Cloud Security

The OpenSSL Heart Bleed vulnerability has been confusing for the past two days. Please read this article to analyze and diagnose the OpenSSL Heartbleed Bug. Currently, we can see that the versions that can exploit this vulnerability are:OpenSSL 1.0.1

Introduction TCP can establish a connection only after three handshakes: (From wiki) As a result, there was an attack on the handshake process. The attacker sends a large number of FIN packets, and the server responds to the (SYN + ACK) packet, but

As the new colleagues are not very familiar with the script, to facilitate the management of iptables on the server, they decided to write a simple script, so that colleagues who are not very familiar with the script can easily manage the script.

Recently, the server room where the company is located is often unable to access the website due to attacks and network faults. In order to be able to know that the website is inaccessible for the first time and quickly solve the problem, tley uses

Introduce Process Control in Shell, such as judgment statements... If statement: First, I want to know a few things: [-F "somefile"]: determines whether it is a file. [-X "/bin/ls"]: determines whether/bin/ls exists and has the executable permission.

Grep family: 1. grep exit status:0: indicates successful;1: The matching pattern cannot be found in the provided file;2: The file provided in the parameter does not exist.See the following example: /> Grep 'root'/etc/passwdRoot: x: 0: 0:

Nux redirection refers to modifying some of the original default items and changing the default Execution Mode of the original system commands, for example, I don't want to see the output on the monitor. Instead, I want to output the output to a

I wrote a script for mysql process check. I think about my online search experience when I was a beginner. I suddenly wanted to laugh. I am an O & M engineer and want to say "I am a Coder !". #! /Bin/bash # DATE # MAIL gccmx@163.com # FUNCTION

Recently, php-ddos flood, many web hosting service providers worry that their websites are implanted with php-ddos due to website permissions or vulnerabilities, and a large number of data packets are sent externally, this will cause unnecessary

CentOS Security Configuration 1. system security record files Recording files in the operating system are important clues for detecting network intrusion. If your system is directly connected to the Internet, you find that many people The system

This article introduces fail2ban, a software used in linux to prevent brute force password cracking through monitoring logs. Fail2ban supports common services, such as sshd, apache, qmail, proftpd, sasl, and asterisk for password verification

1. Website optimization Case Based on Dynamic Content1. Website running environment descriptionHardware environment: one IBM x3850 server, a single dual-core Xeon 3.0g cpu, 2 GB memory, 3 72 gb scsi disks.Operating System: CentOS5.4.Website

Squid mainly uses its port ing function to convert port 80, in fact, for general DDOS attacks, you can modify the parameters in/proc/sys/net/ipv4/tcp_max_syn_backlog. The default parameters are generally small and set to more than 8000, general DDOS

Recently, I saw news about hackers on the Internet. I do think the computing network is indeed insecure. I can say that nothing is absolutely secure. Only the Internet will be hacked, however, all technologies have a relatively secure policy. Today

In this article, I will show you how to write a PHP backdoor with non-alphanumeric characters. When writing such PHP backdoors, we first need to understand some basic knowledge: (1) Understanding PHP (2) to understand curl or other tools that can

One interface has no permission control and can obtain all information of any employee or tenant. All information includes email, mobile phone number, ID card number, home address, marital status, job (employee), company, security questions, and

In the online execution of pythontip, you can obtain the program source code and program configuration. pythontip online programming does not shield many functions in the OS module, nor prevent open from reading file content, leading to source code

1. Add a non-direct execution Program if(!defined('IN_DISCUZ')) {exit('Access Denied');} 2. Remember to filter For example, IDS such as uid need intval filtering to avoid overflow.Text content needs to be filtered by htmlspecialchars to avoid

This article is my two-day study notes shared and shared with you. Knowledge is scattered, but for people with a certain JS base, every small knowledge will help broaden your Hack perspective. First, I declare that this article is only the tip of

Log Analysis on a channel of the company at the supervisor's request two days ago Note: xxx represents a domain name or informationI. Log Record AnalysisVulnerability 1: File Upload hazard level: Very serious log analysis showed that hackers used