Cloud Security

Nightmare of thousands of PostgreSQL servers Recently, it was revealed that a weak PostgreSQL password was used to implant Trojans in batches. This article will share the tracking process of this event, from attack methods, tools used, to attack

How can I view shared files on the LAN, prohibit file sharing, and protect the security of computer files?Setting up shared files in the LAN facilitates file sharing and transmission, and brings security risks to the network. How can I view shared

How to disable computer ip address modification and restrict lan ip address ModificationIf you modify the IP address at Will on the LAN, it will lead to an IP conflict attack, and also pose some hidden dangers to the network security. How can you

Libpng Heap Buffer Overflow Vulnerability (CVE-2015-8472)Libpng Heap Buffer Overflow Vulnerability (CVE-2015-8472) Release date:Updated on:Affected Systems: libpng libpng 〈 1.0.65libpng libpng 1.6.x 〈 1.6.20libpng libpng 1.5.x 〈 1.5.25libpng libpng 1

Apple fixed a critical iOS vulnerability where hackers could steal cookies from devices (CVE-2016-1730)   Recently, Apple fixed a serious vulnerability in iOS. This vulnerability allows hackers to disguise themselves as end users and obtain the

IOS & OS X platform Vulnerability Analysis Report: CVE-2016-1722 Describe the discovery and verification process of this vulnerability in CVE-2016-1722.Last week, Apple released iOS 9.2.1, the first update of Apple's security performance on iOS

Kill Chain: anonymous console in Kali Linux 2.0 Kill Chain is an anonymous console in the Kali Linux 2.0 system.At the same time, Kill Chain can perform the following attack stages:Reconnaissance (investigation, understanding goals using social

How can I disable sending files instead of receiving emails from my computer, and prohibit Internet mail from using the specified email address?Preventing email leaks has always been a headache for network administrators. There is a relatively

Xss (available in the background) stored in multiple locations in a sub-station of Youku and any posts deleted by common users Four stored xss types are found, two cookie types can be used, one is used as the Administrator, and the other one can

A vulnerability in the Qiqihar Railway (information of 6000 crew members is leaked/All passenger information of the railway is operated/Many apps such as the passenger car APP is replaced) You can see WooYun in a car ~~~ Http: // **.

A weak password in wasu digital has the risk of data leakage (involving more than 420 million user data) A weak password in wasu digital has the risk of data leakage. Recently captured wasu digital TV source accidentally found apk access to this

Dict.cn domain name transfer Vulnerability The domain name transfer vulnerability exists in the sea words. It should have been fixed, but the vulnerability still exists. Nothing can be seen hereLet's continue to look at the subdomain name.I did

RWMC: A Windows credential Extraction Tool Using PowerShell RWMC (Reveal Windows Memory Credentials) is a Windows PowerShell script that extracts Windows creden, by using it and the CDB command line option (Windows debugger). In addition, it can be

Aviation security-the SQL Injection exists in multiple sites of okai Objective: To launch okai official APPSQL Injection exists in the following areas:I. userId in POST, Boolean blind note  POST

Spring Airlines can use shell for multiple sites in a system . Spring and Autumn Airlines Operation Control SystemHttp:/// 218.78.217.83: 7001/Http:/// 180.153.27.8: 7001Http: // 210.51.48.122: 7001All three servers

Aol.com configuration file disclosure Aol.com configuration file disclosure, mysql user password leaked Aol.com configuration file disclosure  http://videosection.video.aol.com/application/configs/application.ini  [Production]PhpSettings.

An SQL injection vulnerability in alimama travel network (with a bypass script) http://dujia.lvmama.com:80/trip/destPaginationOfTrip?currentPage=1&destId=3727,3729,3543&elite=1&categoryCode=category_route_group     import httplibimport

Intranet roaming of Eastern Airlines Intranet roaming of Eastern Airlines Https://mail.ceair.com/owa /#Several weak passwords are cracked.Yhzheng passwordMuyang 1234 qwerWust 123qweThere are also some.    Cause multiple systems to log

Resolve the use and defense of Windows commands by hackers Hello everyone, I'm Shusei Tomonaga. In windows, a large number of commands run silently in the background. However, commands that are really useful to users are only a small part. In

Self-built CDN to defend against DDoS attacks (1): Build a persistent defense line PrefaceIn this article, the case and response experience of DDoS come from the actual scenarios of a customer service system with a high market share, we analyze the