Cloud Security

Will the open source movement come to an end? -- Talk about how to treat OpenSSL heartbleed The open-source movement is gradually accepted with the birth and widespread use of Linux operating systems. IT is a major change for the software and IT

Focus on mobile application security and get out of the "code obfuscation" misunderstanding For a long time, to prevent mobile apps from being decompiled and cracked, most mobile developers choose code obfuscation technology to defend against

To protect the data security of Apple Mac computers, you can use built-in system tools. When your beloved Apple Computer suffers theft or illegal computer account intrusion, is there a way to prevent data from being stolen on the computer? In this

DDOS attack analysis method and AnalysisIntroduction to DDOS The full name of DDOS in English is Distributed Denial of Service Distributed Denial of attack. It is the most common and difficult to defend against network attacks. Similar to

CentOS7LVM logical volume partition automatic resizing Shell scriptApplication scenarios and known problems: Applicable to CentOS6 or CentOS7 (may be applicable to earlier versions such as CentOS4 or 5) The root file system (Extended File System)

Use iptables to automatically seal IP scripts in CentOS This script is used to analyze and count the secure log file. You can use iptables to block IP addresses with many ssh logon errors. #! /Bin/bash# Created by haiyunNum = 10 # Upper

Anti-Virus Attack and Defense Research: self-starting using the registryI. PrefaceAs I mentioned in the previous article, as long as you do not double-click a virus Trojan, it will not run. When it comes to running, there are many ways to realize

Research on Anti-Virus Defense: DLL injection (medium)-Compiling of DLL injection and uninstallationI. preface the DLL usage method I discussed in the previous article is very passive for the DLL file itself. It needs to wait for the program to call

XSS Attack and Defense in Web SecurityCross Site Scripting (XSS) is the most common vulnerability in web applications. An attacker embeds a client script (such as javascript) in a webpage. When a user browses the webpage, the script is executed in

Qibo Blog system high-risk vulnerability collection (SQL + XSS) This blog system is a public blog platform similar to blog bus.Two high-risk injection + xss that can be used as administrator accountsLatest blog 1.0Http://down.qibosoft.com/down.php?

WebView File same-origin Policy Bypass Vulnerability Analysis1. WebView File field same-origin Policy Bypass Vulnerability description In May October 2013, a file domain same-origin policy bypass vulnerability exists in FireFox Android, which may

True or false: Technical Analysis of WordPress black hat SEO plug-in (1) In Wordpress, malicious programs are usually hidden in Plug-ins or themes. They have different forms. Some send spam, some implant invisible links ...... However, the

Trinity vulnerability analysis method-web Application Security Testing Method0x00 preface 4.1 active (fully automated): Web2.0, interactive vulnerability scan 4.2 semi-automatic vulnerability analysis: Business replay, url image, 4.3 high coverage

Haikang life main site SQL Injection Vulnerability Haikang life main site SQL Injection Vulnerability POST /photography/look.jsp HTTP/1.1Content-Length: 23Content-Type: application/x-www-form-urlencodedReferer:

Introduction to padding attacks and attack analysisPrinciples Fill Attack: A fill attack refers to a network attack that intentionally fills in useless data in the data packet content to consume network bandwidth and system resources.It is worth

ElasticSearch Remote Code Execution Vulnerability Analysis (CVE-2015-1427) & advanced exploitation0x00 vulnerability Overview Combined with the previous article "ElasticSearch Groovy script Remote Code Execution Vulnerability Analysis (CVE-2015-1427

An UCweb interface can easily Crack user accounts. An UCweb interface can easily Crack user accounts.Brute-force cracking interface:   Http://haoma.uc.cn/unfreeze/checkAccount The nickname status query function allows you to use a combination of

Suning Tesco an SSL interface can use the security trust relationship to successfully hit the database (you can indirectly log on to the entire site system) Suning Tesco an SSL interface can use the security trust relationship to successfully hit

Baidu record store-type XSS (no exception for anyone who hits it) This storage-type XSS appears on the bar service blocking reason (so the premise is that you must have the bar master or have the seal permission) Below I will demonstrate it with

How can I enable Zhou Hongyi/to pay attention to my weibo posts (including fixes) In fact, it's not just about paying attention to it. It can do a lot of things to get the source and access_token authorized by Weibo users. Related api documentation: