Cloud Security

To protect the data security of Apple Mac computers, you can use built-in system tools. When your beloved Apple Computer suffers theft or illegal computer account intrusion, is there a way to prevent data from being stolen on the computer? In this

Test network security with Cortana SoftwarePreface Generally, most companies or enterprises deploy an IDS intrusion detection system to monitor network security. When an attack occurs on the network, IDS automatically generates an alarm. Although

DDOS attack analysis method and AnalysisIntroduction to DDOS The full name of DDOS in English is Distributed Denial of Service Distributed Denial of attack. It is the most common and difficult to defend against network attacks. Similar to

Anti-Virus Attack and Defense Research: self-starting using the registryI. PrefaceAs I mentioned in the previous article, as long as you do not double-click a virus Trojan, it will not run. When it comes to running, there are many ways to realize

Anti-virus attack and defense research: Add a section to implement code ImplantationI. Preface The method discussed in this article is to add a section, which can achieve the effect of private customization. The size of this section is determined by

Research on Anti-Virus Defense: DLL injection (medium)-Compiling of DLL injection and uninstallationI. preface the DLL usage method I discussed in the previous article is very passive for the DLL file itself. It needs to wait for the program to call

Research on Anti-Virus Defense: DLL injection (I)-compiling DLL filesI. Preface all the dialog box programs I have previously compiled for computer virus simulation are exe files. Therefore, a process will be generated during running and the process

RSA encryption and decryption functions of ASP Rsa. asp test. asp  

How to detect an APP: Getting others' information from decryption to batch Comment: when mining web vulnerabilities of Android apps, apps that seem to be safe will also Encrypt http requests, the author of this article provides a good basic solution:

WebView File same-origin Policy Bypass Vulnerability Analysis1. WebView File field same-origin Policy Bypass Vulnerability description In May October 2013, a file domain same-origin policy bypass vulnerability exists in FireFox Android, which may

True or false: Technical Analysis of WordPress black hat SEO plug-in (1) In Wordpress, malicious programs are usually hidden in Plug-ins or themes. They have different forms. Some send spam, some implant invisible links ...... However, the

Trinity vulnerability analysis method-web Application Security Testing Method0x00 preface 4.1 active (fully automated): Web2.0, interactive vulnerability scan 4.2 semi-automatic vulnerability analysis: Business replay, url image, 4.3 high coverage

Haikang life main site SQL Injection Vulnerability Haikang life main site SQL Injection Vulnerability POST /photography/look.jsp HTTP/1.1Content-Length: 23Content-Type: application/x-www-form-urlencodedReferer:

Introduction to padding attacks and attack analysisPrinciples Fill Attack: A fill attack refers to a network attack that intentionally fills in useless data in the data packet content to consume network bandwidth and system resources.It is worth

ElasticSearch Remote Code Execution Vulnerability Analysis (CVE-2015-1427) & advanced exploitation0x00 vulnerability Overview Combined with the previous article "ElasticSearch Groovy script Remote Code Execution Vulnerability Analysis (CVE-2015-1427

An UCweb interface can easily Crack user accounts. An UCweb interface can easily Crack user accounts.Brute-force cracking interface:   Http://haoma.uc.cn/unfreeze/checkAccount The nickname status query function allows you to use a combination of

Suning Tesco an SSL interface can use the security trust relationship to successfully hit the database (you can indirectly log on to the entire site system) Suning Tesco an SSL interface can use the security trust relationship to successfully hit

Baidu record store-type XSS (no exception for anyone who hits it) This storage-type XSS appears on the bar service blocking reason (so the premise is that you must have the bar master or have the seal permission) Below I will demonstrate it with

How can I enable Zhou Hongyi/to pay attention to my weibo posts (including fixes) In fact, it's not just about paying attention to it. It can do a lot of things to get the source and access_token authorized by Weibo users. Related api documentation:

Optimistic about your portal-data transmission on the client-insecure http information Header1. In the Internet, a large amount of data is transmitted through URL parameters. Most of the data is not transmitted through encryption. As I have learned,