Cloud Security

[Article Title]: Analysis of a cad Drawing Control[Author]: LiXMX[Protection method]: serial number[Language]: Borland Delphi 6.0-7.0[Tools]: PEiD, Regmon_fix, DEDE, UltraEdit[Operating platform]: Win XP[Software description]: A plug-in for vector

June Security Reposted from youxia: sf3 attack methodSf3 attacks on the Internet are generally caused by the disconnection of the optical drive cable, so that the game program cannot detect the optical drive, so as to use the virtual optical drive

1. Preface On the forum, I saw many friends who did not know what is the ESP law, what is the scope of application of ESP, what is the principle of ESP law, and how to use the ESP law? I saw my findings in the "" investigation and found that

1. breakpoint: The so-called breakpoint is where the program is interrupted. This word is no longer familiar to the decrypted. So what is interruption? Interruption occurs because of a special event (interruption event). The computer suspends the

[Article Title]: RSACrackMe512 analysis process and compilation of registration machine source code[Author]: coolstar14[Tools]: IDA, BigInterCalc, RDLP[Software name]: RSACrackMe512[Software size]: 40 KB[]: Http://bbs.pediy.com/attachment.php?

[Article Title]: Let's talk about the mathematical principle of a CrackMe decryption algorithm.[Author]: kaien[Author mailbox]: kkaien@hotmail.com[Software name]: echapcmd.exe[Shelling method]: No shell[Use tools]: OllyDbg, calculator and VC (for

A simple statement to avoid misunderstanding of the meaning of this article Fckeditor does not have any hard-hitting vulnerability in this article. It's just that the description of LFI can be used together with files like fckeditor that are not too

Unlike normal access injectionBy ay shadow An injection point was thrown by a dead hacker, who said it could not be injected. Then I looked at it and found that the injection was indeed different from the previous one. I have never encountered such

By:Small Official Website: http://www.reaft.com/ Cms: http://www.bkjia.com/ym/201102/26373.html The interface did a good job. After searching, it seems that few people are using it. First, check the UpLoad of the UpLoad.html file in the directory.

Brief description: This vulnerability allows you to directly execute any PHP script file in the background, directly obtain webshell, and obtain the permissions of the entire server. SnDetailed description: First register an account in http://shop.

I have been paying attention to the security of mobile terminals. apps of major enterprises have become the objects of my attention. I like Netease's youdao cloud notes very much. therefore, the IOS client was tested. an interface was found to reset

The meizu flyme cloud service backs up the mobile phone address book and text message to the server and can be viewed on the cloud. On the https://flyme.meizu.com/page, the mobile phone configuration information is Ajax GET json, And the callback

When using http://qz.qq.com/?qqspace, you can refer to the space to give your friends a name. Privacy leaks.I used the QQ number in "dig" to indicate the corresponding QQ number. After I found this QQ number, it seems that his space access

Universal password is an old vulnerability. If your website has this vulnerability, the result will be a tragedy. Anyone new to hacker technology can easily intrude into your website. Because the website that needs to intrude into such a

  II. Introduction to Xssing   ========================================================== ====================================== ====Name: Xssing 1.3 -- Funny and easy xss platform==== ========================================================== ======

When we engage in the Netease forum, we naturally need to think of the Sohu community. Well, it is the same vulnerability as Netease. Hey hey, it's helpful for large companies to increase their exposure, you know ~~Test address:

There is a problem of substation: http://pinyin.baidu.com login upload skin, the client can control the Upload File suffix despise all the upload points are can control the Upload File suffix The only pity is uploaded to cdn, dynamic scripts will

1) the problematic feature can be found at: lady.weibo.com comments; 2) click Publish and capture the package to get the following data; POST/cmnt/submit HTTP/1.1 Host: comment5.news.sina.com. cnUser-Agent: Mozilla/5.0 (Windows NT 6.1; rv: 20.0)

Zhihu's permission control is very strict, but it is very confidential. Keyword: modify any user permission. Impact: it can affect the communication between all users under all topics. In other places, the token and hash are all very powerful, but

URL parameters are output to js Code without escaping, resulting in xss vulnerability. this vulnerability may expose sensitive personal information under the domain name of the Baidu Security Center. For details, go to the activation mailbox page