Cloud Security

1. Use root to create a normal user mary and switch to mary. 2. Test the permissions of the current user. 3. Go to/tmp and create the directory abc. 4. Execute the following commands. Make sure that the two red parts after the last line are

1. IntroductionOpenSSL is a powerful encryption toolkit. Many of us are already using OpenSSL to create RSA private keys or Certificate Signing requests (CSR ). However, do you know that OpenSSL can be used to test the computer speed? Or can I use

You can view this information at http://www.bkjia.com/article/201205/132847.html.Json hijacking due to improper data processing of some resource containers. because ie supports vbscript, the script element can be specified as the vbscript language:

A few days ago, in order to use idle VPS, a movie station was built with GXCMS, and then swept down to the 360 Website Security Detection area, the system prompts that the XSS vulnerability exists. After checking the vulnerability, the vulnerability

Recently, php-ddos flood, many web hosting service providers worry that their websites are implanted with php-ddos due to website permissions or vulnerabilities, and a large number of data packets are sent externally, this will cause unnecessary

Test the vulnerability program vul. c # include # include void func (char * str) {char buf [8]; strcpy (buf, str); printf ("% s \ r \ n", buf );} int main (int argc, char * argv []) {if (argc> 1) func (argv [1]); return 0 ;}with the suid bit, the

I haven't written anything for a long time, mainly because it's so busy recently that an idiot uses webbench to attack the company's server every day. as the saying goes, I have been ill for a long time. Today, my Mongolian doctor will share the

[Introduction] some small companies make it easy to remember and use images. servers use the root password with fixed combination rules (developers/O & M personnel are lazy) and sshd: 22 is available on the Internet. For example, if we know that the

http://soroush.secproject.com/blog/2013/04/microsoft-xmldom-in-ie-can-divulge-information-of-local-drivenetwork-in-error-messages/ Another ws method, the person who knows the goods naturally :) It is a bit of a problem to judge the poc in the file,

1. Linux SSH Security Policy 1: Shut down the majority of hosts attacked on the unrelated port network, which are targeted by hackers who use scanning tools for a wide range of scanning. Therefore, in order to avoid being scanned, all ports, such as

Many people say that Windows 7 cannot catch hash. Google, the first one is my red League bbs: Open and take a look: I was scared by the reply from A11 .. Http://bbs.cnhonker.com/forum.php? Mod = redirect & goto = findpost & ptid = 6463 &

Zabbix has been recognized by major Internet companies in recent years. Its powerful functions have been favored by O & M engineers. The company also uses zabbix to monitor its attributes. I have to say that zabbix not only has powerful monitoring

There should be a lot of articles on this topic on the Internet. I recently installed win8 for fun. If I forget my computer password, how can I enter the system? Of course, there are a lot of jobs, what I want to talk about is to manually enter the

It is difficult to complete the SSL data interaction process. When inode is installed, the client has all the certificates and keys required for the authentication process, so they must be constructed. The version of the program to be analyzed is

Core Summary: The user used by the php-fpm sub-process cannot be the website file owner. Any violation of this principle does not comply with the minimum permission principle. According to continuous feedback in the production environment, php

VBScript (Microsoft Visual Basic Script Editon), Microsoft's Visual BASIC Script version). As literally disclosed, VBS (further abbreviated as VBScript) is a Visual Basic-Based Script Language.Lcx shares how to use vbs to execute shellcode. It is

SQL Server is a sensitive information library for organizations. Managers must ensure that only authorized users can access this sensitive information. However, it is not easy for SQL Server to be configured securely without generating errors. As a

Some time ago, mimikatz Hot transfer was mainly due to the ability to directly extract the plaintext password of the current login user. In fact, there is a more powerful artifact that does not require so many command operations. One command can be

In this scenario, a user first visits your website and logs on to it. However, the user logs on again the next day. So there is a feature like "remember me" to make it easier for users to use. However, there is something self-evident, that is, the

Qvod's fast game box does not severely control the buffer boundary, resulting in Denial of Service. It feels like it should be able to execute code remotely, just because people accidentally control the eip (0x41414141 ), there is no time to play.