Cloud Security

Nowadays, the protection of various private information has become the focus of attention. Generally, we use encryption software to encrypt files or folders. This method can indeed achieve a certain degree of encryption effect, however, there are

By using user-level top, ps, and other system tools as well as Linux kernel protection technologies, we can comprehensively protect the security of important system processes and user processes in Linux systems from the user/kernel levels, to

@ Darkray posted an article titled PoisonIvy Rat remote overflow practice. The attack target is the control end of the PoisonIvy Rat, that is, the attacker's machine (malicious server ). A foreigner also wrote an Nmap script to scan the malicious

Because msf uses exploit/windows/smb/export xecloud, you should have some contact with the corresponding xec.exe in pstool. In other words, mongoxec.exe can remotely connect to obtain an interactive mongoshell, C: \ Documents and Settings \

In my personal work, I simply divide RootKit into user-mode rootkit and kernel-level rootkit. Kernel-level rootkit can be divided into LKM-based rootkit (including system call table modification and VFS-layer rootkit) and non-LKM rootkit (such as

0 × 00 what is a Secure DesktopWhen employees in some enterprises (such as finance) perform internal operations in the company, the general security policy is to recommend that the customer configure another computer for office work, and cannot

Let's talk about a little thing recently. JBOSS worm... First, send an exp #! /Usr/bin/perluse IO: Socket; print "JBoss Exp... \ n"; if (@ ARGV! = 2) {print "perl $0 & lt; IP & gt; & lt; Port & gt; \ n"; exit ;}$ ip = $ ARGV [0]; $ port = $ ARGV [1];

This is very early for about 05 years. It only makes access or msjet40 crash and has no value for use. If you have time, you can debug it to see if it can be used. I tried it in access 07 today! It is mainly about the count (*) statistical function.

MYSQL 5.1 and later versions have another limit. The DLL used to create a function can only be placed in the plugin directory of mysql .. This plug-in directory does not exist by default .. YD: it may be to prevent the DLL from being written to this

What is a CC attack? CC attacks use a large number of proxy servers to initiate a large number of connections to the target computer, resulting in depletion of the target server resources and DOS. So how can we determine whether to query CC attacks?

The H3C 802.1X client does not validate the key data, causing the buffer to overflow the sub_4030E0 function. The memcpy function is called at 4031F6. If the buffer length field of the memcpy function is maliciously constructed, the poc code is as

There must also be a method to hold your feet. The 26th is approaching. I cannot guarantee that I can remember too many things in a short time and they are all right, assume it's a monkey, Dad, and B. You can't watch it, hahaha ~ (You are not

Struts vulnerability repair process S2-016. The evil Struts appeared again, this time being a remote execution vulnerability. We recommend that you upgrade to 2.3.15.1 immediately. I hope this is the last vulnerability fix. The upgrade procedure is

Directory What is sengworkflow? Why do we need to build a sengworkflow project? What additional functions are provided relative to the standard nginxseng.pdf? What is sengworkflow? Sengced is a variant of the reverse proxy and Web server

The shellcode on linux is slightly different from the shellcode on windows. The shellcode on linux is called by the system to execute the desired function. View the system call number cat/usr/src/linux-2.6.38.8/arch/x86/include/asm/unistd_32.h

Users are not allowed to modify or delete files, use chattr + I to protect [root @ 80 uncle/] # chattr + I/etc/passwd [root @ 80 uncle/] # chattr + I/etc/shadow [root @ 80 uncle /] # chattr + I/etc/group [root @ 80 uncle/] # chattr + I/etc/gshadow

A major selling point of Apple's new iPhone 5S is its security features, including its new fingerprint processor and the Built-in anti-theft feature in the next-generation iOS 7. However, a bug that has existed since the previous generation of iOS 6

This article has been in the draft box for a long time. I want to clean up the blog database recently, so let's publish it. Statpresscn is the Chinese version of the popular wordpress Site Statistics plug-in. Although it has not been updated for a

SQL Injection Summary (strongly recommended)SQL Injection Summary (early from or1 = 1) The most important table name:Select * from sysobjectsSysobjects ncsysobjectsSysindexes

Chapter Author: fuerSource: evil gossip Security TeamPreface:For a long time, I want to mix it up here, because the ice blood is here :)I want to post a post, but I found that my permissions can only be posted here. It is depressing.I have seen