Cloud Security

360 browser 5.0 and earlier # Cross-origin CSS vulnerabilityAlthough not the latest version, many users are using --.360 browser 5.0 and earlier # Cross-origin CSS vulnerability   Download the official version of 360 browser 5.0 and test it --.   3.0

Portspoof is a lightweight, fast, and portable Security plug-in suitable for any firewall or security system. The program aims to minimize or disrupt the information collection phase of attacks. Next we will go to the topic. This article first

Is a web system. The front-end uses nginx as the reverse proxy to process https and forward requests to the backend tomcat service. The pressure test tool selects jmeter. First, let's briefly introduce jmeter. It is an open-source project of apache

Line sorting command sort:1. sort command line options:Option description-delimiter between t fields-f when character sorting is ignored, or sort some data based on the domain field-m sorts the sorted input files, merged into a sorted output data

First, I did not write the script functions here. If you are interested, you can do it yourself. You have not written the shell script for a long time. If you write this script today, you should review it, I have been using python for a long time.

Shell commands related to the system running status:1. Linux real-time monitoring command (watch ):Watch is a very practical command that can help you monitor the running results of a command in real time, saving you the need to manually run it all

1. First, cut apache logs by day Vi/etc/httpd/conf/httpd. confErrorLog "| rotatelogs/var/log/httpd/% Y % m % derror_log 86400 480"CustomLog "| rotatelogs/var/log/httpd/% Y % m % daccess_log 86400 480" combined Ii. Restart the apache service Service

There are a lot of spam on the network to scan the root account, so it is necessary to do a good job of security! The following are some security settings for reference only:1. Modify the SSH portVi/etc/ssh/sshd_configPort22

This script has been used on production servers for more than a year. It advocates simplicity and beauty. You only need one script to automatically configure LNMP on any network-Connected Server.This script creates the packages directory under the

DDoS Deflate can prevent a small amount of DDoS and CC attacks, and it takes less time. We recommend that you use it. 1. Check whether iptables is running service iptables status If "iptables: Firewall is not running." is displayed, iptables is

(1) Disable finding PHP Functions1disable_functions = This option can be used to set which PHP functions are not allowed to be used. Some functions in PHP are highly risky. You can directly execute some CentOS system-level script commands. If these

Because the root user has full operation permissions on the system, in order to avoid some mistakes, we recommend that you log on to the system as a general user. If necessary, you need root operation permissions, then, run the "su-" command to log

In the process of building vsftp, service security is critical. check whether there is hacker intrusion in the log and whether to avoid the next hacker attack. Now I write the ftp security management, hope you can help. 1. Enable the log function of

A few days ago, some people used putty and winscp, which had backdoors for promotion and promotion by Baidu. The password was simple and port 22 was cracked by brute force, or the security crisis caused by social engineering passwords, ssh security

Decrypts the PHP file encrypted with zend Similar garbled characters may occur when the PHP file encrypted with zend is opened with notpad ++. The following uses the decryption tool for decryption. Http://pan.baidu.com/s/1i3n4ysX   Download

B2B system. In news/js. php f($type=='hot'||$type=='com'||$type=='new'||$type=='lastview'||$type=='like') { if($f_id) { if(is_numeric($f_id)){ $SQL=" fid=$f_id "; }else{ $detail=explode(",",$f_id); $SQL=" fid IN ( ".implode(","

CSRF worm caused by unauthenticated QQ public welfare Http://npoapp.gongyi.qq.com/blog/addCSRF worm caused by not performing authenticationAs long as there is a Cookie in the QQ space, you can submit the blog to the QQ space. Effective Test

What is cross-protocol communication? The cross-Protocol Communication Technology (Inter-Protocol Communication) refers to the technology in which two different protocols can exchange commands and data. One is called the target protocol and the

Ssrf attack Overview Many web applications provide the ability to retrieve data from other servers. With the URL specified by the user, the web application can obtain images, download files, and read file content. If this function is maliciously

Before the integration of kerberos in impala, encountered time-related problems, at that time did not do a full test, some understanding of Some Problems (http://caiguangguang.blog.51cto.com/1652935/1381323), today just did a test, summarized as