Cloud Security

Scan is the basis for all intrusions. There are many host detection tools, such as the well-known nmap. I don't have any new technologies here. They are old things and old things. Even if I have been referring to the Phrack document or even a

Microsoft once again fabricated complex equations to explain the mysteries of today's most cutting-edge technologies that are difficult to tune. No one can determine from a philosophical perspective whether IIS 6.0 is secure enough. All we can do is

As a network administrator, security issues cannot be ignored or avoided. network firewall, IDS, IPS, and wireless networks all use 802.1x authentication methods with high security levels, however, if the company's internal staff access an AP

This article is only a relatively safe measure compared with the current security measures, as follows:1. How to Run asp scripts with the system permission?Modify the virtual directory corresponding to your asp script and change "application

It has always been thought that there are only spaces, tab keys, and comments/**/which can be used to cut SQL keywords. During this time, I saw the post on Feng Xun cms injection vulnerability, only then can I know that the original carriage return

1. The Stored Procedure master... xpcmdshell.Recovery Method: After querying the separator connection,Step 1: Execute EXEC sp_addextendedproc xp_cmdshell, @ dllname = xplog70.dlldeclare @ o intStep 2: Execute sp_addextendedproc xp_cmdshell and xpsql7

Code by Link Blog site:Http://www.link0day.cn Reprinted, please specify the source. Thank you · I ran to the webmaster for a whole-site study and found that the most recent update was the simple article Management System of the system. I was

Hi.baidu.com/80sec An interesting JS TIPS Source: http://www.thespanner.co.uk/2009/06/23/csp-mozilla-content-security-policy/ Code: Alert (1);/* */ Analysis: On the page, the browser renders the script tag. the src attribute points to the

Author: nightSource: www.54rk.cn Suppose there is such a file, no matter how you inject it into the page, the content is the same. But his code does have injection points.Select * from table where columnid = $ input_idIt is absolutely impossible to

Qglfcnt Blog Who does not know about the database? As long as it is clear to the webmaster or the hacker, once it is downloaded by a Y, it is not a joke. (Title)I read the article "# %", a new anti-Download Method for databases in the XFile in July.

Source: zake This solution solves the problem of website with fields not found by injecting % 90 into the table. We sincerely thank the brothers for their discussion on July 15, February 30! I will give an example of the dynamic article. It contains

The other side, the flowers are not open SQLJStored procedureCan also used to write documents. It can also use the following in this way I am talking aboutSQL> create tablespace kjtest datafile e:websitekj.aspsize 100k nologging ; Table space has

When conducting a security penetration test, we first need to collect as much information as possible for the target application. Therefore, information collection is an essential step for penetration testing. This task can be completed in different

It is often used for * related database operations. Including connection code, SQL commands, and so on, and never deliberately remember them (I don't want to remember this stuff), so they are often usedAnd then go to the books. However, they may not

SELECT/* comment */1SELECT system_user ();SELECT user;SELECT loginame FROM master... sysprocesses WHERE spid = @ SPIDSELECT name, master. dbo. fn_varbintohexstr (password) FROM master .. sysxlogins -- priv, mssql 2000. Need to convert to hex to

By: xhming Homepage calledRequire(PHP168_ PATH."Inc/label. php");Continue to follow up; Label. php If($ Jobs =Show){If(! $ _ COOKIE [Admin]){Showerr ("Ä ¿'");}//» Aímímímímā² µä± Ç ço©Preg_replace (/$ Label [([a-zA-Z0-9 \ _] +)]/eis,"Label_array_hf (

Author: Nobug32 A small problem I encountered in a certain penetration work. The permission setting is very BT and can only be wandering in the current directory. It is conceivable to call mongoshell, the general method will lose the effect, but

Author: [Z. S.T] Xiao Bing In fact, this webmaster only stays on the surface in terms of security, and he appreciates the improvement of 1 in the background. If you modify the management directory, it will block some intruders. Everyone's security

Dark visitor I have been working on the website yesterday. It is a pleasure to turn off the lights at the dormitory from two o'clock P.M. to. One of the technologies used is worth review and research. Below is a simple example: The resin3.0.21

Author: L4nk0r [cn_lgz@126.com]Recently, I helped a computer repair website. The teacher gave me a domain name and I checked server security with curiosity.My website was written in asp. I tried a connection and tested it. I found that simple SQL