Cloud Security

Android Hacking Part 7: Attacking WebView This series has introduced a variety of methods to identify and attack Android Application vulnerabilities. In the previous issue, we introduced Android app debugging. In this issue, we will take a look at

Built-in browser cross-origin Scripting Vulnerability The built-in browser cross-origin Script Execution Vulnerability imposes no strict restrictions on the script execution, resulting in cross-origin script execution being tested using Android 4.0.3

Your bank card and my money-a preliminary study on POS machine Security 【Preface]   In modern society, Card swiping is no longer popular, so Point Of sale System (POS) is widely used and can be seen in malls, restaurants, hotels, hospitals, and

Credential stuffing and social engineering lead to permission acquisition on a mobile game server By credential stuffing, attackers can obtain the Administrator's email address. After collecting the information, the social worker successfully grants

In-depth detection of attack surface of the door control system I. Introduction In recent years, many enterprises have begun to use computer-based door control systems for security considerations: users are required to have a central database

Inspur released its first trusted server to fill the gaps in the cloud security field At 2014 China Internet Security Conference, inspur released the industry's first trusted server for cloud data centers. This release means that inspur's host

Analysis of New SQL Injection Detection Methods1. Open the address and we can see that it is a normal page. 2. Add-1 to the address and change it: http://site/news.asp?id=123 -1. If the returned page is different from the previous page and is

Error in dog customization and cropping logic, leading to csrf pants Removal The system interaction degree of csrf trousers caused by a custom cropping logic error of the dog is relatively large. View the Code directly:  db.mod.php:(576-620)：$f =

Summary of PHP file inclusion Vulnerabilities0x00 preface the PHP file inclusion vulnerability is caused by the fact that when a file is introduced through a PHP function, the file name passed in has not been properly verified, thus operating the

SQL Injection in ThinkSNS ThinkSNS is the first vulnerability in the series. improper handling of some vulnerabilities leads to SQL injection. Vulnerabilities are found in Comment widgets:  \ Addons \ widget \ CommentWidget. class. php: 138/*** Add

MSSQL blind note (python script included) of another intel Substation) A verification script was written for MSSQL blind injection in another intel substation. Injection point:  POST

General POST injection vulnerability in a system General POST injection vulnerability in a system   Official case test: http://www.suyaxing.com: 81/ws2004/Model/login. aspPOST: PW = 88952634 & SysUser = 0 & UN = 88952634 parameter: UN can also

Blind injection of mop sub-station MySQL (with python script) Mop sub-station MySQL blind Injection Injection point:  POST http://51auto.mop.com/hclist_/Family=aaa'+(select(0)from(select(sleep(10)))v)+'bbb&file1=1&happyUserId=- The Family parameter

How can I easily reset any user password of Wanda again?   The main site is the same as the mobile site.Http://m.wanhui.cn/index-w1000292/Retrieve PasswordHttps://passport.wanhui.cn/m/account/forgetpassword/step1? Redirect = http % 3A % 2F %

Select 10 features that should be paid attention to in the Web application scan Solution The Web application scanner communicates with Web applications through the Web Front-end. It can automatically check Web applications, detect and analyze their

How to build a reliable WAF Previously I wrote a WAF Defense Capability Evaluation and tool, which is taken into consideration from the perspective of security O & M personnel choosing WAF products (prior to the test is considered as an

Password Reset Vulnerability for any user on qihong Network Qihong net is an official website of the Securities Market weekly market journal. Founded in 1992, qihong net is China's first-class financial information provider and a leading financial

SQL Injection exists in the web Console of a ZTE Product ZXV10 MS90 video conferencing Management System, which provides unified video conferencing business and equipment management solutions, integrates user management, conference management,

Introduction to Internet security protection for e-commerce websitesSecurity Protection for e-commerce websites and the Internet is very important, especially when it comes to payment. This article summarizes some common web security defense

A cms system injection and solution of Huawei Voice online The CMS system has a system injection vulnerability. You can use this vulnerability to export data from the H3C forum. Http://cms.voc.com.cn/voccgi/app/mobile/bbsapi/wxhn_login.phpThis file