Cloud Security

This week, I will continue to share with you Why Java is vulnerable to reverse engineering attacks.Although Java applications can "Write Once, Run Anywhere" (Write Once, Run Anywhere) is a huge advantage, however, the architecture of this

Basic compilation of brute-force cracking1. Getting started with cracking... 1. Compile common jump commands:Jump if JZ/JE is equal or zeroJump if JNZ/JNE is not equal or not zeroJL/JLE is less than/less than or equal to the jumpJump if JG/JGE is

1. breakpoint: The so-called breakpoint is where the program is interrupted. This word is no longer familiar to the decrypted. So what is interruption? Interruption occurs because of a special event (interruption event). The computer suspends the

[Article Title]: Analysis of the ImageEn2.26 algorithm of the delphi Control[Author]: 8713007[Software name]: ImageEn2.26[Software size]: 12 M[]: Search and download by yourself[Shelling method]: No shell[Protection method]: serial

This method can be used to determine which version of dedecms is used by the target website and which day of the patch is used.  Add/data/admin/ver.txt Such as the official: http://www.dedecms.com/data/admin/ver.txt Append historical

1) The password retrieval function of Kuba technology is very powerful, which facilitates users to a great extent, but it also brings a significant increase in risks, kuba technology supports password retrieval for user names, email addresses, and

Problematic site: http://www.minehome.cn At first glance, many hats are all about flash. I looked for it, found an SQL, and threw it to my dear SQLMAP. It actually told me the DBA! SQL Injection: http://www.minehome.cn /News. aspx? SearchInfo = 1

When using http://qz.qq.com/?qqspace, you can refer to the space to give your friends a name. Privacy leaks.I used the QQ number in "dig" to indicate the corresponding QQ number. After I found this QQ number, it seems that his space access

The final anti-injection check function is in discuz_database_safecheck: checkquery (% s), the following protected static $ checkcmd = array ('select', 'update', 'insert', 'replace ', 'delete'); protected static $ config; public static function

Author: Enter www.anying.org to repost, which must be notedDig a few xss posts.The software xss won the bid (Sister's linux was developed by China .. The website is not secure)1: http://www.cs2c.com.cn/search.php? Searchword = & submit = +Enter a

GetURL security issues.Case: lh.9you.com/web_v3/bcastr.swf? Bcastr_xml_url = xml/bcastr. xml refers to the call method. The external configuration or data file Suffix of the call, such as: xml and other Flash actionscript scripts. Currently, there

Security InvestigatorAgixidInMongoDBDatabase2.2.3A security vulnerability is detected in the version and indicatesMetasploitExploitationPayloadUnder development.This vulnerability is mainly caused by incorrect use of the NativeHelper function of

The gay guy at the bottom shop told me that someone advertised on the emotional microblog of the school. You said that the emotional hotline was your commercial advertisement, so I had a good time chatting with gay people.I decided to renew his

XSS triggers are complicated. I am the title party. The vulnerability can be triggered thanks to the powerful QQ mail upload function. The file name in Linux is different from that in Windows. Except for the "/" symbol, all other things can be named

The author is so careful. I will share my notes with my blog followers. for ease of understanding, the injection examples of implicit conversions can be analyzed directly. CREATE a TABLE and add two users to create table 'users' ('userid' int (11)

Many programs, as well as some commercial or mature and open-source cms Article systems, generally add httponly attributes to cookies to prevent xss from stealing user cookies, to prohibit the direct use of js to get the user's cookie, thus reducing

This article talks about simple technologies, uses SQL injection (SQLi) vulnerabilities, and obtains a webshell. All the demos use DVWA (penetration testing system ). to use SQL injection, follow these steps: 1. SQL injection points are found; 2.

1. csrf exists in the account to be hijacked. You can modify the email address to hijack the account. Because one mailbox can only be bound to one account, you can use arrays to randomly select mailboxes. POC: 2. modify user information.

USEtest; # the query result returned by MySQL is null (that is, zero rows ). DROPTABLEIFEXISTStemp; # the query result returned by MySQL is null (zero rows ). CREATETABLEtemp (optional textnotnull); # the query result returned by MySQL is null (zero

Affected products: Embedded Jopr-JBoss AS Administration Console Author: Red Hat Middleware, LLC affected versions: JBoss AS> Resources> Datasources 2. select Datasource 3. view page source 4. find input type = "password" 5. "value =" will contain