Cloud Security

The OpenSSL Heart Bleed vulnerability has been confusing for the past two days. Please read this article to analyze and diagnose the OpenSSL Heartbleed Bug. Currently, we can see that the versions that can exploit this vulnerability are:OpenSSL 1.0.1

You all know what an IP address is, right? They are assigned to devices on the network to represent them. They are allocated through the DHCP server and change frequently. There are two types of IP addresses. The dynamic one will change frequently

Introduction TCP can establish a connection only after three handshakes: (From wiki) As a result, there was an attack on the handshake process. The attacker sends a large number of FIN packets, and the server responds to the (SYN + ACK) packet, but

  1. register an Apple ID Recently, the iOS7 + system requires that all iPhone phones be activated with your apple ID when they are activated after being refreshed. Therefore, your new mobile phone must be activated with your own Apple ID, it can

Domain Name interception has always been a headache. The following describes the interception method and Bypass Method. There are only five firewall or interception methods:1. Function Interception2. DNS query Information Interception3. Reverse DNS

In the simple text, the name of A gentleman is A lust in the downstairs. The previous article said: I haven't been out at home recently, and I don't have to go online. I am hungry one afternoon and don't want to get takeout. Dressed up in a gorgeous

Traffic hijacking. After a period of silence on this old attack, it has recently started to stir up. Many well-known brands of routers have successively discovered security vulnerabilities, attracting domestic media reports. As long as the user does

Shell is a program with special functions. It is an interface between the user and the core program (kernel) of the UNIX/Linux operating system. Why do we say shell is an intermediary between the core program of the system and the user? Readers who

Write SHELL scripts to implement high HA of Nginx service processes. The script content is as follows: #! /Bin/bash while: do nginxpid = 'ps-C nginx -- no-header | wc-l' if [$ nginxpid-eq 0]; then/usr/local/nginx/sbin/nginx sleep 5 nginxpid = 'ps-

1. allow only one IP address to log on and reject all other IP addresses.Write in/etc/hosts. allow:Sshd: 1.2.3.4Write in/etc/hosts. deny:Sshd: ALL iptables can also be used:Iptables-a input-p tcp -- dport 22-j DROPIptables-a input-p tcp -- dport

Some time ago, openssl heartbleed surprised us for a few days.  From user data leakage to products around OpenSSL, from server to client, from https Private Key leakage to openvpn, openssh, sftp and other private key leakage. We can't do anything in

In the online execution of pythontip, you can obtain the program source code and program configuration. pythontip online programming does not shield many functions in the OS module, nor prevent open from reading file content, leading to source code

1. Add a non-direct execution Program if(!defined('IN_DISCUZ')) {exit('Access Denied');} 2. Remember to filter For example, IDS such as uid need intval filtering to avoid overflow.Text content needs to be filtered by htmlspecialchars to avoid

Tianyu Mobile official website pseudo static SQL Injection Vulnerability Test URL http://www.k-touch.cn/product/condetail/prod_id/123.html  web server operating system: Windows 2003web application technology: ASP.NET, Microsoft IIS 6.0back-end DBMS:

This article is my two-day study notes shared and shared with you. Knowledge is scattered, but for people with a certain JS base, every small knowledge will help broaden your Hack perspective. First, I declare that this article is only the tip of

Discuz! X latest version (and some vulnerabilities in the old version)Today, a user point on the Forum suddenly rose a lot. I checked the logs and found a hole in the old version. I thought it had been fixed for a long time. I didn't expect it to

Remote logon is configured on the Internet and Intranet routers. To ensure network security, the Internet cannot access the Intranet, but the Intranet can access the Internet. R1 cannot telnet or pingR3, but R3 can access R1:The configuration is as

1. counters: allows developers to review the running status and various metrics from a global perspective.Get counter: Conter myConter = config. getConter ("group name", "counter name ");Set the initial value for the counter: myConter. setValue

1) use the access list categoryPlace the data defined in access list 10 in the high-priority queue; other data in the default queue.Access-list 10 permit 12.12.12.0 0.0.255 --- define the ACL and allow 12.12.12.0/24 network segmentsPriority-list 1

The encryption method of the N-point VM is a custom function encapsulated in the DLL. You create an ASP file in the directory of the N-point host management system as follows: Replace the NLFPK @ ojcocia @ E @ FEKJMFADLALKLF @ JHOIMAHO @