Cloud Security

Time: 2012-09-26   [Vulnerability description] When using the CreateProcess function, when the first parameter lpApplicationName is NULL and the second parameter lpCommandLine contains spaces without double quotation marks, the function will be

In the past few attempts to get a honeypot, the hacker's method of hacking into the website is to collect 0-day data. This time I decided to come to a great god. I won't talk about the day. It's about dz. I guess I'm still analyzing it when I write

Currently, most of the Linux file systems are in Ext3 format. Once a file is deleted, it may not be restored, even if it can be recovered. Therefore, executing the rm command becomes abnormal. Therefore, we can write two Shell scripts to safely

0x00 JavaEE Basics JSP: The full name is java server page, which is simply a simplified Servlet. Servlet: Servlet is a server-side Java application that can generate dynamic Web pages. JavaEE: JavaEE is a new J2EE name. The purpose of renaming is

0x00 background The CTO of Bluebox, Jeff Forristal, reported a vulnerability in his official blog called the uncovering android master key, which generally does not tamper with the signature to modify the android code. Link:

The biggest risk of software security is the opaque nature of testing tools and processes, and different testing technologies (such as automated Dynamic Testing) cannot cover the potential possibility of false negative errors. Although the security

After receiving the previous article (How to Protect Your VM proxy Transit server settingsFirst, create a virtual machine named Original. As the Original virtual machine, configure the Virtual Machine and clone other virtual machines. Install the

0x00 background Well, long short asked me to write an article on browser security, so I appeared, please don't speak out, this scum technology. This article draws on Kcon and hitcon PPT.  0x01 Introduction The question about browser security is the

Today, we can see the Response header returned by the server with such information. Server: nginx/1.4.0X-Powered-By: PHP/5.5.1Content-Encoding: gzip: The first shows the webserver used by the server and the version number.Article 2 shows the script

Blackbase Member: Quota n Use a direct query statement to obtain the table name, form, report, module, query, and macro In the ACCESS database.---------------------------------------------------------------------------Query:SELECT MSysObjects. Name

SQL Injection has ushered in another technological breakthrough with unique, novel, and Variant statements. Of course, we must make an article on the odd and special aspects to reach the core! That is the root of SQL injection technology. For a long

About nine months ago, I worked as a security consultant for an ISP. In return, I was able to access the Internet for free. My main job is to check the security vulnerabilities and cracked accounts of the ISP host on the Internet. Their device

Organized from: Security Focus Forum JetkenIn addition, the log shows that the SQL server has suffered DDOS attacks!One solution is to add SQL Injection patches in each asp program. But I still don't feel reliable. Which of the following experts is

1. determine whether there are any injection points; And 1 = 1 and 1 = 22. Generally, the name of a table is admin adminuser user pass password ..And 0 <> (select count (*) from *)And 0 <> (select count (*) from admin) --- determine whether the

By: JsuFcz http://jsufcz.21xcn.net Before writing this article, it is necessary to elaborate on the word "injection. Unlike SQL injection, the injection only constructs HTTP request packets and replaces the WEB Submission page as a program to

Writer: demonalexEmail: demonalex [at] dark2s.org Appendix: the subject of this article is to test the background websites of the popular ASP + ms SQL SERVER.PS: I 've written a lot of bad articles recently and found many errors. Please advise me a

Author: Alpha from: http://www.cnwill.com/ 1. display the echo executed by cmd. When the injection is a sa permission, it is very painful to not see the command display. There is also an attempt to display back in the nbsi of Brother Zhu. Why?

Source: Computer newspaper Before taking the IT Certification Examination, I am used to searching online. After a stroll, I accidentally came to the Chinese site of PROMETRIC. The author found that the entire site is an ASP program. Besides, there

In the previous phase, when attempting to attack a website, we found that the system of the other party has blocked the error message and used the database connected to the ordinary account, the system also has all patches, Which is troublesome for

It's a pity that the technology has not grown so far ...... I suddenly wondered if we could use any method to bypass the restrictions of SQL injection? I checked on the Internet AND found that most of the methods mentioned are aimed at AND "" AND "="