Cloud Security

In actual tests, we often encounter such a situation that the server's asp script does not limit user input, however, by setting the maxlength attribute on the input box on the webpage, many of our attacks are not allowed. some people may want to

Many people have heard that files in WINRAR self-extracting format can be uploaded across different sites on the installation interface. I personally tested it. This is not just cross-site, I thought it was a new vulnerability. It turned out to be

Editor's note: the most reliable method is to do it by yourself, instead of using tools. I have summarized some things during my learning process. I am sending them here. I hope they will be helpful to anyone who can see them!Name of the table to be

Most of the security events of the past few days are closely related to Web applications. Many organizations and individuals have seen the importance of taking necessary measures to protect Web Application Security. I think it is necessary to

A good Penetration Tester must have a path Dictionary of his own. It can help a lot during penetration testing.However, Good dictionaries are collected slowly at ordinary times. Therefore, this script is available.The script automatically determines

Author:Thorn First, we will introduce the structure of Anehta. My viso is very bad, so I had to use a simple drawingFeed. js is the most basic file, and all sources loaded by anehta are this file. The following is an example of feed. js. You only

Reprinted with the source: BK instant groupInitial launchWeb Security Manual //////////////////////////////////////// ////////////////////////////////Sa command execution method summary By invincible cucumber//////////////////////////////////////// /

In this article, the server where a software product is located performs a security check. A detail determines the penetration of a system. After successful penetration .. I. Security Check reason A friend needs to purchase a school OA system and

One night later at the beginning of IRC, an old man said that he could help him see the security of his new main page. Then, he gave his URL abc.tar get.net. I think it's quite familiar to me, In target.net. I know the CEO, manager of the personnel

I have been engaged in website testing for three years. I personally think that a complete Web security system test can be conducted from deployment and infrastructure, input verification, identity verification, authorization, configuration

When using the SA permission injection point, we can use some commands provided by the system to read the registry key information.Sa has the SYSTEM permission by default and can read the sam key.Regedit-e c: 1.reg

Author: luanx.blogbus.com) Many people complain that ASP is not safe and fast, but ASP is also excellent. You can use PHP to write pull programs and ASP to write excellent programs. High Security and low security depend on programmers. PHP can still

By RyatHttp://bbs.wolvez.org2009-03-24   Affected 2.5.x and 2.6.x. Other versions are not tested. Goods_script.php44 rows: If (empty ($ _ GET [type]){...}Elseif ($ _ GET [type] = collection){...}$ SQL. = "LIMIT ".(! Empty ($ _ GET [goods_num])?

Release date:2009-03-24Updated on:2009-03-25Affected Systems: Real! Ty Medias PHPizabi v0.848b C1 HFP1 Description:Bugtraq id: 34223 PHPizabi is an open-source code online dating, communication, matchmaking, and business cooperation

Vulnerability Author: phantom spring [B .S.N]Source code under asp "> http://www.dvbbs.net/products.aspOfficial http://www.dvbbs.netVulnerability level: medium and highVulnerability description:Vulnerability 1: Show. asp Code:If Request ("username")

Vulnerability Author: phantom spring [B .S.N]Source code download http://down.chinaz.com/soft/24108.htmOfficial Website http://www.soyici.cnVulnerability level: highVulnerability description:The database is not added with the anti-download code,

Author: UpFonTReference address: http://upfont.blogbus.com/logs/37867077.html One hour ago, Gh0u1 sent a link saying that it was a msn website and thought there were any new technical articles to share. It would be wrong if we entered it ~ We can

Secure-hiphop Space I tested it on http://www.ssk-keukens.nl Step 1: find a site with asp, like ex. http://www.site.com/news.asp? Id = 2 Step 2: add after 2 with space; and 1 = 0 OR and 1 = 1So: http://www.site.com/news.asp? Id = 2 and 1 = 0 By 1 = 0

Topic: DreamArticle 3.0 background verification logic vulnerability and injection vulnerability, resulting in direct logon to background Team: bbs.wolvez.orgBy q1ur3n There is such a piece of code in admin/global. php to implement the "Remember

Taskkill.net We all know that oracle is relatively large, and the 11g installation program is about GB. You may encounter fewer oracle databases and better oracle + jsp combination...The default users of the oracle system Library include sys, system,