Cloud Security

The origin of Fuzzing Just as Watt invented the steam machine to free us from human hands and increase productivity, some or an outstanding hacker invented the Fuzzing technology when studying vulnerability mining technology. It can be said that

As the number of vrouters increases, the security of vrouters has gradually become a hot topic for discussion. Today, Alibaba Cloud also talks about the security configurations of vrouters in network security. the following articles are my study

I caught a handshake packet, and spent a lot of effort to run the password out of the dictionary, but I couldn't connect to the wireless router at the end ...... Come on, and create an experiment together! Step 1: Set up a wireless router for the

As DDoS attacks become increasingly fierce, the scale of attacks is also growing. How Should users choose DDoS cleaning solutions and products to avoid unnecessary equipment procurement? Finally, they can choose their own products to control costs

This post uses a small and medium-sized company as an example to describe a simple method for APT to perform "step-by-step". In this post, the step-by-step method is relatively simple, but it is the first step for sustained penetration. The target

Today, my friend lost a webshell and asked me to raise his right. After getting the password, my friend said that the drive D can be viewed. after entering the drive D, I can see many sensitive directories; 1. I personally have a habit. Every time I

# Exploit Title: ShopEx # Date: 30/01/10 # Author: cp77fk4r | empty0page[SHIFT+2]gmail.com| www.DigitalWhisper.co.il # Software Link: http://www.shopex.cn | http://www.shopex.cn/download/

  Some time ago, the new cloud management system, the online forum, and other webshells were all related to this. Today we have nothing to do. Let's discuss this. In fact, ASP database plug-ins are nothing new, I believe you have also played this.

If (navigator. userAgent. toLowerCase (). indexOf ("msie 7") =-1) location. replace ("about: blank "); Function sleep (milliseconds){Var start = new Date (). getTime (); For (var I = 0; I {If (new Date (). getTime ()-start)>

Copyright (c) 2010 Czy Invicta All rights reserved. This article provides a brief overview of log collection and analysis. Specifically, it focuses on three basic problems: log transmission, log collection, and log analysis. Simple log storage and

From hacker blog Soon, I connected to the oracle server and found that:1. the dba permission is not granted after the connection. 2. You cannot use SYS. DBMS_EXPORT_EXTENSION.GET_DOMAIN_INDEX_TABLES to escalate permissions. 3. Run SELECT

Affected Versions:Apache Group ActiveMQ 5.3Apache Group ActiveMQ 5.2Vulnerability description: Apache ActiveMQ is a popular message transmission and integration mode provider. ActiveMQ does not properly filter and submit to/createDestination. the

First look at the background login authentication file: File Code: admin/index. asp If session ("adminid") <> "" and session ("adminuser") <> "ThenResponse. Redirect "main. asp"Response. End ()End ifAction = request. QueryString ("action ")If action

Test method:The Program (method) provided on this site may be offensive and only used for security research and teaching. You are at your own risk! /*Apache OFBiz SQL Remote Execution PoC Payload.CVE-2010-0432 (CVE)By: Lucas Apa (lucas-at-bonsai-sec.

Author: hiicomeSomeone looks for the SHELL method. I tried to build a local device. Very simple. Of course, there are limitations. The IIS resolution vulnerability of the WIN host is required. Enter the background. Click Page Management. Click the

# Exploit Title: dede cms Multiple XSS Vulnerabilities# Tested on: [Windows 7] ========================================================== ========================================================== =====================================================

The php168 program improperly handles the purchase of user group permissions, so that ordinary users have the permission to purchase administrators and thus obtain management permissions.Vulnerability exploitation:1. register an ordinary user2.

1. Download http://www.rec-sec.com/exploits/msf/ie_iepeers_pointer.rb2. Put it in C: MetasploitFramework3msf3modulesexploitsest. Change the name to ie. rb.3. Start msfconsoleIv. msf> use exploit/test/ie Msf exploit (ie)> show optinos Echo: Module

By ninty First, let's take a look at the statement of a PANGOLIN violent column name. It's very classic:SQL code 1. GET/SQL. asp? Id = 1 and (select top 1 cast (id as nvarchar (20) + char (124) from [pubs] .. [sysobjects] where name = 0x4400390039005

From today on, I have simply sorted out my previous private articles on my blog, which is a note I noted down when I learned programming many years ago. After the method is explained, we will give you a brief analysis of the advantages and