Cloud Security

Let's review the knowledge with everyone when the website doesn't move. Because today we see that the 360 firewall also has a dedicated engine system, which is highly inspiring, therefore, we need to integrate the highly inspiring knowledge in

1. BackgroundOn July 6, September 22, 2013, we detected a mobile phone malware that was sent via SMS. The SMS contains a URL link. After you click it, that is, the user automatically sends a group of text messages to the contacts in the mobile phone

This series of articles by BKJIA: Zi Ming In the previous lesson, I learned a lot about shell. Next we will start to talk about how to shell and some tools to use when shelling. The first is Shell check, currently, the popular shell checking tools

Operating System: WIN2KTools: OLLYDBG1.1, ImportREC, LordPE: Http://www.ultraprotect.com/acpr_pro.exeTarget Program: ACProtect 1.21 professional moderator program. Shelling Process:1. Find the Stolen code deformation and its pseudo OEP.After loading

Target software: Wealth-Lab Developer 2.0.Target file: WealthLab.exeShelling method: Armadillo 1.8x-2.xTool used: WinDbg or trw2000, peditor, WinHex 10.2 SR-2, m $ win32 sdk documentationURL:

Password interruptionHmemcpy (for win9x)GetDlgItemTextAGetDlgItemIntVb:Getvolumeinformationa Vbastrcomp (trw)Bpx _ vbaStrComp (remember two _)MSVBVM60! _ Vbastrcomp | soficeMSVBVM50! | V3164str Ctrl + DBpx msvbvm60! _ Vbastrcomp do "d * (esp + 0c)" (

Overview For the purpose of compressing program resources and registering and protecting program resources, the shell can be divided into two types: Compressed shell and encrypted shell.Upx aspcak telock pelite nspack...Armadillo asprotect acprotect

Applicable to: cracking enthusiastsPrerequisites: NoneSecret family taboosText/figure RoBa There are more and more shared software, and the conflict between Software Encryption and cracking is becoming increasingly fierce. After all, writing a

Target: http://www.goodbaby.com/huaiyun/mamashow_single.php? Id = 13Host IP: 202.108.251.195Web Server: nginx/1.0.6DB Server: MySQLCurrent DB: cmsData Bases: information_schemaAclocalBinlogsCmsExpertManageMysqlPhpcmsSubjectTest  Solution:We still

1. exposes the full-site database structure, a large amount of user information, some of which are available, and the background. 2. Part of the password is 13-bit encryption method, which God introduced, this is what zhWbYQXH. Vxyo wxaHMlLlnYPv.

0x01Cutting-edge MetInfo enterprise website management system: adopts the PHP + Mysql architecture and built-in SEO search engine optimization mechanism. It supports user-defined interface languages (various languages around the world ), has common

The latest PHP version has been updated to 5.4.x, but the Chinese mainland is still in the replacement phase of 5.2.x and 5.3.x. Php with the vulnerability exists in version 5.3.x. The test method is as follows: cmd/c x: \ php \ php.exe x: \ test.

Create function id () RETURNS text AS $ aaa $ open (FD, chr (108 ). chr (1, 105 ). chr (32 ). chr (124); return join (chr (0), ); $ aaa $ LANGUAGE plperlu; select id (); id () is the name of the created function, you can customize chr (108 ). chr (10

The installation program of eliteCMS is not locked after it is installed. As a result, hackers can access the installer address to install it again. Another vulnerability is that the installer can directly write a sentence to admin/Des/config. php

The SQL statement is as follows: DECLARE @ variable NVARCHAR (100) DECLARE @ SQLString NVARCHAR (1024) DECLARE @ ParmDefinition NVARCHAR (500) SET @ SQLString = n' SELECT OEV. name, OEV. position, Base_Employee.Address, OEV. telephone, OEV.

The SQL injection event is already the most troublesome attack method in the last century. The HTML injection vulnerability has emerged in the 21st century. With the rapid development of the web, the XSS vulnerability cannot be ignored, A Brief

Code reading in bed: phpcms [0x01]Line 57 in phpcms/modules/formguide/index. php. $ Formguide_input = new formguide_input ($ formid); $ data = $ formguide_input-> get ($ _ POST ['info']); a class, formguide_input, is called here, then the get

==> [0x01.-Local file sharing] Let's see how many methods can bring these different programs and different actions. This is our pursuit:Open mind.[Code #1]X:>...If (isset ($ _ GET ["mode"]){If ($ _ GET ["mode"] = "edit "){If (isset ($ _ GET ['id']){$

File Location apps \ weibo \ Lib \ Action \ OperateAction. class. php // Delete Comment function docomments () {$ result = D ('comment')-> deleteComments ($ _ POST ['id'], $ this-> mid ); X ('credentials')-> setUserCredit ($ info ['uid'], 'delete _

During this period of time, I have been studying SQL injection and several scripts, and I feel that I have gained a lot from reading the dynamic discovery of the Forum over the past few days.Let's talk about a public permission injection problem in