Cloud Security

Now the security of linux is becoming more and more important. Here I want to write down some basic security measures in linux that I usually use to discuss with you, make our linux system reliable. 1. BIOS security settings are the most basic and

Server Security Prevention 1. server System Security: use the latest operating system or the latest stable version (such as the Ubuntu LTS), perform regular updates, rationally divide system permissions, and perform permission security protection

/* Userns_root_sploit.c *//* Copyright (c) 2013 Andrew Lutomirski. All rights reserved .*//* You may use, modify, and redistribute this code under the GPLv2 .*/ # Define _ GNU_SOURCE# Include # Include # Include # Include # Include # Include #

Recently, a foreign security researcher found a vulnerability on the Apache server that uses the Rewritelog () function in the modules/mappers/mod_rewrite.c file to incorrectly process certain escape sequences, as a result, malicious attackers can

IOS runtime attacks are currently popular in two ways:Dynamic Link Library InjectionTo modify the implementation of the API method by writing a customized dylib file and setting the DYLD_INSERT_LIBRARIES environment variable (seeMac hook-DYLD_INSERT_

We are no longer familiar with Swiss Army Knife nc, which is often used for packet sending, file transfer, and reverse shell. In the penetration test process, if we want to rebound shell, we usually do the following: Nc-l-vv-p 2222-e/bin/bashIn

For telecom enterprises, database security is crucial. Imagine what will happen to the Recharge System? What will happen to system problems when mobile phone users query bills at the end of the month? The following are some experiences of database O

In the previous article (http://www.bkjia.com/Article/201307/224727.html), the output of the last piece of code is shown in (1: Figure (1) For analysis, why is there such a result? Figure (2) Figure 2 state diagram of function stack

Tomcat is a classic open-source middleware. It is widely used in production and has multiple instances and multiple ports for tomcat clusters. However, we need to pay attention to the security issues. Today we will give a simple demonstration of a

H3C iNode is a management software designed and developed by Hangzhou H3C Communication Technology Co., Ltd. for user authentication and internet access. The software has a buffer overflow vulnerability. Attackers can remotely send attack packets

Read permission required: C: \ WINDOWS \ system32 \ inetsrv \ MetaBase. xml Set ObjService = GetObject ("IIS: // LocalHost/W3SVC") For Each obj3w In objserviceIf IsNumeric (obj3w. name) ThensServerName = Obj3w. serverCommentSet webSite = GetObject (

Preface:To figure out the entire process, we will analyze a simple DEMO we have written to illustrate the environment: OS: BT5 R3 64 bittools: gcc, gdbsource: cProcess:Let's take a look at this simple program. It's a login verification program. root@

0x1, surprised to ask a reverse proxy platform invitation code, a code is hard to find, bitter ratio waited for a night invitation code was fruitless, big cows are busy taking off their pants, as a poor hanging silk, you can only use your hands to

The best way to learn is to link theory with practice. When we know how to penetrate an attack, someone will try to simulate a real attack. During Penetration, when we find that some ports are opened on a machine, you can think about how to use the

It is rare that someone will immediately take security measures for a newly installed server, but the society in which we live makes it necessary. But why are so many people dragging it to the end? I have done the same thing, and it usually comes

Tomcat security mechanism BASIC Authentication BASIC DIGEST authentication uses MD5 encryption DIGEST FORM authentication for basic Custom forms, you can specify the login verification FORM form /login.htm /error.html CLIENT-CERT A

If vsfilter. dll does not properly handle the imported malformed dwWidth parameter, causing heap damage vulnerability analysis: When the malformed dwWidth parameter is passed in, the CreateDIBSection function fails to be executed, and NULL is

The exploitation of the % 5c storm library is no longer a new technology, because I only find a vague saying: UNICODE is % 5c. When it is submitted, IIS cannot be parsed normally, leading to the storm library. But I asked hoky. pro after the

Shell is an application that accepts user commands and requests to operate the system, someone will package the shell kernel out of the kernel and then package a kernel AP. I prefer not to use the same method, for me, shell is just another

Source: http://blog.csdn.net/brain _/ When I was writing an injection program, I occasionally encountered some bad things, such as hanging on the explorer and not running, but hanging on other processes is normal, in order to solve the problem as