Cloud Security

Reverse trip to the Android APP of the anonymous social APP Yik Yak This article mainly performs Reverse Analysis on the anonymous social media application Yik Yak on the Android platform. During the analysis, it is found that the APP uses code

How to Use snapshots to reinforce security and strengthen Privacy Protection I haven't talked about technical topics for two consecutive months. Today I will post an article about the use of the "snapshot function" and fill in the "Literacy Virtual

How to Use the netcat [nc] command to scan ports in Linux and Unix How can I find out which ports are open on my server? How can I use the nc command for port scanning to replace the nmap command in Linux or Unix? Nmap ("Network Mapper") is an

Light stop parking skipped payment completed order and refund to account (Brush parking fee) Light stop parking, due to business logic design defects, you can directly skip the payment steps to complete the parking space booking, at the same time,

SearchBlox DoS Vulnerability (CVE-2015-7919) Affected Systems: SearchBlox 8.3Description: CVE (CAN) ID: CVE-2015-7919 SearchBlox is a Web-based Attribute search engine. SearchBlox 8.3-8.3.1 has the file leakage vulnerability, removing

Linux intrusion detection Basics In linux, there are five commands for auditing:Last: This command can be used to check the Successful Logon, shutdown, and restart of our system. This command is used to format the/var/log/wtmp file.Lastb: this

Mining and defense of SQL Injection Vulnerabilities in DVWA Series 6 Next we will look at the high-level SQL Injection source code.In addition to the previous mysql_real_escape_string () function, a stripslashes () function is added to it. This

Netease subsite SQL Injection Vulnerability SQL injection vulnerability in a website on Netease Http://op.campus.163.com/adm/selectcate.do? Flags = 1, 2The above link has the SQL injection vulnerability to obtain database data.  $ ./sqlmap.py -u

Weak Password in Shanghai Volkswagen mail + svn + xss The access is too slow and it hurts .. No. No verification, can be cracked. Employees have insufficient security awareness and weak passwords. Example:  Returns 482 characters in

Discussion on PHP-based Automatic Webshell Detection For network maintenance personnel, I am afraid the biggest headache is that the website is hacked, and a backdoor is left, and even the server is Elevation of Privilege. Hacker usually leaves a

Media services on meizu mobile phones can produce SQL Injection Media services on meizu mobile phones can generate SQL injection. When the file name is enclosed in quotation marks, the Media Service may have the risk of SQL injection. The direct

Some information of the customer's call center system is leaked due to improper configuration of the piglet short-term rental service. RT pig Customer Service Call CenterScan for a svn leak Http: // 114.112.92.106/. svn/entries Call Center

The execution of Getshell on a certain Beijing mobile site involves millions of users. The previous vulnerability administrator never gave it, so sad... @ haotian @ Ah L Chuan The problem is as follows:Beijing mobile app has the Struts2

Sina Weibo design defects can enter the payment background How much does it cost? Buy, buy, and send Http://admin.pay.weibo.com/admin/index.php Important background is on the internet...Login defects 1: on the InternetLogin defects 2: no

Rips Scanners (0.5) exposed local File Inclusion Vulnerability RIPS is a source code analysis tool written in php. It uses static analysis technology to automatically discover potential security vulnerabilities in PHP source code. Penetration

Webshell Security Detection (4)-traffic-based Webshell analysis example1. Typical operations After a full introduction to the previous articles, I think everyone has some knowledge about how to detect webshells. Today we will discuss how to detect

Insurance security-Anhua insurance's JAVA deserialization vulnerability on an important website can penetrate multiple systems Anwar Insurance Http: // 221.8.57.106: 7006/Http: // 221.8.57.106: 7009/Weblogic deserialization VulnerabilityReverse

SQL Injection/unauthorized access/xss (demo successful) in p2p online lending system) Only one home page is required.There are still safe dogs. But it is useless. Inject 1 (test failed)See the code core \ deayou. core. php 65-86.  elseif ($_G['query_

91 information leakage caused by weak passwords in the background of the agricultural personnel management system Target :**.**.**.** Password: Administrator/123456Employee information available Make a dictionary of the emails and crack the email

Arbitrary login administrator vulnerability in xiaokaxiu, which has more than 0.5 billion million videos per day Arbitrary login administrator vulnerability in xiaokaxiu, a popular social network The daily video broadcast volume exceeds 0.5