Cloud Security

I. Preparing for the rain-taking preventive measures1. One is good, two wonderfulAnti-virus software and network firewall are required for cainiao and birds. The software runs immediately before or after the machine is connected to the Internet. It

Source: Western Network When you use anti-virus software to scan and kill viruses, you will often find some viruses on your computer. They all have a long string of names, such as Worm. padobot. u, Backdoor. RBot. abc, etc. What does it mean? In

Firewall has become a key part of enterprise network construction. However, many users think that there are already routers in the network and some simple packet filtering functions can be implemented. So why should we use firewalls? The following

Today, computer users have spent a lot of energy dealing with viruses. When you use anti-virus software to scan and kill viruses, are you aware of the virus, but you cannot kill it? Why? What should we do? I will give a brief introduction to this.  

Www.2cto.com: it is not a new article, but it is not in the station. It is sent for your reference. First, this hole has been in existence for a long time. It should have been in July, but there are not many people to fill. So the harm is still

// PHP full-site anti-injection program, which must be included in the public file require_once// Determine the magic_quotes_gpc statusIf (@ get_magic_quotes_gpc ()){$ _ GET = sec ($ _ GET );$ _ POST = sec ($ _ POST );$ _ COOKIE = sec ($ _ COOKIE );$

1. the real name of personal information exists in the stored xss2. The name of the receiver of the shipping address and the street address have stored xss, but the length limit is imposed on the server. A little effort3. There is also a zip code, a

When it comes to injection, you may think of tools such as ah d and Ming Kido. Sometimes you can use these tools to easily scan the injection points and guess the account password, however, you may not fully master the principles.Nowadays, more and

Backup with low Msql permissions drag the entire databaseFirst, run the backup statement backup database to disk = 'path' below the SQL statement ':Run successfully: Find OK. bak in the backup directory, and then take an important step to restore

The sky classroom has an excellent course system, which is a system used by instructors to make multimedia courseware.More than N universities in China are in use...1. SQL Injection exists in the excellent course system. You can directly obtain the

Malicious injection of code into databases is a critical issue. The main methods include: using program vulnerabilities, you can use a program to test them, it is mainly reflected that illegal characters are not filtered in some forms submitted by

Scripts. Http://bookman.sinaapp.com/doover.php"Detailed description:I checked the source code of the link and submitted it through the Renren shopping interface.The interface address is http://j.ren.com/publisher/status. you only need to post a

We all know that common XSS vulnerabilities are implemented by passing in in parameters, and such XSS can be easily handled by htmlspecialchars in php. Today we will talk about XSS compared to cattle, is through the UTF7-BOM to complete the

Read the backdoor tips with me: Pick, modify, hide, and hide the example first. Example 1: You are recognized only when you have a glance in the directory. Why are you so outstanding?     Suspicious: file name, time, and size. (Experienced people

For example, in JQuery $ ("# Id") indicates selecting CSS Elements$ ("") indicates creating image elementsThis is a normal function.However, in the vulnerability version$ ("# ") can also create elements Therefore, you can create an element by

No token in the background !!! Therefore, make an automatic submission form, load it into a hidden framework, and access it to the Administrator. The administrator will be lucky !!! POC: indicates that wooyun destroys your Ecshop Csrf and obtains

System address: http://evs.haier.net/easp/uiloader/login.htmlhaier. When logging on to the electronic sales system, use single quotes to log on, and an error is reported. It would be easy to use a general post injection. But I was so silly and naive

Bypass the mobile client interface can not directly request the policy first, the client data packet capture, get interface http://mobile.womai.com/wmapi/loginpassword=123456&username=wooyun6 direct hackbar access, no data but through the black box

Kingdee network improper design can modify any user password problems appear in the password retrieval address: http://id.kingdee.com/password/forgot.action mobile phone retrieval password, because of the mobile phone verification code is not strict,