Cloud Security

Analysis of Domain environment penetration by Mimikatz0 × 00 Preface   Attack and Defense are two permanent topics in information security. In Intranet security management, how to improve the level of security protection, even people who have just

Linux kernel Privilege Escalation Vulnerability (CVE-2016-3157)Linux kernel Privilege Escalation Vulnerability (CVE-2016-3157) Release date:Updated on:Affected Systems: Linux kernel Description: CVE (CAN) ID: CVE-2016-3157Linux Kernel is the

Apple iOS Kernel Race Condition Vulnerability (CVE-2016-1757)Apple iOS Kernel Race Condition Vulnerability (CVE-2016-1757) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2016-1757IOS is an operating system

Apple iOS Kernel Memory Corruption Vulnerability (CVE-2016-1755)Apple iOS Kernel Memory Corruption Vulnerability (CVE-2016-1755) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2016-1755IOS is an operating

Apache Struts I18NInterceptor cross-site scripting (CVE-2016-2162)Apache Struts I18NInterceptor cross-site scripting (CVE-2016-2162) Release date:Updated on:Affected Systems: Apache Struts 2.0.0 - 2.3.24.1 Description: CVE (CAN) ID:

FreeBSD Kernel amd64_set_ldt Heap Overflow Vulnerability (CVE-2016-1885)FreeBSD Kernel amd64_set_ldt Heap Overflow Vulnerability (CVE-2016-1885) Release date:Updated on:Affected Systems: FreeBSD Description: CVE (CAN) ID: CVE-2016-1885FreeBSD

Up to 95% of HTTPS links can be hijacked by hackers It is easier to support HSTS than you think. Because the server administrator fails to correctly set HTTP Strict Transport Security (HSTS), a large amount of HTTPS traffic can be easily hijacked

CENTOS 6.6 SHELL Initialization Script This script may be required after CENTOS6.6 is installed. When learning about CENTOS, you can run this script to perform some configuration, which helps you not to be troubled by the yum selinux ip addresses of

An Analysis of the magic anti-virus method: "using notepad for anti-virus" Antivirus methods use common operations, such as anti-virus software and Process Manager to close unfamiliar processes. Today, I want to learn about the magical anti-virus

Attackers attacked the site by Angler Exploit.     In some well-known news websites, entertainment portal websites, and political comment websites, a large number of netizens have been attacked by malicious advertisements by Angler Exploit. This

Technology sharing: how to embed an EXE file in a PowerShell script I am trying to solve a problem, that is, only PowerShell scripts are used as the attack load in client attacks. Using PowerShell to run malicious code has many advantages, including:

Analysis of Cross-Site Request Forgery (CSRF) attack principles: beyond imagination Cross-Site Request Forgery (XSS) is perhaps the most incomprehensible attack method, but the danger is also underestimated. In the "Open Web Application Security

The social worker obtains the OA user name and password of all employees in a medical service. This penetration is completely technical and relies solely on social engineering. First, I saw a group announcement saying that the OA password and user

Install Xiaomi APP client for blind playing (background viewing triggers logged on to CEO background) On June 23, 20 million, the Internet home decoration supervision platform "Install beebot" had completed A round of financing of Yuan in June. The

Webfront game station has SQL injection (including multiple bypassing and encoding) SQL Injection for APP security Target: game.feng.comSQL injection is detected in the following areas: (latency blind

A Geely website exposes all source code. successfully won the server. You need to upgrade Nginx. Nginx parsing problem + Source Code leakage = server Permissions Http://2014beijing.geely.com/2014beijing.tar.gz1g or more source code. After

11. User ID card information traversal and password reset due to a vulnerability in the battle platform Hi demon APP:Log on and capture packets. The following interfaces return the user ID card information, mobile phone number, and so on:Http://api.

Struts2 S2-029 Remote Code Execution Vulnerability 0 × 01 Struts2 tag LibraryThe tag library of Struts2 uses the OGNL expression to access the object data in ActionContext. To access the variables in the ActionContext, Struts2 sets the ActionContext

Pseudo-static SQL injection (with verification script) exists in a station in flush) ... Injection point: http://data.10jqka.com.cn/ifyyb/yybstockxt/code/600811/date/1 *The asterisk (*) Position of the injection parameter.The space is filtered and

S2-029 Struts2 label library Remote Code Execution analysis (including POC) The Struts2 tag Library provides topic and template support, which greatly simplifies the compilation of view pages. In addition, the topics and templates of struts2 provide