Cloud Security

I checked the XE program in the Security Detection and found that it was a common Cms in South Korea. Then I tried to discover the vulnerability. Unfortunately, I had a scan, no usable vulnerabilities were detected, so I had to turn to Google for

Make A Contract with IE and Become a XSS Girl! This is the topic of Yosuke HASEGAWA, a representative of the Japanese hacker stream, on hit2011. At that time, he was lucky enough to have a speech with his friend hiphop over QQ. This topic is mainly

Brief description: union is supported. Several accounts and passwords edited by Sina can be obtained through this injection. The password is encrypted by md5.Details: although most of the edited passwords have been changed, a small part can be

Unlike normal access injectionBy ay shadow An injection point was thrown by a dead hacker, who said it could not be injected. Then I looked at it and found that the injection was indeed different from the previous one. I have never encountered such

Brief description: Injection caused by lax FilteringDetailed Description: When Haha station is too big and negligentProof of vulnerability:   Http://www.duote.com/zhuanti/comment/index.php? Ztid = 44 + AnD + 1 = 1Http://www.duote.com/zhuanti/comment/

Brief description: After clicking a specific content on Weibo, you can call an external JS file on the current page.(No account yet, leave a nickname) -- by gainover 2011/7/13Detailed description:Cause of the vulnerability: When music is inserted

  Let's talk about one thing that has been around for N years. Today, let's announce it. When the DISCUZ series program SQL injection vulnerability is used to obtain the user's HASH and ucenter uckey, the Administrator's session can be directly

It doesn't matter if you write an article. First, the title should be the same as that of Daniel! Author: a flower from a single crush: t00ls reprinted, please indicate the source. If there are similarities, it is purely plagiarized by others. Hey

If you do not know how to perform XSS attacks, this article may not help you. This article focuses on the readers who have some knowledge about basic XSS attacks and want to have a deeper understanding of the details about bypassing filtering. This

1:OdiHost Newsletter plugin POC:Http://www.bkjia.com/wp-content/plugins/odihost-newsletter-plugin/Des/openstat. php? Uid =-1 & id =-1 AND 1 = IF (2> 1, BENCHMARK (5000000, MD5 (CHAR (115,113,108,109, 97,112), 0) Vulnerability code:$ Newsletterid = $

This article is generally technical and mainly intended to bring you some ideas through the process. : P Detect a website, build with Microsoft-IIS/5.0 and Asp + Access, and search for an SQL injection point http://www.test.com/detail.asp via Google?

1. user input output as isMethod of exploits: xss attacks are carried out directly at the output location.Solution:Filtering is required. The most common ones are filtering. ,Enter the following content:Http://xxx.com /? Umod = commentsoutlet & act =

Title: timynce Ajax File Manager Remote Code Author: By onestree: http://www.phpletter.com/demo/tinymce-ajax-file-manager/tested system: windows 7**************************************** * ******************* How to run the exploit use firefox web

There is a problem of substation: http://pinyin.baidu.com login upload skin, the client can control the Upload File suffix despise all the upload points are can control the Upload File suffix The only pity is uploaded to cdn, dynamic scripts will

After I got the image and uploaded it to the server, I didn't stop. Because there are many hosts in this IP segment, I will continue to scan hosts in the same IP segment...   Found a grand customer service application background: http://service. OS .

1) the problematic feature can be found at: lady.weibo.com comments; 2) click Publish and capture the package to get the following data; POST/cmnt/submit HTTP/1.1 Host: comment5.news.sina.com. cnUser-Agent: Mozilla/5.0 (Windows NT 6.1; rv: 20.0)

The entire program is completely filtered, but all versions are GBK encoding, which is hard to crack. But basically, when the string is stored in the database, the author uses iconv to convert the submitted data encoding to utf8. therefore, we can't

Today I saw an article signed by SysShell this vulnerability (http://www.bkjia.com/Article/201306/217870.html), the pen is very concise, gave a test URL, I did not write the original article for a long time, I have been writing a source code audit

When I retrieved the password, I sent a text message verification code to my mobile phone and intercepted it with POST. I found that the account, mobile phone verification code, password, and payment password were displayed directly. BelowClick get

Modify the token not verified in the email address. You can modify the user's email address through a specially crafted form. Because the mailbox needs to be unique, you can use an array to randomly select the mailbox. POC:  Before: