Cloud Security

Tomcat System reports DoS Vulnerability CVE-2014-0230 DoS vulnerability with Tomcat burst number as CVE-2014-0230. This vulnerability has a low risk level. The affected versions include: --Apache Tomcat 8.0.0-RC1 to 8.0.8 --Apache Tomcat 7.0.0 to

The cmd command set is required. Commands can be divided into three types: network detection (such as ping), network connection (such as telnet), and network configuration (such as netsh ). The previous two are relatively simple. This article only

How to defend against JavaScript-based DDoS attacksDDoS attack technology is rapidly evolving. The recent JavaScript-based DDoS attack has a unique feature: any browser device may be involved in the attack, and its potential attack scale is almost

Ubuntu 14.04 NTP amplification Attack Vulnerability repair Network Time Protocol (NTP) is a Network transmission Protocol that synchronizes the clock of two computers through Packet Exchange. NTP uses UDP port 123 as the transport layer. It is used

Bypassing CSRF ProtectionSignature = [HOST] | utmccn = (referral) | utmcmd = referral | utmcct = [PATH] example: 123456.123456789.11.2.utmcsr = blackfan.ru | utmccn = (referral) | utmcmd = referral | utmcct =/path/2) users can completely control the

Intranet penetration: domain penetration techniquePreface domain management process transfer allows penetration testers to simulate Domain Name Administrator accounts on the Internet to perform operations. However, before the penetration test starts,

Unwrapped hacker links When we download RAR or ZIP packages of videos and audio from the Internet, we sometimes find that, one or more files may be named "playback must read" or "installation must read". These files may be HTML webpage link files

Online Banking security guards borrow game safes In the 360 security series software, there is a tool "360 game safe deposit box" that promotes and protects games. For those who do not play games, it is reasonable to say that this software is

Small Backup File Script in CentOS Script description: Back up all directories defined in array a and keep them for 7 days. Data earlier than 7 days will be deleted. Bak_dir is the directory to be moved to after the backup The backup file name

Centos system initialization script#! /Bin/bash # author: honway. liu # mail: gm100861@gmail.com # blog: http://linuxsogood.org# Date: 2013-06-25if [$ (id-u )! = 0]; thenecho "Must be root can do this. "exit 9fi # set privilegeschmod

CentOS shell for backdoor QueryEach process has a PID, and each PID has a corresponding directory under the/proc Directory, which is the implementation of the Linux (current kernel 2.6) system.Generally, backdoor programs cannot be found in ps and

CentOS anti-CC attack shell script #! /Bin/shcd/var/log/httpd/cat access_log | awk '{print $1}' | sort | uniq-c | sort-n-r | head-n 20> acp/dev/null access_logcp/dev/null error_logcp/dev/null limit. shcp/dev/null c # awk '{print $2} 'a | awk-F.

Shell script checks and monitors the CPU usage of mysqlWhen the site traffic is large, mysql is under a high pressure. When the CPU usage of mysql exceeds 300%, it cannot provide services, and it is almost stuck. At this time, the best way is to

Brazilian bank Trojan lurking in the SQL database   System Administrators and common users have headaches in spam. A considerable number of spam will spread the "sex drug sales" link to entice users to click the link and access malicious

PHP multipart/form-data Remote DOS Vulnerability When PHP parses the body part request header of the multipart/form-datahttp request, repeated copying of strings leads to DOS. A remote attacker sends a maliciously crafted multipart/form-data Request,

Baidu repair XSS can be bypassed Baidu repair xss can be bypassed More and more absurd-fixing xss leading to more serious xssFirst, an xssWooYun: Baidu XSSNo filtering, POC:  Http://box.zhangmen.baidu.com/box-jump.html? U = javascript: alert %

HTML5 offline cache attack test This experiment uses LAN simulation to simulate domain name and DNS spoofing by modifying the local HOSTS file. Valid websites are built using Linux CentOS7 apache server, IP address is 192.168.1.113, HOSTS file add 19

Oracle blind injection combined with XXE vulnerability Remote Data Acquisition I think you are familiar with SQL injection and have some knowledge about XML Entity injection (XXE. This article mainly discusses how to remotely obtain data when ORACLE

How did I perform penetration testing? How did I succeed in XXoo luweikang Biological Engineering Co., Ltd. 219.133.197.57: 88 VA weak password ~~~Login successful   Then, click FAQ-options-internet Options.  Privacy-Import    Right-

Attackers can execute arbitrary system commands and risks of CSRF after the backend logon of the Newifi y1 router is bypassed. Http://link.baidu.com/myrouter/wifiLogin? Target = self & getNasBduss = 1 & toUrl = http: //