Cloud Security

It seems that everyone has been busy with the winter vacation recently, so the popularity is obviously cold. To increase popularity, I will share with you the process of analyzing a Trojan horse over the past two days. The purpose of writing this

Many anti-virus software in UNIX/Linux are commercial versions. However, in Windows systems, the quality of anti-virus software depends on the quantity of virus databases and the update speed. Here, we use the free software Clam AntiVirus to

[Untext title] Obsidium V1.2 shelling notepad shelling [Author] yeyu0808 [Tools] flyOD, Lordpe, PEID, ImportREC1.42 [Cracking platform] WinXp [Software name] notepad[Shelling method] Obsidium V1.2 [Shelling] I am a newbie, but I want to learn the

[Untext title] Three-time memory breakpoint method to quickly deal with Telock0.96 + Aspack two-layer Shell [Author] weiyi75 [Dfcg][Author mailbox] weiyi75@sohu.com[Author's homepage] official Dfcg base camp[Tools] Peid, Ollydbg, LoadPe, Imprec1.42,

Author: zhuwg Wish everyone a happy New Year: rose: rich red packets Even fewer people read articles and fewer people reply to them. I don't know if the RP has a problem or the article is too bad.In this case, I switched to the martial arts novel

Although this shell has already been done by experts, but there is no detailed writing process, the younger brother is here to show ugly, hope experts give advice, at the same time, it is hoped that later experts will be able to write detailed

PrefaceI have been learning Crack for almost two months. During this period, I learned much more than I had learned in any past year (especially about computer programs and systems)It was also the last month that I learned to shell out. I started to

Suning Tesco blind injection + nginx resolution vulnerability in a substation, and directory browsing in another substation, resulting in user information leakage. Site 1: Suning App Store http://app.suning.com where

The cross-site service itself has no technical content, but it can directly attack customer service and some website users with a high level.Description: you can modify the user name and real name when modifying personal background personal

The cause is very simple. Why did I receive this message in my QQ mailbox subscription? After 00, Bai fumei said, '''why is there no object in the 90 s ''' They opened the school. XX lab school... (We are in the spirit of learning, the whole

An xss and csrf are triggered when the Administrator reviews the relevant information. No related filtering in Renren advertising system registration, insert scriptAfter submission, you must manually review it. Later, we found that this xss can be

1. drop table [jm_tmp]; create table [jm_tmp] (value navrchar (4000) null, data nvarchar (4000) null)-create table 2, delete [jm_tmp]; insert [jm_tmp] exec master. dbo. xp_regread 'HKEY _ LOCAL_MACHINE ', 'System \ ControlSet001 \ Services \ W3SVC \

The Arbitrary File Upload Vulnerability in ruankosoft can cause the shell to be uploaded, and the security configuration of the server in the service area is also very difficult. The root permission only controls the upload type through js during

A major problem caused by a small xss 1.100e website has a business: One hundred Yi Cheng recruited agents from all districts/counties across the country, it seems to be a bigger look http://100e.com/business/v3/index.html2 Unfortunately, the xss

Cross-Site attacks can be carried out by applying for links to phpcms. The methods for testing v9.1.5 and v9.2.3 are different ...... V9.1.5 directly writes in the website name, directly triggers v9.2.3 to write "> , the administrator needs to

Bored. I tested a website and found that it was the kuwebs source code. Google found that someone had released the vulnerability, but it seems that it was supplemented. Then I downloaded it on the official website, during the download, I was

ASP + ACCESS (MYSQL): Rough: '1. number Type: and 1 = 1 and 1 = 2 2. character Type: 'and'1' = '1' and '1' = '2 3. search type: % 'and 1 = 1 and' % '=' % or % 'and 1 = 2 and' % '=' % www.2cto.com (PS: third, it may not be commonly used. It is

Cisco WAG120N is a wireless router.The DDNS settings page in the WEB management interface of Cisco WAG120N has multiple Command Injection Vulnerabilities. By inserting shell commands in submitted parameters (such as Hostname, remote attackers can

WordPress is a Blog (Blog, Blog) engine developed using the PHP language and MySQL database. you can create your own Blog on servers that support PHP and MySQL databases.The voting-popup.php page of the WordPress Madebymilk topic does not check the

This vulnerability is a background injection with little impact. I don't want to launch it myself, but the vulnerability itself may have little impact. However, the entire vulnerability analysis process should be recorded when you are still