage of millions of orders/detailed item information and trends/large amount of personal and order Sensitive Information) Company ProfileAs one of the leading third-party Logistics enterprises in China, HurryTop

IORegistryIterator competitive condition vulnerability can cause arbitrary code execution0x00 Introduction CVE-2015-7084 is because IORegistryIterator does not consider the user State of multi-threaded simultaneous calls, causing Race Condition,

SQL injection vulnerability in a substation of Shentong express SQL injection vulnerability in a site of Shentong express GET/Dot. asp? Area =-1 'OR 1 = 1 * -- HTTP/1.1X-Requested-With: XMLHttpRequestReferer: http://www.gdsto.com.cn/Cookie:

A critical vulnerability that can steal passwords of Baidu accounts on a large scale (trigger a full-line attack) Xss rookit, Baidu basically exists in all core businesses (Baidu Post Bar, Baidu news, Baidu know, Baidu encyclopedia, Baidu music, etc.

You can use an API to scan a large number of accounts and hit the database. You have obtained the password to log on to the tuhao account to buy two bottles of Red Bull. How can I change reviewers every day from dark clouds to night? I have

XSS Rootkit [complete revision] 0 × 00 Preface As we all know, the risk definitions of XSS vulnerabilities have been vague, and cross-site scripting (XSS) vulnerabilities are both high-risk and low-risk vulnerabilities that have been controversial

Unauthorized access to a zookeeper in Baidu games Demonstrate how to use the tangscan plug-in to find unauthorized access to zookeeper. This plug-in has been added to the tangscan luxury package. welcome to use it! A zookeeper of Baidu game has

Sohu mailbox storage type XSS (for "<> () [] \ %; are filtered) A classic black box XSS bypass analysis, filtering so much will eventually be done. This should be the first case of wooyun!At present, too many wooyun vulnerability reports are in the

Getshell: Go to the Haier main site and all its second-level domain names and databases (getshell for application vulnerabilities) No description! WooYun: TRSWCM full-version GETSHELL VulnerabilityHttp://enwcm.haier.com/first, the background is open

An SQL injection vulnerability exists in a sub-station of fangxun. An injection of the room Information Network The problem lies in the sales parameter.GET/esf_personalSellin.do? Index = 4 & sales = 3.0 * HTTP/1.1Host: 0757.home77.comUser-Agent: