Cloud Security

"Ransomware income" already occupies the main part of the hacker's economic source Blackmail has become a popular way for hackers to get rich. According to a survey, "ransomware income" already occupies the main part of the hacker's economic source.

Principle of Trojan wall-mounting If the network is not too stable, people will set up firewall to defend against network attacks. Isn't this a huge challenge for the survival of our Trojans? Competing for things, survival of the fittest, well... to

Trojan "theft" Baidu signature tampering home page and favorites Recently, the 360 anti-virus team received user feedback, saying that the home page was inexplicably modified, and many additional favorite sites were inexplicably added to the

Aspcms background backup logic error causes injection of a Trojan The backup logic in the aspcms background has serious logic problems, which can lead to a single-statement Trojan being introduced and executed. As we all know, for an access

How to save your password in the correct postureSummary In the past few years, many websites have been deprecated, leading to the leakage of plain text passwords of many users. This article does not discuss the pants removal technology, but focuses

The password setting method is useless... First of all: I believe many people like to use their birthdays as their passwords, such as 19900523. There is only one reason for this. After all, there are too many websites today, and you do not know how

Python crawler (2): Introduction to Crawler theory and Protocol 0 × 00 Introduction 0 × 01 Protocol 0 × 02 principles 0 × 03 set objectives and analysis process 0 × 04 hands-on 0 × 05 sitemap Crawler 0 × 06 web Element Processing 0 × 07

PHP function create_function () code injection Part 1: Describes the php function create_function ():String create_function (string $ args, string $ code) string $ args variable part string $ code method code section example: create_function ('$

A time-blind injection vulnerability in a tobacco app Rt   This wonderful appTobacco ECOM login site Injection  python sqlmap.py -u "http://sjdy.inspur.com/app/servlet/validate" --data "userid=admin&pwd=034232d0d08907880acefc5efc0408eb&mobile=188888

Common security problems in verification code design CAPTCHA is short for verification code: Completely Automated Public Turing test to tell Computers and Humans Apart A completely automated human-machine-differentiated Turing test ". The time

Detection of digital shenzhou.com reveals leakage of password Knowledge Management Please, please, on the homepage. Please, 20 rank. Http: // 219.143.213.19/Admin password  Http: // 219.143.213.19: 8080/Admin password      Knowledge management

SQL Injection on a Nokia sub-site involves 1620 tables and 0.4 million data. A batch vulnerability scanner is built ~~ Initial scanReally Useful ~The specific data is not run, that is, the table name.Competition, high score Injection point:  python

The water drop management platform has the arbitrary User Password Reset Vulnerability. Reset any user password on the Water Drop Management PlatformThe friendship test uses an account of a friend of Wooyun. During the Spring Festival, wooyun

Vision energy OA system JAVA deserialization: getshell Command Execution Getshell and Intranet roaming Vision Energy Technology Co., Ltd. OA systemUrl: http://oa.envisioncn.com  One sentence address: http://oa.envisioncn.com/tk/tx.jspPassword 110 

A system vulnerability package of CNPC can threaten the Intranet. Rt A system vulnerability package under CNPC can threaten the Intranet.System address: http: // 61.158.56.15: 7001/logonAction. do  1 # download any fileHttp: // 61.158.56.15: 7001 //

SQL Injection for a station in chelaile City ~~~~ Injection Point http://app.cheshi.com/substation/ad.php? Province = 21 & city = 299 & pid = 1 *Injection Parameter pidTime-based blind injection. Data can be obtained. It is very slow and easy to

Haidilao core system SQL Injection Vulnerability Your hot pot is delicious!  Haidilao Main Station: http://www.4008107107.com/SQL Injection point:  Http://www.4008107107.com/dingcan2list/searchlist? Ram = 0.10950957192108035 & searchKey = e &

Click my link to access your zhihu account. Click my link to access your zhihu account. Zhihu's Weibo login Binding Request is  Http://www.zhihu.com/oauth/redirect/bind/sina? Next =/oauth/callback this request is not protected by csrf. Attackers

Discuz! Conditional storage xss and ssrf (easily met) First, submit a chicken rib... In fact, the conditions are easily met.Detailed description: FileSource \ function \ function_discuzcode.phpFunction discuzcode  if(!defined('IN_MOBILE')) {

Domain penetration-Security Support Provider 0x00 Preface In the previous article, I introduced some penetration methods and techniques in the domain environment, so this time I will introduce a method used to maintain domain control