Cloud Security

Is IIS really "fragile? Is Apache, which is the No. 1 in the global market, indestructible? In fact, these problems are just our misinterpretations of server security issues. Before IIS 6 was launched, I had been busy repairing and completing IIS 5,

After completing the above settings, you also need to submit the previously created request Certificate file to the certificate server of the IIS website. When submitting the request Certificate file to the certificate server on the IIS website, you

Windows 2000, XP, and 2003 operating systems provide the default sharing feature. These default sharing features are marked as "$", meaning hidden, including all logical disks (C $, D $, E $ ......) And the system directory Winnt or Windows (admin $

Author: David ChappellInformation Source: http://www.microsoft.com/china/msdn/library/security/mac0304WSSecu.mspxNew technologies for enhancing Web service securityReleased on: 1/24/2005 | updated on: 1/24/2005David ChappellThis document assumes

Go to: hacker base www.hackbase.com Websites with "network phone traps" are usually used to provide attractive content or unhealthy pictures and movies when users browse information online, when a user tries to open these "attractive" images for

Source: emotional network Let's talk about session first. The debate on the SESSION seems to have never been stopped, but the number of people who can understand the SESSION should be more than 90.But let's talk about it. Don't be too old ~ Some

Source: Legion 8 The attack method described in this section is to pave the way for the next section. When learning, readers should learn more about Perl and websites. If possible, it is best to install a set of website service programs in your

Glacier used his defective low-resolution mobile phone to take a picture of the Minsheng Bank script error. From the figure above, we can at least know: 1. The intranet is responsible for transferring money from ATMs to a web server;2. IP

ASP Trojan and Webshell security solution body content: Note: The setting method and environment described in this article are applicable to Microsoft Windows 2000 Server/Win2003 SERVER IIS5.0/IIS6.0. 1. First, let's take a look at the ASP

This article summarizes four methods to obtain the SYSTEM permission to run the regedit.exe file,The source code can be easily modified to run the specified program in the command line mode. 1. Run as a service2. Add an ACL3. HOOK ZwCreateProcessEx

The malicious network behaviors of network servers include: first, malicious attacks, such as denial of service attacks and network viruses. These behaviors are intended to consume server resources and affect the normal operation of servers, even

As long as you access the Internet, poisoning will definitely continue. What should we do if we get poisoned? Do we always use anti-virus software? However, the magic weapon is not omnipotent. Many stubborn emergencies cannot be killed by anti-virus

Suitable for readers: script intrusion enthusiasts and network administratorsPrerequisites: None Coincidentally, the entire site source code When we intrude into the website, we all want the source code of the website, and then analyze the code to

  Perform iptables drop on IP addresses that have incorrect ssh passwords Put the following script into/etc/crontab Scanned ssh password guesses more than 5 times * *** Root/home/cnscn/sh/ssh_scan_crontab.sh>/dev/null 2> & 1 $

Original article: http://exploitshop.wordpress.com/2012/01/14/ms12-005-embedded-object-package-allow-arbitrary-code-execution/  MS12-005: Arbitrary Code Execution of embedded objects MS12-005 is really fun.Demonstration video see here

I,Background As a DBA, you may have many systems that need to be managed, and different systems use different databases. Generally, we use sa to set passwords, in addition, the config file contains our account and password in plain text. Is this

The Program (method) provided on this site may be offensive and only used for security research and teaching. You are at your own risk!1 .##2. # $ Id $3 .##4.5 .##6. # This file is part of the Metasploit Framework and may be subject7. #

1. Install patches frequently. The latest changelog on www.apache.org has the words bug fix and security bug fix. Therefore, Linux network administrators should pay attention to the bug fixes and upgrades of related websites, and promptly upgrade

Although there are many articles on the Internet to export hash from the Registry, I mainly refer to the blog record of the smelly sock, because it is very beautiful. Generally, you only need to use the AT guide. You don't need to be so entangled as

Prelude: I accidentally took a server from the school that checked network access and accidentally saw a remote login information. Then I scanned the network segment for port 80... The last J8 is the Internet detection .. In fact, the record is