Cloud Security

Ao you Browser Remote Command Execution Vulnerability Ao you browser has been updated to 4.4.900. Download the latest version and find that the XSS that adds the home page to the configuration center has been fixed. However, you can find two more

Cross-Domain command execution (QQ, browser, email, etc.) is caused by xss stored in the whole system of IOS) The last edit was tested and found that the ios version existed a long time ago. It may have been in existence for many years. It can

I learned from the Superfish event0x00 preface & superfish event There are many reports at home and abroad about the Superfish incident. However, I personally feel that the vulnerability incidents are very sensitive in China, and they are the first

Linux File tamper-proofing scriptIn Linux, the file tampering script file is a tamper-resistant script. Once a file is modified, an alert message is sent immediately. #!/bin/bash #description： check files shell #author：coralzd powered by

Shell scripts for safely deleting and restoring files in CentOS Currently, most of the Linux file systems are in Ext3 format. Once a file is deleted, it may not be restored, even if it can be recovered. Therefore, executing the rm command becomes

Linux System Security Settings Shell script This script has been widely used in a large media website system and added some security settings that were not previously imagined. Copy it and save it as a Shell file, such as security. sh. upload it to

The shell script automatically backs up the file and sends it to Gmail.1. Install the required Program Yum install-y mutt vixie-cron 2. Set the mutt sending Parameters $ Vim ~ /. Muttrc Write the following content Set envelope_from = yes Set

Malicious Software hidden in jpg exif header information The backdoor program is divided into two parts. The first part is the combination of the exif_read_data function of the image header to be read and some preg_replaCe functions to execute the

How to check whether the Mac system is infected with the iWorm virus? Recently, a Mac system virus called "iWorm" spread freely. It can execute commands on Mac computers and steal user data. According to statistics, 18.5 thousand Mac computers

An example of webshell troubleshooting About the website, Linode Tokyo's high-end VPS, CentOS system, LNMP environment, and run Discuz X 2.5, with a high access volume.Start searching with the following command:Find.-name "*. php"-print0 | xargs-0

Malicious PNG: "demon" hidden in Images" In the constant battle of Internet security, cyber attackers have been constantly improving their attack technologies. Security researchers found that the latest Graftor Trojan variant can embed malicious DLL

Research on Anti-Virus Defense: DLL injection (lower) -- DLL-free Injection I. Preface generally, to inject a program compiled by myself into other processes, you must use a DLL file. This method has been discussed in the previous article. But in

Optimistic about your portal-data transmission on the client-insecure hidden form fields 1. Simple Description Applications usually send data to the server in a way that the end user cannot directly view or modify. In many cases, developers give

360 the vulnerability detection platform may be exploited and used as a new attack idea and fixed Searches and operations that can be performed by everyone may lead to low-privilege hackers getting intrusions. New Ideas: Background vulnerabilities

A storage-type xss vulnerability exists in a system of flush to form a worm effect. A storage-type xss vulnerability exists in a system in huashun, which can be spontaneously propagated to form a worm effect. Any js code can be written to the

Getshell can access the Intranet to obtain domain control and solutions from yifen. Http: // 112.65.254.20.: 8080/jmx-console/ This is another server.And the last It is not completely fixed. As a result, getshell can be performed again.JBOOS

Mysql insert Delayed InjectionFirst, create a database and a table: create database blog;create table admin(id int primary key auto_increment,email varchar(500));  Write insert. php to facilitate sqlmap execution:  Using mysql monitoring of seay to

PhpMoAdmin Vulnerability Analysis Report PhpMoAdmin is a convenient online MongoDB management tool that can be used to create, delete, and modify databases and indexes. It provides view and data search tools and statistics on the database startup

CVE-2015-2080 Analysis Jetty is a widely used java container. When developing java Web applications, jetty is used as an embedded container, which is very convenient for debugging. Many large Internet companies use it to replace tomcat. As far as I

Baozou comics # improper Csrf defense: attackers can exploit this vulnerability to modify others' mailboxes and reset their passwords.   First, modify the email address and capture packets in the email address verification area. At this time, my