Cloud Security

Superhei's Data: _ URI_scheme: html "> http://superhei.blogbus.com/logs/23355141.html. I did the experiment with this: http://hi.baidu.com/xss? Jump_url = data: text/html; base64, Signature =, I want to verify two problems, one is how powerful the

There are many ways to implement the repair. Here we will introduce two methods. We will use 2nd.Method 1: Replace charactersSolution: Find the Username = request. Form ("name ")Pass = request. Form ("pass ") To:Username = Replace (request. Form

In this article, the server where a software product is located performs a security check. A detail determines the penetration of a system. After successful penetration .. I. Security Check reason A friend needs to purchase a school OA system and

One night later at the beginning of IRC, an old man said that he could help him see the security of his new main page. Then, he gave his URL abc.tar get.net. I think it's quite familiar to me, In target.net. I know the CEO, manager of the personnel

I have been engaged in website testing for three years. I personally think that a complete Web security system test can be conducted from deployment and infrastructure, input verification, identity verification, authorization, configuration

By: lone fox Longson blog: itpro.blog.163.comThe following statement has the same permissions as the ROOT user. We should have met each other before. The root user's MYSQL can only be connected locally and the connection is denied. The following

There may be many people who don't feel the hope of elevation of permission when wscript. shell is disabled. Will give up.Generally, when you upload the cmd.exe file, you cannot run the command. An error occurs during running.If you want to run the

From: http://hi.baidu.com/xi4oyu/blog/item/c8fb353e0f87b7eb55e723e9.html When I got home, I couldn't get on the Internet. I looked at python's core programming and found an interesting use of python tips. I didn't dare to hide it and share it with

I don't need to talk about the importance of the website database. The account and password of the website administrator are stored in it. There are many ways to protect the database from being downloaded. Below we recommend several methods to

/* Xuanmu */Houjie I think this is not exactly a technical issue, because there are too many things to consider outside of the technology, including the code structure, naming rules, and the rigor of syntax usage, A rather free language like

Author: 4 lertFrom: [H.S. G] http://www.3hsg.netPs: For reprint, please indicate from H.S. G and author, thx! There are a variety of methods for elevation of permission on the network. In fact, it is simply summarized as overflow, third-party

Because the author is lazy and does not provide the log clearing function, logs will be left:I. How many methods does su7 escalate privilege?There are two ways to kill su7.1> log on to the Administrator console page==> Get OrganizationId, used to

Vulnerability Author: phantom spring [B .S.N]Source code download http://down.chinaz.com/soft/24108.htmOfficial Website http://www.soyici.cnVulnerability level: highVulnerability description:The database is not added with the anti-download code,

Or the html "target = _ blank>Server limit dos.The access volume of this article on my blog is the fastest growing in all my articles. It seems that everyone is interested in this article.The reason why we need to talk about this problem again is

Author: UpFonTReference address: http://upfont.blogbus.com/logs/37867077.html One hour ago, Gh0u1 sent a link saying that it was a msn website and thought there were any new technical articles to share. It would be wrong if we entered it ~ We can

SubeihackCurrently, many anti-injection programs shield and, 1 = 1, 1 = 2, such keywords. Using such a method sometimes cannot detect injection points. is there any new method for detecting injection points? After a period of research, I found a

Author: flaw0rVersion: v1.1a Bulid 20090413 Access FreeVulnerability 1: dingdan. asp Injection VulnerabilityVulnerability level: severeProblem code:Dingdan = request. QueryString ("dan ")Set rs = server. CreateObject ("adodb. recordset ")Rs. open

Jshell.cn In general, mssql (default) is enabled with local system permissions, which grants mssql great permissions. It is easy to pose a threat to server security. For example, the stored procedure xp_mongoshell can execute system commands.

Secure-hiphop Space I tested it on http://www.ssk-keukens.nl Step 1: find a site with asp, like ex. http://www.site.com/news.asp? Id = 2 Step 2: add after 2 with space; and 1 = 0 OR and 1 = 1So: http://www.site.com/news.asp? Id = 2 and 1 = 0 By 1 = 0

In the process of website intrusion, sometimes when submitting our Trojan or other ASP files, it will be intercepted by the first-class information monitoring system because it sets a limit on the submission characters. Since it does not allow us