Cloud Security

1. Preface In penetration testing, our primary task is to collect information. Therefore, network fingerprint recognition is an indispensable environment. Next we will introduce several common network identification methods. 2.1 Netcat If we want to

The following uses the LAMP architecture as an example to describe the first step: Use the SQL scan tool to obtain a host with a weak password that opens port 3306 (the default port number of SQL server is 1433) on the Intranet.Step 2: remotely log

When setting a wireless router, a necessary step is to set up wireless encryption (generally set a wireless password). On the security configuration page of the wireless router, we will often see three wireless encryption methods, namely WPA-PAK/WPA2

The Internet is rich and colorful. Basically, we can find the resources we need, because many of our friends have joined the ranks of webmasters. There will also be a fight between many webmasters. In particular, our personal webmaster, due to

Author: Yuyi @ www.anying.org must be notedGoogle Translate does not represent my position ..Looks like someone has done video? In 90sec? I can't remember, but I 'd like to talk about it here, sniffing https dataSystem used: bt5 Upload at the

This method prevents SYN Flooding DoS attacks/proc/sys/net/ipv4/tcp_syncookies, it is implemented by using the three handshakes of tcp data packets SYN. This method is called SYN Flooding. We can enable the kernel SYN Cookie module to prevent

The vulnerability was early, and the internal network is basically unable to perform such a test. Use MDaemon 5.x as the target server.     Directly run the command   Telnet ip port 25 Other email servers can be written in this way, but this

I don't know if you still remember that last year, an organization named TH4CK flipped through many big forums, and people began to speculate on its technology usage, such as 0-day, or dns hijacking, I have also mentioned section C Shenma, and of

We often encounter an Internet IP address and terminal failure when the server is powered on 3389. Today, we can see that a method that is loose is to use a permission escalation tool to execute a vpn batch process, then access the server through

H4ckx7s Blog In the latest discuz! 7.2 comes with a new application plug-in manyou. In this new plug-in, the passed parameters are not checked. When GPC is off, the injection vulnerability is generated.Vulnerability

3. Updates and patches: the application software and database vulnerabilities used by hacker SQL injection attacks can be found on a regular basis. Therefore, frequent system upgrades and patching are critical. 4. Firewall: consider using the

1. ipconfig/all// You can view the current Nic configuration, including the domain name and IP address segment. This command can see: host name --- shwdm, IP--192.168.103.8, Gateway IP---192.168.103.10, DNS domain name resolution address IP---192.168

From vbs small shop s blog + ---------------------------------------------------------------------------- +| Contact Info |+ ---------------------------------------------------------------------------- +Author: VengyModiy: lcxEmail:

I saw an article about exporting the Registry to break the password forever. This is a good news for a lot of hash-grabbing tools that have been killed and won't be killed by myself, in fact, this was a long time ago. It seems that it was proposed

From kwang.cnAuthor: Lan3a First:Admin_Passod.asp under the Administrator directory Select case request. QueryString ("Action ")Case "ModifyPass"SaveNewPassCase elseEnd selectSet rs = server. createobject ("adodb. recordset ")SQL = "select * from

From magic spring blog Vmsplice system calling was introduced for the first time in Linux kernel 2.6.17. Subsequently, it was found that there was a vulnerability that allowed common users to escalate to root permissions. The versions affected by

Affected Versions:SiteServer CMS 3.3.9 Program introduction:SiteServer CMS website content management system is a CMS Content Management system located in the medium and high-end markets, able to build a website platform with complete functions,

Due to the needs of recent projects, I checked the source code of ECShop 2.7.2, which was recently released by the business school. I did not expect to find an obvious and low-level vulnerability when I saw the second file. This vulnerability allows

E107 is a content management system written in php. Bbcode [php] In e107 allows arbitrary PHP code execution. This method is dangerous. The e107 configuration usually prohibits all users from accessing this bbcode. The administrator can activate

From dark visitor Affected Versions:BBSGood 5.0/5.0.2 Program introduction:BBSGOOD is the first Forum in China to use caching technology. BBSGOOD's post and list homepage can generate static HTML files. -----------------------------------------------