Cloud Security

Analysis of Cross-Site Request Forgery (CSRF) protection methods CSRF (Cross-site request forgery, also known as "one click attack" or session riding, usually abbreviated as CSRF or XSRF, is a type of malicious use of websites. (1) CSRF attack

Analysis of Domain environment penetration by Mimikatz0 × 00 Preface   Attack and Defense are two permanent topics in information security. In Intranet security management, how to improve the level of security protection, even people who have just

Subgraph OS: system analysis to protect user security and privacy As the first GNU/Linux release for GNU/Linux Desktop Security, Subgraph OS has been well received by many communities, some time ago, the open technology fund provided 12 months of

Siemens APOGEE Insight information leakage (CVE-2016-3155)Siemens APOGEE Insight information leakage (CVE-2016-3155) Release date:Updated on:Affected Systems: Siemens APOGEE Insight Description: CVE (CAN) ID: CVE-2016-3155APOGEE Insight is a

ABB Panel Builder 800 DLL hijacking Vulnerability (CVE-2016-2281)ABB Panel Builder 800 DLL hijacking Vulnerability (CVE-2016-2281) Release date:Updated on:Affected Systems: ABB Panel Builder 800 5.1 Description: CVE (CAN) ID:

Cert avl combined with cheetah for in-depth analysis of "Domino" malicious APP market apps Once, there was a malicious APP in front of me, and I didn't recognize it, I will not regret it until I download it, The most painful thing is, I don't

It's amazing that you can even recall your QQ message (unrepaired) 0x01Specific ideas:When chatting on a PC (windows,First, you need to close the colorful bubbles used in the QQ chat window,Then you send a message to the other party, right-click

CENTOS 6.6 SHELL Initialization Script This script may be required after CENTOS6.6 is installed. When learning about CENTOS, you can run this script to perform some configuration, which helps you not to be troubled by the yum selinux ip addresses of

Introduction to Petya At the end of last month, Germany's veteran security vendor, Goethe-tower, issued a security report that a new extortion trojan named Petya emerged. So what exactly is this new extortion Trojan?0x01 Trojan OverviewThe trojan

The malicious trojan virus is rampant. The Client virus has infected more than 70 thousand people. The malicious trojan virus is rampant. Can you hold your wallet? In the second half of 2015, the cheetah mobile security lab and the AVL mobile

Analysis on storage encryption methods from Apple and FBI tearing X Earlier in the year, Apple and the FBI had a fierce fight against the public hall. The incident finally relied on the assistance of a third party (an Israeli criminal company) to

Analysis of SkidLocker using AES-256 Encryption Algorithm0 × 01 Overview The SkidLocker ransomware uses AES-256 encryption algorithms to encrypt different types of files by retrieving the content of the file information, and the ransom amount needs

Conspiracy analysis behind the phone call Every one of us has suffered from harassing calls, sales promotions, and financial management. The "one voice" harassing call account for a large proportion. According to incomplete statistics, all the phone

A vulnerability in Taikang Life Insurance affects users' mobile phone names (direct SQL transfer) Taikang Life Insurance Co., Ltd. was founded in August 22, 1996 and is headquartered in Beijing. After 19 years of steady and innovative development,

Technology sharing: how to embed an EXE file in a PowerShell script I am trying to solve a problem, that is, only PowerShell scripts are used as the attack load in client attacks. Using PowerShell to run malicious code has many advantages, including:

Analysis of Cross-Site Request Forgery (CSRF) attack principles: beyond imagination Cross-Site Request Forgery (XSS) is perhaps the most incomprehensible attack method, but the danger is also underestimated. In the "Open Web Application Security

11. User ID card information traversal and password reset due to a vulnerability in the battle platform Hi demon APP:Log on and capture packets. The following interfaces return the user ID card information, mobile phone number, and so on:Http://api.

S2-029 Struts2 label library Remote Code Execution analysis (including POC) The Struts2 tag Library provides topic and template support, which greatly simplifies the compilation of view pages. In addition, the topics and templates of struts2 provide

Vulnerabilities in Git versions earlier than v2.7.1 allow attackers to execute code remotely. It is understood that security researchers found a security vulnerability in all versions of Git before version 2.7.1, which exists on both the server side

BetterCap: a modular and lightweight MiTM Framework Analysis BetterCap is a powerful, modular, and lightweight MiTM framework that can be used to launch various types of Man-In-The-Middle attacks on The network ). It can also help you operate HTTP