Cloud Security

Analysis of Domain environment penetration by Mimikatz0 × 00 Preface   Attack and Defense are two permanent topics in information security. In Intranet security management, how to improve the level of security protection, even people who have just

LibTIFF NeXTDecode Denial of Service Vulnerability (CVE-2015-1547)LibTIFF NeXTDecode Denial of Service Vulnerability (CVE-2015-1547) Release date:Updated on:Affected Systems: LibTIFF Description: CVE (CAN) ID: CVE-2015-1547LibTIFF is a library

Libxml2 dict. c Denial of Service Vulnerability (CVE-2015-8806)Libxml2 dict. c Denial of Service Vulnerability (CVE-2015-8806) Release date:Updated on:Affected Systems: Libxml libxml2 Description: Bugtraq id: 82071CVE (CAN) ID:

Apache Ranger JavaScript code injection vulnerability (CVE-2015-0265)Apache Ranger JavaScript code injection vulnerability (CVE-2015-0265) Release date:Updated on:Affected Systems: Apache Group Ranger 0.5.x Description: Bugtraq id: 76208CVE

QEMU 'FW _ cmd_write () 'function Remote Code Execution Vulnerability (CVE-2016-1714)QEMU 'FW _ cmd_write () 'function Remote Code Execution Vulnerability (CVE-2016-1714) Release date:Updated on:Affected Systems: QEMU Description: Bugtraq id:

QEMU DoS Vulnerabilities (CVE-2016-2858)QEMU DoS Vulnerabilities (CVE-2016-2858) Release date:Updated on:Affected Systems: QEMU Description: CVE (CAN) ID: CVE-2016-2858QEMU is an open source simulator software.If Qemu supports the PRNG backend,

Privilege Escalation Analysis for Android system vulnerabilities (1) Preface 1.1 What is rootRoot -- that is, the Elevation of Privilege of the system mentioned here. It is usually used for Android mobile phones, so that users can obtain the

VMware vRealize Business cross-site scripting (CVE-2016-2075)VMware vRealize Business cross-site scripting (CVE-2016-2075) Release date:Updated on:Affected Systems: VMWare vRealize Business Advanced 8.x Description: CVE (CAN) ID: CVE-2016-2075

Apple iOS Kernel Race Condition Vulnerability (CVE-2016-1757)Apple iOS Kernel Race Condition Vulnerability (CVE-2016-1757) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2016-1757IOS is an operating system

ABB Panel Builder 800 DLL hijacking Vulnerability (CVE-2016-2281)ABB Panel Builder 800 DLL hijacking Vulnerability (CVE-2016-2281) Release date:Updated on:Affected Systems: ABB Panel Builder 800 5.1 Description: CVE (CAN) ID:

Use ten lines of code to bypass anti-virus software for kill-free Process Analysis I originally intended to write a lengthy blog about bypass technologies for different anti-virus software, but when I started writing the first chapter of the

PETYA ransomware: encrypts the entire hard disk and locks the user's computer Recently, security experts have discovered a new type of ransomware, Petya, which can cause a computer blue screen crash (BSoD) and before the operating system is loaded,

TDE encryption and Cracking Analysis of Microsoft SQL Server transparent data (II)General Data Encryption Everyone thinks that encryption is a good thing, but it does not take into account specific attack scenarios. This idea has become a trend, but

SQL injection vulnerability in an interface of Sina leju SQL injection vulnerability in an interface of Sina leju Url:Http://tj.newsesf.leju.com: 80/im_ajax.php? Action = get_agentinfo_byuid & t = 1460826734181 & uid = 8156628Payload injection

In the process of entering a bad station, do not enter 1. Information CollectionThe page is html, and the content url is http://www.xxoo.com/html/news/notes/pages/2013/12/24/81.html, which should be generated for a dynamic pageDetermine from the

Shanghai citizen cloud app SQL Injection SQL Injection at a certain place in the Shanghai citizen cloud APP.Open the APP and a link is found during packet capture http://218.78.214.24:8080/live/service/top/hasNewOrgan?code=310112110&username=eshimin3

Dongle SQL Injection rules Bypass 1: This test is only applicableUnion select for Research and Testing2: id = 1 union select 1, 2, 3The contents of fuzz were as follows:8e0, \ N, 0.03: The test id = 1 8e0union select 1, 2, 3 is blocked.4: therefore,

Another SQL injection in the vivo App Store (where to fall and where to climb) ---Parameter: an (POST) Type: AND/OR time-based blind Title: MySQL >= 5.0.12 AND time-based blind (SELECT) Payload: nt=WIFI&model=vivo

Weaver collaborative commerce system e-cology SQL injection (with verification transfer script) Find one.Http: // **. **/services/MobileService? For exampleUse wvsCheckUserLogin MethodThe three parameters are numeric, numeric, and numeric. 3 is

Nmap memo form: Part 1 from discovery to vulnerability utilization analysis     During the investigation, the initial phase of information collection is scanning.What is investigation? Investigation is to collect as much information as possible on