Cloud Security

Firefox 31 ~ 34 Remote Command Execution Vulnerability Analysis 0x00 PrefaceSome time ago, the second brother promoted the scripting vulnerability to remote command execution in many browsers, almost all domestic browsers on the market, which has

Eight security settings to ensure the security of Apache Web Servers Apache server is an open-source WEB Server supported by the Apache Software Foundation, a non-profit organization. Many of our virtual hosts and VPS use the Apache server

Linux single-user password cracking Ubunt1. When the system is started to grub, use the up/down key to move to the recovery mode of the second line, and press e (note not to press Enter)That is, Ubutn, kernel 2.6.12-9-386 (recovery mode)2. Change ro

Linux MIPS execve #include /*Sanguine@debian-mipsel:~/leaveret# cat > MIPS_36b_sc.s.section .text.globl __start.set noreorder__start:slti $a2, $zero, -1 #set a1 to zerop:bltzal $a2, p #not branch always and save raslti $a1, $zero, -1 #

Will the open source movement come to an end? -- Talk about how to treat OpenSSL heartbleed The open-source movement is gradually accepted with the birth and widespread use of Linux operating systems. IT is a major change for the software and IT

Enable Nginx tls sni to support multiple SSL certificates under the same IP address A few days ago, I told my blog to deploy an SSL certificate to improve the performance. Later, I applied for an additional SSL Certificate for my project and

Eight security settings for Apache Web Server Security in CentOS Apache server is an open-source WEB Server supported by the Apache Software Foundation, a non-profit organization. Many of our virtual hosts and VPS use the Apache server architecture

CentOS7LVM logical volume partition automatic resizing Shell scriptApplication scenarios and known problems: Applicable to CentOS6 or CentOS7 (may be applicable to earlier versions such as CentOS4 or 5) The root file system (Extended File System)

Use iptables to automatically seal IP scripts in CentOS This script is used to analyze and count the secure log file. You can use iptables to block IP addresses with many ssh logon errors. #! /Bin/bash# Created by haiyunNum = 10 # Upper

Anti-Virus Software successfully killed itself as a virus It's not uncommon for different anti-virus software to conflict with each other and intercept each other. But have you ever seen anything about killing yourself? Panda Security, a

Common linux firewall configurations RHLE7/centos7 firewall installed by default is firewallSwitch ServiceSystemctl start firewalld. serviceSystemctl stop firewalld. serviceEmergency mode: Network disconnectionFirewall-cmd -- enable panic-onFirewall-

China Mobile Wallet Business getshell (involving multiple sub-sites in multiple databases, can replace APK)   Struts2 VulnerabilityHttp://wxhd.shwxcs.cn/PhotoflyingCity/AppActivityNfc/index.action? Urlcategory = 1 & appid = ap300000000000000034 &

Mallbuilder (multi-user mall) Storage XSS refers to where to pack (5) First came to the demo address: http://cn.mall-builder.com/main.php This demo address has stopped Registration  It should be the reason for this hole = hahaWooYun: Mallbuilder

B2Bbuilder latest SQL injection (DEMO) B2Bbuilder latest SQL injection (DEMO) The following code exists in module/buy/detail. php: query ('select valid_time from '. BUY. 'Where id = '. $ id. 'limit 1'); $ valid_time = $ db-> fetchField ('valid _

A function design defect of the moment network leads to cross-site Request Forgery (CSRF) (can lead to full-site worm propagation with POC) Cross-Site Request Forgery (CSRF) due to functional design defects such as transient network fragmentation

Out_of_Order Retransmission of Wireshark Today, we captured packets with WireShark and found the following two problems: TCP Out_of_Order and TCP Retransmission. Cause Analysis of TCP Out_of_Order: Most of them are network congestion,

Internet influence: protection from the attacker's perspective (1) 0 × 01. Preface I am a cainiao security engineer. I had the honor to have participated in two security competitions, and some people had some personal experience, so I had this

XSS Attack and Defense in Web SecurityCross Site Scripting (XSS) is the most common vulnerability in web applications. An attacker embeds a client script (such as javascript) in a webpage. When a user browses the webpage, the script is executed in

Qibo Blog system high-risk vulnerability collection (SQL + XSS) This blog system is a public blog platform similar to blog bus.Two high-risk injection + xss that can be used as administrator accountsLatest blog 1.0Http://down.qibosoft.com/down.php?

Internet-based storage-type cross-site (other users have logged on) Internet-based storage-type cross-site (other users have logged on) You can see the homepage of the fence.I went to see it.Redecorate the review of live broadcastingHttp://bang.liba.