Cloud Security

In the company's Lan, you often need to share some folders for others to access. However, once a folder is shared, all computers in the LAN can see the shared folder in the network neighbors. Sometimes we only want some users who need to access this

Author: aweige from: Red Army of Chinese hackers My friend made a game equipment transaction website and asked me to test whether the server has vulnerabilities or the program itself has vulnerabilities, because the servers and programs are provided

In most cases, hackers must upload Trojans or backdoors to the remote system to intrude into the remote system. To prevent such attacks, you must think of one thing: how can we cut off the hacker's path? In fact, the disk quota function in the NTFS

The following describes how to detect hacker intrusion when there is no intrusion detection system. Hacker intrusion features generally come from the following four aspects. If a hacker intrude into the system, you can find the intrusion traces in

An attacker sends a POST request to the ASP page. the post request contains more than 40000 Request Parameters and uses x-www-form-urlencoded encoding when sending the request. Attackers exploit this vulnerability to cause the IIS auxiliary process

Affected Versions:Mozilla Firefox 3.6.xMozilla Firefox 3.5.xMozilla Thunderbird 3.1.xMozilla Thunderbird 3.0.xMozilla SeaMonkey Vulnerability description:If the webpage opens a new window and uses javascript: URL to execute the modal call, such as

Vulnerability description: Oracle is a large commercial database system. The Change Data Capture Component of the Oracle database provides a DBMS_CDC_PUBLISH PL/SQL software package. The CREATE_CHANGE_SET process of this software package has the

Subaozi Recently someone blew up a localroot exp http://www.bkjia.com/Article/201011/78200.html, cve-2010-3847 for linux glic. Some time ago, some hackers repeatedly complained to me, saying that I had a great impact on their rice bowl when I fixed

C: mysqldatamysqluser. MYD // store the database connection password in the mysql. user tableC: Program FilesRhinoSoft. comServ-UServUDaemon.ini // stores the VM website path and passwordC: Program FilesServ-UServUDaemon.iniC: windowsmy. ini //

WMITOOLS provided by Microsoft has a remote code execution vulnerability. Attackers can directly control a call address and let the program directly go to the shellcode we have configured in the memory. Official Address:Aspx? FamilyID = 6430f853-1120

Yuan Ge Due to the length calculation error in GetName, You can overwrite (0x3f + 1)/2 + 1 = 0x21 bytes to the buffer with the length limit of 0x101, resulting in buffer overflow. However, because of the buffer problem of calling the GetName code,

If you can use the navicat tool to connect to MySQL, It is very convenient to view User Permissions and modify user permissions. However, in many cases, MySQL only allows access from localhost. In this case, you can only use commands. Previously,

Blog from edevil Directory I. The Penetration Process of this target is 1.1 process, 1.2 inception, and 1.3 penetration. 2. For system problems and solutions found during the test, see 2.1 Access Control. 2.2 security management and practices. 2.3

Text/Western Mail hunter(Wang Cong)Some time ago, the school had to install a proxy server for each lab. So I found the school network center and practiced it in the real environment. On the proxy server of the school, squid is used for Web Proxy,

5. Threat modeling process Ø system internal subsystem analysis: system analysis needs to be segmented step by step. Different subsystems within the system may have different permission mechanisms, and the specific subsystems accessed by users may

Affected Version: Vsftpd 2.3.2 Vsftpd 2.3 vulnerability description:Vsftpd is short for Very Secure FTP daemon and is a Secure FTP server on UNIX platforms. Vsftpd has a remote denial-of-service vulnerability when processing ls. c. A remote attacker

QEver I have long wanted to analyze the legendary elders vulnerabilities, but I have never had time to analyze all kinds of things due to school start. I have spent the past two days analyzing the vulnerabilities, I was planning to study the use of

Terminal:Step 1: Tasklist/SVC lists all processes, system services, and their corresponding PID values!The service name of the terminal is TermService.Step 2: run the netstat-ano command to list the PID values of all ports!Find the port

In the programming of SOCKET server applications in WINDOWS, the following statements may be compared:S = socket (AF_INET, SOCK_STREAM, IPPROTO_TCP );Saddr. sin_family = AF_INET;Saddr. sin_addr.s_addr = htonl (INADDR_ANY );Bind (s, (SOCKADDR *) &

The Apache server is there and unix/linux is there, which is enough to show the excellent performance and market share of Apache in the WEB Server field.In today's Internet environment, web services have become an essential business for companies.