Thoroughly understand the trojan principle and put it in the cradle

Many new users do not know much about security issues, so they do not know how to clear trojans on their computers. Therefore, the most important thing is to know the working principle of the "Trojan", so that it is easy to find the "Trojan ". The

Windows Password local cracking common method

Windows Password local cracking common method in fact, this method is known to many people, but the latest win7 64 attack has been tried recently and still found to be valid. Please share your thoughts with friends who do not know about it. narrator.

Nginx vulnerability exposed by foreigners

Last night, the black pot posted a foreigner-exposed Nginx vulnerability on Weibo, and few people started to pay attention to it. I tested and verified the installation environment, I tried two websites on the Internet and verified the vulnerability,

Hide apache Access Error Display System and version information

I have explained in detailHow to modify nginx header information to disguise nginx version information, Apache can also make corresponding modifications. If a url does not exist, the operating system information and apache version information will

Detailed learning notes for iptables/netfilter

I. Firewall ------------------------------------------------------------------- 1.1 Introduction to Firewall   A firewall is a combination of components set between different networks or network security domains. It enhances the security of the

In linux, add a root account and set the password.

Adding an account to the Intranet machine with the privilege escalation without the ECHO will make it difficult to set the password. The following is a command to add a root-level account and set the password. Useradd-p 'openssl passwd-1-salt 'lsof'

How to harden your nginx and php in linux

Linux systems are relatively safer than windows systems, but some programs are insecure. No matter what system you are, there are also risk factors. Here, we have summarized some common methods for eliminating Trojans and reinforcing system security

Configure backup and ACL permissions for scheduled tasks of important data

1) The important directories in the system include/etc/home/root/var/spool/mail. Now you want to back up data at am every day, the backup data is stored in backup, and tar is used to pack the backup. What should we do? Mkdir/root/bin // create a

Tomcat security management in Windows

Download and install the latest Tomcat version, the latest version is generally fixed the old version of the problem, including security issues; modify the Tomcat management background account and password (tomcat \ conf \ tomcat-user.xml) modify

VM Security Settings

This article is only a relatively safe measure compared with the current security measures, as follows:1. How to Run asp scripts with the system permission?Modify the virtual directory corresponding to your asp script and change "application

Solutions for forced Internet Explorer connection to a website

Recently, both myself and my friends were guided to click a website when chatting or browsing the Web page, and downloaded a small program with knowledge or without knowledge, resulting in forced connection to different websites on the IE homepage.

SQL Injection defense method-Programmer

Source: Neeaos BlogAuthor: NB Alliance-XiaozhuPs: old things, no other meaning. I miss 54nb, which has promoted network security!SQL injection is increasingly exploited to intrude into websites. Some WEB programmers are also paying attention to this

Advanced prevention of PHP script Trojan

First, modify httpd. conf. If you only allow Your php script program to operate in the web directory, you can also modify the httpd. conf file to limit the php operation path. For example, if your web directory is/usr/local/apache/htdocs, add the

This allows you to quickly learn how to inject cookies and joint queries.

I will not write down the specific principles and analysis process. I will write a large piece of data, and I will talk about the details of the operation process. In the Privacy Report, all cookies must be accepted to reduce the security.I will not

Reinforcing IIS makes Webshell useless

Creating a WEB server with Microsoft IIS is very simple, but its security is not flattering. Attackers obtain the Webshell of a website through injection, upload, and bypass techniques, and then penetrate and escalate permissions until they control

Anti-plug-in and cracking of iframe

The soul of an empty prodigal soul Read Monyer's article:Iframe anti-plug and strong plug (2): The http://www.bkjia.com/Article/200902/31888.html code is as follows: JavaScript code Forced submission. I carefully read this article and then

How to export executable files to startup items and instances in MYSQL Injection

Author:Sai52 [B. H.S. T] Preface I mentioned in the article "Several Methods and Applications for reading files under mysql" that theoretically export executable binary files to startup items in mysql injection, the principles and examples are

Edit user permissions in phpMyadmin

1. Create a database: Go to the phpmyadmin Management page, find the text "Create a new database", enter the name of the database to be created below, and select the database encoding from the drop-down list, generally, it is "gb2312_chinese_bin".

Weier article system v1.51 Mandatory vulnerability Removal

Author: jshell This system has been analyzed before. Today we see an updated version, so we downloaded it and read it. The previous vulnerabilities were completed, but the new one was upload, and the other was background injection. First, the

Network Weathermap 0.97a (editor. php) Persistent XSS

rrd

Earlier versions are also possibly vulnerable. Information: Affected program: Network Weathermap 0.97a Remote-exploit: yes program address: http://www.network-weathermap.com/ Abstract Network Weathermap 0.97a is vulnerable to a persistent XSS when

Total Pages: 1330 1 .... 726 727 728 729 730 .... 1330 Go to: GO

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.