Cloud Security

[Java] view plaincopyprint? /*** CentOS-6.4-minimal version of the configuration Network _ firewall _ User Group _ JDK * installed * [installation] * Virtual Machine download: https://www.virtualbox.org/wiki/Downloads * Image address: http://mirrors.

#! /Bin/bash # Clear the firewall iptables-Fiptables-X # disable the INPUT and FPRWARD chains, allow OUTPUT chain iptables-p input DROPiptables-p output ACCEPTiptables-p forward accept # enable 22 ssh port iptables-a input-p tcp -- dport 22-j ACCEPT

Guidance: CSF is currently the best free firewall in Linux. Although the Linux system itself is relatively secure, as a server provided to users, we should try not to streaking. I have heard of this software before, but I thought it was very

Objective: To add NOTEPAD. EXE with ACProtect 1.22b pro, select Opetion1 in Compress Opetions, select all six options for Advanced Opetions, and select 49.7 KB before shelling and 143 KB after shelling. Tool: OllyDbg Beta110b original version;

Because PECompact has two shelling methods, I also read DiKeN's "PECompact's OEP simple search method", so I want to study it in depth. This is the result of 98 notepad.exe's PECompact (JCALG1) compression. 0040AB20> EB 06 jmp short NOTEPAD.0040AB28

 1. To get all the functions of the gray pigeon and dig out its vulnerabilities, the pigeon should be shelled. Use ASPackdie to shell him (because it is a shell added with ASPack). This software is very easy to find and can be found on some hacker

Http://sq.gamebean.com/newscont.php? Id = 92 the SQL injection vulnerability exists. You can use a tool to inject it directly.        After the background is http://sq.gamebean.com/admin/ will not say. Www.2cto.com There is also a fckeditor

During the Blog last night, I studied the Z-Blog program, and my teacher also gave me a patch. I tried it and it was useless. I don't know if it was, First, the patch my instructor mentioned is include. the above code of the asp file is added: If

0x1 explosive pathHttp://demo.shopex.com.cn/485/index.php? GOo   Amount ~ This indicates it is useless to me. 0x2 injectionHttp://demo.shopex.com.cn/485? Member-120120822173108 '/**/and/**/ExtractValue (0x64, concat (0x01, (select/**/@ version ))) /*

Jsprun is developed using struts to analyze code for several daysI found that the two function-type DOS should be sent to the official website first, because it is quite serious.If you send a request, the website will die. The official website

Unexpectedly, this station can run out of so many data tables,A lot of dataSensitive information, such as mysql, has serious problems.Detailed Description: problematic url: Http://nba.sina.com.tw/cgi-bin/player/main.cgi? Id = 357Havij: Host IP: 210.1

You only need to enter an EMAIL address to retrieve the password.First, we should find a target in the forum. Well, it's him, ID1, and modern people who are outdated. We entered the outdated modern people in the pass retrieval password field and

First of all, this should not be a loophole. It is more appropriate to say that he is a BUG. Let's take a look. Because it is quite useful to use it, you must obtain the AUTH_KEY and AUTH_COOKIE_NAME values of the program before it can be used.

However, injection requires a small number of conditions...Two injections: one is blind, and one can execute some query commands. Injection Site 1:Http://sme.sina.com.hk/cgi-bin/nw/main.cgi? Cat= 7806Ip: 218.213.85.141 Injection Site

The most common vulnerability in CGI is caused by unverified user input parameters. CGI scripts generally obtain user request Information from URL, form, or Path Information. Web application developers tend to think that users will input data in the

SQLMap is called an injection artifact. N is A powerful tool that uses SQLmap for injection testing. I will also use SQLMAP to install A * C for A long time, however, cookie injection is rarely used. It is troublesome to use the injection transit

We use examples to illustrate the manual injection of PHP websites. I personally feel that graphic tutorials are more intuitive than videos, but the example websites are more practical. Tools used: google snoopUse statement: site: heib0y.com inurl:

First, I would like to explain that some of the bypass methods are not original. Here I just want to make a brief analysis and explain them. In addition, I will also take measures on the Internet to bypass anti-injection measures. The general

ProMonkey is a WEB-based lightweight personal assistance system for programmers. In the latest version 1.12, the logon logic is incorrect, so you can directly enter the background without a password.When logging on, you only need to verify whether

Weibo only verifies images uploaded at the front end, and does not perform security filtering on the server side. \ Api \ StatusesApi. class. php function uploadpic () {if ($ _ FILES ['pic ']) {// execute the upload operation $ savePath = $ this-> _