Cloud Security

Weibo: genxor0x00 background I have seen many articles on struts2 exploitation on the Internet, but there are few documents on vulnerability trigger tracking and analysis. I have nothing to do with tracking the two most popular struts

Hi friends, I discussed the features of NX on the Linux platform in my previous article. We already know that NX (DEP on Windows) and ASLR will work at the same time, so it is worth looking at how ASLR works on the Linux platform. It turns out that

Adobe Flash Player was exposed during the Spring Festival 0-Day Vulnerability (No.: CVE-2014-0497), the vulnerability hazards Flash 12.0.0.38 and earlier versions. Adobe has released patches. This vulnerability is caused by an error in parsing the

This article describes how to get started with the honeypot technology and how to use tools. All the materials involved are from the Internet. All the referenced materials will be marked in the article. Here, Xiao Han just makes a usage summary.   1.

Enterprises need dynamic intelligence-driven defense measures to effectively identify malicious behaviors they have never seen before. These abnormal behaviors may eventually cause dangerous zero-day attacks, which are rampant on the Internet every

Currently, there are two main security solutions based on the reader and electronic tags: authentication and encryption.Authentication Mechanism: When a reader communicates with an electronic tag, a security authentication mechanism is implemented

The iOS7 perfect jailbreak tool evasi0n7 still has many bugs that are extremely unstable. Most jailbreak plug-ins do not support it yet. Do not rush to jailbreak. This tool is known to support all iOS devices, but after a large number of fruit

Cloud fire wall: Source: CISCO defines a text concept of the fifth-generation firewall when promoting ASA; Technology: passthrough firewall supports cloud-related functions such as cloud Policy Library update and cloud access (SSLVPN) Cloud

Over the past few years, security information and event management (SIEM) technologies have been criticized. Its complexity and excessive demand for professional services have led to many complaints. Many companies are disappointed with their

If you input a query directly inserted into an SQL statement, the application will be vulnerable to SQL injection. For example: $unsafe_variable = $_POST['user_input'];mysql_query("INSERT INTO table (column) VALUES ('" . $unsafe_variable .

In the early stages of computer development, there were not many viruses. Experts could use features to prevent viruses, but now there are endless viruses, especially some worms. Once the virus is poisoned, it may be of a certain type (such as EXE)

In the competition against constantly evolving weapons of advanced malware, many enterprises need to deploy stronger defense measures to protect their networks in real time, instead of simply relying on desktop terminal virus scanning programs and

Injection point: http://www.fengxiaowang.cn: 80/article. php? Aa_id = * (GET) sqlmap identified the following injection points with a total of 184 HTTP(s) requests:---Place: URIParameter: #1* Type: UNION query Title: MySQL UNION query (NULL) -

The injection of the iphone app interface of receng may cause user information to be threatened. The vulnerability can be used to read server information through variables, and the administrator can fix the vulnerability to prevent malicious use by

Currently, PHP-based website development has become the mainstream of website development. This article focuses on exploring PHP website attacks and security prevention to reduce website vulnerabilities and hope to help you! I. Common PHP Website

1. determine whether there are any injection points; And 1 = 1 and 1 = 2 2. Generally, the name of a table is admin adminuser user pass password ..And 0 <> (select count (*) from *)And 0 <> (select count (*) from admin)-determine whether the admin

Because startbbs does not properly filter user output, the stored xss startbbs adopts the mvc Architecture Design. However, improper filtering of user personal data input and output results in cross-site scripting attacks. 1. The target is located

SQL injection, which is believed to be familiar to many programmers. In addition, it may all have experience in fixing such a vulnerability. This article is mainly written to some novice programmers to avoid hacking and improve security. The

When I was intercepted, I put my cat on the keyboard, and a key on the keyboard was lost. 20131208 is the latest version of the dongle package (iis + server) a legend that the subscript has crossed the border? Ignore suffix detection and content

The commonly used server is lost, so today we have nothing to do to scan the section of the Henan one machine room scanned by FTP. Scan a weak password. When I flipped through the folder, I found that there was no conspicuous attempt to turn it off.