Cloud Security

Try to analyze the computing Verification Code 0x00 Preface The original intention of the verification code is human-machine recognition. However, most of the time is only used to increase the time cost and reduce the frequency. If it is only for

N backdoors in Linux Preface During penetration testing, we often encounter various types of Linux system hosts. Today, we will make a summary and discussion about the several backdoors in linux. Pose 1. PAM Backdoor Overview: PAM (Pluggable

Wireshark DCOM parser Denial of Service Vulnerability (CVE-2015-8714)Wireshark DCOM parser Denial of Service Vulnerability (CVE-2015-8714) Release date:Updated on:Affected Systems: Wireshark Wireshark 1.12.0 - 1.12.8 Unaffected system: Wireshark

Libxml2 out-of-bounds Memory Access Vulnerability (CVE-2015-8710)Libxml2 out-of-bounds Memory Access Vulnerability (CVE-2015-8710) Release date:Updated on:Affected Systems: Libxml libxml2 Description: Bugtraq id: 79811CVE (CAN) ID: CVE-2015-871

DLL hijacking attack Guide The DLL (Dynamic Link Library) file is a Dynamic Link Library file, also known as "application expansion", and is a software file type. In Windows, many applications are not a complete executable file. They are divided

Android ARM 32-bit The full name of drop is Return-oriented programming, which is an advanced memory attack technology, it can be used to bypass various universal defenses of modern operating systems (such as memory unexecutable and code signature ).

Troubleshoot a Linux trojan virus intrusion (DbSecuritySpt) A newly started company suddenly threw a development and testing machine directly to the public network. The output traffic increased by more than 300 M, which directly led to high server

Aspcms background backup logic error causes injection of a Trojan The backup logic in the aspcms background has serious logic problems, which can lead to a single-statement Trojan being introduced and executed. As we all know, for an access

Android dynamic debugging of seven weapons-Hooking (bottom) 0x00 As mobile security becomes increasingly popular, various debugging tools are emerging one after another. However, no tool is omnipotent due to different environments and requirements.

Payload instance analysis: Encrypted malicious documents The malicious office document we analyzed today is a download tool: 2ELJ2E1OPJ0OT.doc The oledump result shows that the malicious document contains a VBA macro, but the plug-in cannot extract

A system at Guangdong Airport found that shell could threaten the Intranet. Discover shell, which can threaten the Intranet The system was so long that it did not know what operations caused it to report an error.  One-sentence address: **.

Reset Password of any user on a site of jixiang Life Insurance (non-violent cracking) Wonderful VulnerabilitiesThe nickname is corrupted in our hands. The site is mobile After the http://wap.jxlife.com.cn opened the retrieval password, enter your

China tower Co., Ltd. VPN account leakage can be found in the Intranet a large number of default FSU passwords High-tech construction engineers are not aware of security issues. files uploaded contain sensitive information. FSU uses the default

SQL injection vulnerability in a Kingdee system (with verification script) Kingdee system Injection VulnerabilityAs of November 8, 2015, the system had released more than 1.3 million mobile Internet users, with over 2.62 million

Lobotomy: Android Reverse Engineering Framework (Part2) 0 × 01 Overview InPart 1, We explained how to load the applicationLobotomyAnd how the Lobotomy global loader works. In the second part (this article), we will introduce how to use Lobotomy to

China Telecom micro-store Getshell (millions of users/millions of orders/Intranet/several database servers/fall into China Telecom micro-Stores) First, a connection from BaiduHttp: // **. **/CTManager/login. do? Lel = 0 & code =

9 high-level command execution vulnerability in DVWA Series Switch DVWA Security to the high Level and view the webpage source code in Command Execution.The stripslashes function is also used to process the obtained IP address. It is mainly used to

Tang Dynasty scanner parallel excessive access to view sub-domain name \ ip Meow Simple and rude, parallel excessive permissions. After logging in, you can directly view other task IDS by modifying taskids (other enterprise users)I also called the

Kingsoft ciba website MySQL blind note (bypassing GPC escape) After reading this hole, WooYun: the SQL injection in the Kingsoft node has been fixed.But wide characters can be used to bypass GPC addslashes sqlmap.py -u

Use multipart/form-data to bypass waf The LuManager high-risk SQL injection 0-day analysis mentions the use of payload as follows: Attackers can see that the multipart/form-data format is used to send payload. For applications, the data obtained