Cloud Security

BY happygreenAbout the import table: When an executable file uses code or data from another dll, it is called an input. When the PE file is loaded, One of the work of the Windows loader is to locate all input functions and data and let the

For work reasons, we recently used the Remote Security Assessment System of lumeng. Later we studied and found that the system's anti-cracking function is still very powerful. I tried multiple methods and failed.Now, let's write down two aspects

SHA1 algorithm principle 1 Introduction to SHA1 Algorithms Secure Hash Algorithm (Secure Hash Algorithm) is mainly applicable to Digital Signature Algorithm DSA defined in Digital Signature Standard DSS ). For messages with a length less than 2 ^ 64-

This week, I will continue to share with you Why Java is vulnerable to reverse engineering attacks.Although Java applications can "Write Once, Run Anywhere" (Write Once, Run Anywhere) is a huge advantage, however, the architecture of this

[0x01Background] I went to Hack a few days ago. lu, I have not made any questions because of my busy work. However, I feel that the questions are quite interesting. Although some questions are not difficult, they cover a lot of knowledge points,

Master optimization bans pirated keys from V6.82 Build 5.913It seems that none of the previous registration machines can be registered ~ It seems that the 5.92 perfect edition registration machine that has been used all the time does not work.

Basic compilation of brute-force cracking1. Getting started with cracking... 1. Compile common jump commands:Jump if JZ/JE is equal or zeroJump if JNZ/JNE is not equal or not zeroJL/JLE is less than/less than or equal to the jumpJump if JG/JGE is

Source: ests blogI heard from my friends that the company has a background of anjiao and phantom and has good technical strength. So I went to their forum and foundX-File lockIt looks good. I tried it. Well, it's really good. I cracked it in less

Software name: DlgXRSizerSoftware Version: 4.2.1.2Software size: 1658KBSoftware authorization: Shared SoftwarePlatform: Win95/98/NTPublishing Company: http://web.access.net.au/jag/gajits/Software Introduction: it can be used to open a file, store a

[Article Title]: Analysis of the ImageEn2.26 algorithm of the delphi Control[Author]: 8713007[Software name]: ImageEn2.26[Software size]: 12 M[]: Search and download by yourself[Shelling method]: No shell[Protection method]: serial

Kr is a popular bbs. Only Smecta injection in the background ~ This injection belongs to the injection after order. It can be executed by order by a (select statement. In this case, the select statement in parentheses is only used as a subquery.

Because the webpage form verification is not strict, malicious user information can be submitted. A function in the Website user panel is to change the user email address. This form can be maliciously submitted not to the current user's email

You can reset your password by brute force. You only need to know your mobile phone number, which is a vulnerability, but it is also a vulnerability. In fact, vendors can pay more attention to wooyun. the vulnerabilities of the same function are

I remember using this in an interview, but the interviewer thought it was not feasible. I think it is feasible for users to be caught by X.1. Some XSS: http://m.tuniu.com /? Action = route & id = 329846 & pdate = & todo = index 2. Change the

Is this the case when a VM raises the right "? Most of the reasons are a function of coffee, which allows only specific directories to execute programs, such as (c: \ progra ~ 1 and c: \ windows \ system32 \) execute programs in these directory

First of all, let's briefly introduce the next thing, the Content SEcurity Policy (CSP), which is so popular in XSS. I believe all of our friends have heard of it. In simple terms, CSP is mainly developed to prevent injection attacks. For example,

PHPWind uses a lot of flash files. 1. Vulnerability files: http://www.phpwind.net/res/js/dev/util_libs/jPlayer/Jplayer.swf 2. Check the code after decompiling: this. jQuery = (loaderInfo. parameters. jQuery + "('#") + loaderInfo. parameters. id) + "'

Original: http://www.anying.org/thread-36-1-1.html reprint must indicate the original addressRecently, I have seen many people talking about XSS on the Internet. I used the shadow platform to express my understanding of this part.In fact, many

The primary node uses an instance to describe it again.This article is a summary of the practices of safedog. Every example is based on the experience of safedog.Divided0X01 Injection0X02 upload0X03 Privilege Escalation to provide one-stop services

# Title: vBulletin 5 Beta XX SQLi 0day # keywords: "Powered by vBulletin™Version 5.0.0 Beta "# Author: Orestis Kourides # Official Website: www.vbulletin.com # affected Version: 5.0.0 Beta 11-5.0.0 Beta 28 # Four platforms: Linux #! /Usr/bin/perl