Cloud Security

Analyze database security vulnerabilities from nine perspectives Database vulnerabilities exist in multiple ways. Because each actual scenario is composed of multiple dimensions, database vulnerabilities can be classified from different perspectives.

Ao you Browser Remote Code Execution Vulnerability/Cookie Stealing Remote Code Execution (chicken ribs) can be caused by a poor function design) We found that javascript: pseudo protocol can be directly added to the Ao you browser's favorites

An APP with excessive permissions can modify the nickname of any user You can simply look at the popular APP fotoplace and find that there is an excessive permission.   The problem occurs when you modify the profile of any user.  POST

Ubuntu 14.04 NTP amplification Attack Vulnerability repair Network Time Protocol (NTP) is a Network transmission Protocol that synchronizes the clock of two computers through Packet Exchange. NTP uses UDP port 123 as the transport layer. It is used

Intrusion penetration techniques Xinetd port forwarding In some network environments, such as managing a LAN or deploying a dedicated LAN, it may still be necessary to access certain ports of the Intranet machine from outside. Generally, you must

Online Banking security guards borrow game safes In the 360 security series software, there is a tool "360 game safe deposit box" that promotes and protects games. For those who do not play games, it is reasonable to say that this software is

SSRF-issues ignored during design Sometimes there is a wall in front of you, blocking your path. At this time, we only need to open a door on the wall, but the door must be locked. Otherwise, a security vulnerability will occur. There are many

Penetration test of a school library 0x00 causes and consequences One of Sirius's dreams is that there is a private library, so the school library is naturally a place where I often go. When I often run the library, I naturally need to borrow a book

Use websploit for automatic LAN penetration The principle is that websploit calls dnsdpoof to perform dns Spoofing and uses metasploit's web_autopwn module for penetration. features: the process is basically completely automated.Enter websploit on

Make the smart lock more intelligent (Black off the August smart lock) Introduction:In the Security guide released by the hacker Security Week recently held by Security Compass, we decided to study the smart Lock Device and evaluate the current

The password leakage of an account of the big data series poor game may lead to APP replacement and Solutions Poor mailbox Management of poor games, the mailbox has registered many third-party websites, and the mailbox password is the same as the

Configure a host-based Intrusion Detection System for CentOS One of the first security measures that any system administrator wants to deploy on its production server is the file tampering detection mechanism. Criminals tamper with not only the file

In Linux, how does one-time password Ensure SSH login security? (1) Security is a process rather than a product. Although the SSH protocol is designed with a password, it is very secure, but if it is not properly managed: whether it is a weak

Tampering with HTTP requests by bypassing Web authorization and authentication What is an HTTP request?Hypertext Transfer Protocol (HTTP) provides multiple request methods to communicate with web servers. Of course, the original intention of most

Analyze a js backdoor of WordPress We recently found a backdoor for collecting Administrator Logon creden on many WordPress sites. The victim website is inserted with hidden code. When the Administrator logs on, the code is triggered, the

Lenovo's SQL injection (tens of millions of users) I would be drunk if I was using a small vendor .. Check the data Website: http://think.lenovo.com.cn/Manual test shows an injection pointHttp://think.lenovo.com.cn/stations/Api/QueryMap.ashx? Area =

A sub-station of China Unicom, such as SQL injection and GETSHELL, affects the permissions of any user, such as "wo + pass/email ". Start with injection: View the original str2 vulnerability address: forbiddenURL: http://m.unisk.cn/Count2.asp? Id = 1

A source code leakage from Baidu may cause shell The artifact detects an operation error. Let's guess later... Url: http://ge.baidu.com/wse.tarDate: Sat, 28 Feb 2015 03:48:39 GMTServer: ApacheContent-Location: wse.tar.gzVary: negotiate,

Grid WIFI injection leaks tens of thousands of O2O merchant information and Wi-Fi passwords Grid WIFI has an injection vulnerability, which allows you to download information of all merchants, log on to the background, and use Wi-Fi passwords. An

Multiple stored XSS vulnerabilities in a function of Coremail Coremail can import contacts in the personal address book in csv format.Import the following CSV file: Contact Group, name, email address, residential address, residential address zip