Cloud Security

Redhat uses SELinux to enhance security. The closing method is as follows: 1. permanently modify selinux = "" in the/etc/SELINUX/config file to disabled, and then restart. 2. the setenforce 0 method to disable the firewall is as follows: 1.

Some methods in the http://www.la-samhna.de/library/rootkits/detect.html are worth reference, especially the last section To get a list of kernel modules, two standard methods can be used: bash $ lsmod bash $ cat/proc/modules In addition, one

In many cases, anti-virus software can kill our payload. In many cases, we use ENCODE to directly escape the software. However, as more and more people use it, this method is gradually not enough. Some people have said that 0x00 in shellcode is not

[Untext title] Obsidium V1.2 shelling notepad shelling [Author] yeyu0808 [Tools] flyOD, Lordpe, PEID, ImportREC1.42 [Cracking platform] WinXp [Software name] notepad[Shelling method] Obsidium V1.2 [Shelling] I am a newbie, but I want to learn the

On the first page, article center, hacker tool, hacker School, hacker Technology Forum, guest security training, free channel, Alibaba Cloud, latest updates to rising's online anti-virus serviceBaidu simplified traditional Chinese  Set as

This series of articles by BKJIA: Zi Ming In the previous lesson, I learned a lot about shell. Next we will start to talk about how to shell and some tools to use when shelling. The first is Shell check, currently, the popular shell checking tools

Some time ago, I was very interested in the Armadillo shell, So I collected a lot of information and wanted to study it, These articles come from many sites. Thanks: Reading forums, cabbage parks, exploring magazines ...... Recently, we have seen a

Although this shell has already been done by experts, but there is no detailed writing process, the younger brother is here to show ugly, hope experts give advice, at the same time, it is hoped that later experts will be able to write detailed

System: Huawei data Decision Making System address: http: // 221.194.146.18: 8081/WebReport7/ReportServer? Op = fs_load & cmd = fs_signin & _ = 1347302374226 seems to be a general software-finereport report system official website:

Hello everyone, I am a cabbage. Today, my friend sent me a website asking me to raise the right because the boss of his company saw the pheasant of another company.So I will find it for him, or else I will be fired. The premise is that I didn't get

Suning Tesco blind injection + nginx resolution vulnerability in a substation, and directory browsing in another substation, resulting in user information leakage. Site 1: Suning App Store http://app.suning.com where

The cross-site service itself has no technical content, but it can directly attack customer service and some website users with a high level.Description: you can modify the user name and real name when modifying personal background personal

I. IntroductionCSRF (Cross-site Request Forgery), Chinese name: Cross-site Forgery. Attackers can steal your identity and send malicious requests in your name. For example, you can steal your account, send emails as you, and purchase items.Ii.

SQL injection can be said to be a vulnerability or an attack method. This vulnerability may be caused by improper variable processing or insufficient filtering of user-submitted data, the attack principle is to insert the desired SQL statement into

Vulnerability file: plus \ feedback. php. Problematic code: ...If ($ comtype = 'comments '){$ Arctitle = addslashes ($ title );If ($ msg! = ''){// $ The typeid variable is not initialized.$ Inquery = "insert into 'dede _ feedback' ('aid ', 'typeid',

Cross-Site attacks can be carried out by applying for links to phpcms. The methods for testing v9.1.5 and v9.2.3 are different ...... V9.1.5 directly writes in the website name, directly triggers v9.2.3 to write "> , the administrator needs to

The installation program of eliteCMS is not locked after it is installed. As a result, hackers can access the installer address to install it again. Another vulnerability is that the installer can directly write a sentence to admin/Des/config. php

Keywords: cookie encryption oning Summary: In addition to session, it generally does not store overly-important credencookies in cookies on the client. However, e-commerce applications sometimes inevitably store some sensitive data on the client, of

==> [0x01.-Local file sharing] Let's see how many methods can bring these different programs and different actions. This is our pursuit:Open mind.[Code #1]X:>...If (isset ($ _ GET ["mode"]){If ($ _ GET ["mode"] = "edit "){If (isset ($ _ GET ['id']){$

1. Send a private message with the following content: 2. Of course, direct access to private messages is not a problem, but there are two json interfaces related to private messages. The following interface is used to return the number of users