Cloud Security

Data Hiding Technology 0x00 Preface Data Hiding has penetrated into all aspects of life, and has always been very interested in data hiding. However, there are few articles on data hiding on wooyun. After reading the summary of implicit writing, I

BypassUAC: A Windows UAC bypass Tool     BypassUAC BypassUAC is a tool that uses the built-in AutoElevate backdoor in Windows to break Windows User Account Control (UAC) mechanism. System environment requirements 1. x86-32/x64 Windows 7/8/8.1/10

The vro prohibits web version logon, computer logon, and LAN chat.Currently, refreshing the circle of friends is common for office workers. In particular, many office workers are still logging on to the web edition on their computers, making it

Dell VPN Client netex1_0day Analysis   VPN Client is a tool used by most IT security experts. IT can be used to connect to a "restricted" LAN for anonymous Internet access and network traffic security. But imagine if the VPN Client can improve the

N backdoors in Linux Preface During penetration testing, we often encounter various types of Linux system hosts. Today, we will make a summary and discussion about the several backdoors in linux. Pose 1. PAM Backdoor Overview: PAM (Pluggable

Nightmare of thousands of PostgreSQL servers Recently, it was revealed that a weak PostgreSQL password was used to implant Trojans in batches. This article will share the tracking process of this event, from attack methods, tools used, to attack

How to encrypt shared files, set shared file access permissions, and prohibit arbitrary copying of Shared FilesNowadays, many local networks have file servers, which usually share some files for access and use by LAN users, so that you can save and

How to clear Trojans Here are two tips to help you forcibly kill stubborn virus processes. Scan and kill by process name This method is implemented through the taskkill command in the WinXP system. before using this method, you must first open the

What the past virus looks like Malicious virus "LSD. COM" Phoenix technology news Beijing Time on February 9 news, according to The Verge Technology website, with The development of technology, The form of various products has been constantly

Background Management + Sina Weibo for an important site of the giant's Network Background Management + Sina Weibo for an important site of the giant's Network Http: // 222.73.63.136/live_admin/application/singerShow/view/index.htmlAccount:

Sina Weibo's CSRF point: Weibo via my link (worms) The referrer bypassed the last year.Happy New Year! Feature Points: The comments feature on the http://wanwan.sina.com.cn/event/sssanguo_2/sg.php page, although the activity has ended, but the

Anjuke SQL injection vulnerability root permission massive user data Overseas real estate-58 anjuke.com link: http://haiwai.anjuke.com Vulnerability URL: http://haiwai.anjuke.com /List/s? G = 6 database-version: MySQL> 5.0.11 vulnerability: g User: '

Pudding mobile APP has SQL injection (containing more than 4000 million user data) SQL Injection for APP security Target: pudding mobile APP-pudding couponSQL Injection exists in the following locations: (app_name, UNION Query, Boolean blind

A USB flash drive gets rid of you: TEENSY (test) Mining Process 1: It has been a long time since the last contribution. Today, I wrote an article about my time to eat and record my experiences with xss over so long. In my opinion. Xss is javascript

Test the vulnerability of an icloud phishing site Yesterday, a great guy hacked an icloud phishing site for the goddess for 10 minutes. He didn't want to receive a phishing email today, but also followed by a brush. But the phishing site of the

Website security dog WebShell upload interception Bypass The website security dog has a defect in processing the upload request, which leads to the failure of the upload interception for suffixes such as. asp. asa. Test environment: IIS 6.0Dongle

A system vulnerability in heihu. getshell can control official website advertisements. RT Main Site:  http://www.hihuu.com/     Http: // 120.55.138.90/Weak PasswordLifang: 123456High Permissions      There are multiple upload injections in the

Netease series mailbox versions with long-lasting mail titles xss Netease 126 yeah 163 5.0 users can receive all emails from each other when they open their inbox. Netease mailbox 5.0 still has a large number of users, because 5.0 is relatively

Xss (available in the background) stored in multiple locations in a sub-station of Youku and any posts deleted by common users Four stored xss types are found, two cookie types can be used, one is used as the Administrator, and the other one can

Use NSURProtocol to inject Test Data In previous blog posts, I have introduced the Unit Testing Method for accessing asynchronous networks and how to use simulated objects to further control the scope of unit testing. In today's tutorial, I will