Cloud Security

Author: Cloud Number 9Email: cloudnumber9@sina.comCopyright Disclaimer: This article can be freely reproduced and referenced, but cannot be used for commercial purposes. Complete the reprinting.Purpose: I haven't cracked the software for a long time.

Author: Tueur Today, I saw someone on the Tusi saying that the kitchen knife has a backdoor. I just analyzed the one-sentence communication of the kitchen knife some time ago and used this to make an article ugly. Note: The tool uses post to

Brief description: Injection caused by lax FilteringDetailed Description: When Haha station is too big and negligentProof of vulnerability:   Http://www.duote.com/zhuanti/comment/index.php? Ztid = 44 + AnD + 1 = 1Http://www.duote.com/zhuanti/comment/

Description: In the source code appreciation function, the $ _ GET ['path'] of the file path is not filtered, resulting in manual input .. /You can list the root directory file list and display the content (such as the configuration file ).Proof of

Web Security in China has been improving and everyone can see it, but security in the Intranet has been stagnant. As early as 08 years ago, we were lucky to be invited to detect a Chinese game company, web security is indeed doing well,However, when

PHP pseudo-static, mainly used to hide the passed parameter names. After searching online, sort out the pseudo-static four methods.// Pseudo-static method 1 // Localhost/php100/test. php? Id | 1 @ action | 2$ Php2Html_FileUrl = $ _ SERVER

  A few days ago, the RILL in the group asked me about how to bypass the IIS firewall and get the SHELL smoothly. Today, I occasionally encountered such a firewall and looked at it. As follows:   The current webpage is temporarily inaccessible

GetURL security issues.Case: lh.9you.com/web_v3/bcastr.swf? Bcastr_xml_url = xml/bcastr. xml refers to the call method. The external configuration or data file Suffix of the call, such as: xml and other Flash actionscript scripts. Currently, there

1. the include/dialog/select_soft.php file can expose the background of DEDECMS. Previous bosses could have skipped login verification and directly accessed the file without the administrator account. The new version is directly switched to the

/*************************************** * *************** // * Csdjcms // The old rule first looks at include_once ("include/install. php "); if (S_IsInstall = 0) {header (" Location: install/install. php ");} include_once (" include/label. php ");

Last: http://www.bkjia.com/Article/201304/200669.htmlThe vulnerability exists here: AURL: Login (the password entered here has a length limit, and it will be OK after modification) Available features after login: [modify domain name DNS], [domain

1. csrf exists in the account to be hijacked. You can modify the email address to hijack the account. Because one mailbox can only be bound to one account, you can use arrays to randomly select mailboxes. POC: 2. modify user information.

SQL Injection 1:Vulnerability in file \ source \ cp_profile.php $ Value ){If ($ value ['formtype '] = 'select') $ value ['maxsize'] = 255;$ Setarr ['field _ '. $ field] = getstr ($ _ POST ['field _'. $ field], $ value ['maxsize'], 1, 1 );If ($ value

Title: timynce Ajax File Manager Remote Code Author: By onestree: http://www.phpletter.com/demo/tinymce-ajax-file-manager/tested system: windows 7**************************************** * ******************* How to run the exploit use firefox web

Http://ir.vipshop.com//phoenix.zhtml? C = 250900 & p = irol-calendar this url's p parameter is suspected to have local File Inclusion Vulnerability http://ir.vipshop.com//phoenix.zhtml? C = 250900 & p =./irol-calendar returns to normal page to

After I got the image and uploaded it to the server, I didn't stop. Because there are many hosts in this IP segment, I will continue to scan hosts in the same IP segment...   Found a grand customer service application background: http://service. OS .

Today, I met a WAF with a red umbrella. I tested it and found that many of them intercepted it. However, any WAF is not omnipotent. In this regard, the waf I found a defect. For example, there is no matching policy on Characters in size. I can

When I retrieved the password, I sent a text message verification code to my mobile phone and intercepted it with POST. I found that the account, mobile phone verification code, password, and payment password were displayed directly. BelowClick get

The JBoss configuration vulnerability in the jboss service with an insurance port of 8899 is reported. Although it cannot be accessed directly through IP/jmx-console, for example, when a HEAD request is sent to the IP/jmx-console, attackers can

An analysis report can be intercepted by quickshield. Blog has no articles, just a little busy recently... Busy... 01 Vulnerability Analysis  Vulnerability in the payment. php file   Elseif ($ _ REQUEST ['ac'] = 'Return ') {// return page for