Cloud Security

A good idea is to hide the backdoor, inject DLL to the system process using a thread, remove the DLL ing, delete its own DLL and EXE files, and delete its own services, which only exist in the memory. Therefore, the host machine cannot find any new

0x00 test environment Operating System: CentOS6.5 Web server: Nginx1.4.6 Php version: Php5.4.26 0x01 Nginx Introduction Nginx itself cannot process PHP. It is only a web server. After receiving the request, if it is a php request, it is sent to the

I browsed the circle of friends yesterday and saw this article from @ binarytree. At that time, I was not happy. are programmers so weak? Go directly to the topic. Next, let's take a look at my social engineering case. Let's see what happens after

When security is involved, we sometimes focus more on wireless networks because Wi-Fi has no physical barrier. After all, attackers can detect your SSID and launch attacks externally. However, in the face of internal threats, targeted attacks, and

Traffic hijacking. After a period of silence on this old attack, it has recently started to stir up. Many well-known brands of routers have successively discovered security vulnerabilities, attracting domestic media reports. As long as the user does

In the network, especially in the LAN, ARP spoofing is often encountered, thus affecting the normal application of our printer in the network. The specific causes of ARP spoofing are not described here. It is better to know the situation and

Symptom Description: Is there a trojan during Webpage Browsing? Of course, due to IE5.0's own vulnerabilities, this new intrusion method is possible by exploiting Microsoft's eml file vulnerability that can embed ex files and placing Trojans in eml

In Discuz, XSS hijacks UC_KEY to get webshell. Detailed process of the xss application. Vulnerability: the vulnerability is located in the portal function of Discuz. When an article is published and the "Edit source CODE" function is enabled, after

Discuz! X latest version (and some vulnerabilities in the old version)Today, a user point on the Forum suddenly rose a lot. I checked the logs and found a hole in the old version. I thought it had been fixed for a long time. I didn't expect it to

Previously, nagios and cacti were installed using yum through epel. Now you need to migrate to another machine.Old monitoring machine 192.168.1.200 centos 6x64New invigilator 192.168.1.201 centos 6x64The following operations are performed on the new

Remote logon is configured on the Internet and Intranet routers. To ensure network security, the Internet cannot access the Intranet, but the Intranet can access the Internet. R1 cannot telnet or pingR3, but R3 can access R1:The configuration is as

1) use the access list categoryPlace the data defined in access list 10 in the high-priority queue; other data in the default queue.Access-list 10 permit 12.12.12.0 0.0.255 --- define the ACL and allow 12.12.12.0/24 network segmentsPriority-list 1

The encryption method of the N-point VM is a custom function encapsulated in the DLL. You create an ASP file in the directory of the N-point host management system as follows: Replace the NLFPK @ ojcocia @ E @ FEKJMFADLALKLF @ JHOIMAHO @

I used to use this Group Buying System for free. I don't know how to charge now. It seems that this vulnerability has always existed in several low versions! Vulnerability file: app/source/article_show.php  The following code omitted such an

0x00 background When the value assignment of Struts2 Tomcat class.classLoader.resources.dirContext.doc Base causes DoS and remote code execution and exploitation, After Tomcat is used, it is not a framework, but a J2EE MVC framework that is not

Two days ago, I got down because of web2hack.org and analyzed the reason. At that time, I had some ideas and wanted to keep track of them, but it was not clear. Later I found that WordPress was released in the latest version 3.5.1, I 've seen

Not to mention, I read a book directly above, written by a foreigner recently. One of them is about [modifying host headers and malicious attacks] [some CMS backgrounds have a function, displays the visitor's client information, such as the

Reinstallation vulnerability caused by arbitrary yxcms File Deletion Protected/apps/members/contoller/newscontroller. phpif (empty ($ _ FILES ['picture '] ['name']) ===false) {$ tfile = date ("Ymd "); $ imgupload = $ this-> upload ($ this->

I am not good at xss. As a summary article about xss, I would like to share my own opinions. In fact, I feel very scared to write it out. I have read some articles written by M. I would like to thank you here. The bypass here focuses on white-box

Currently, PHP has become a popular language for Web application development because of its powerful functions, simple entry, and high code execution efficiency. Due to the wide use of PHP security vulnerabilities, more and more Web websites are