Cloud Security

0x00 what is a weak password The weak password is not strictly or accurately defined. Generally, it is considered that the password that is easily cracked by someone else (they may know you well) is weak. Weak passwords refer to passwords that only

This holiday is not in a hurry to go home. If you are out most of the time, you should run more when you are young :) Living outside, the network speed suddenly slows down at night. Suddenly, P2P attacks may occur. Open the firewall and check it out.

    DNS region Transfer(DNS zone transfer)A backup server is used to refresh the data of its own server in its own zone database. This provides a certain degree of redundancy for the running DNS service, and aims to prevent the Primary Domain

How to obtain the lab environment of professional intrusion detection equipment Because CISCO's professional intrusion defense sensors are very expensive, it is unwise to purchase Cisco's intrusion defense sensors to learn or experiment, of course,

Recently, I am also playing this .. Proud westward journey, a group of people said last night that someone could use a hacker to brush game coins and experience books and sell money. I thought it was a liar and I didn't take it seriously. Someone

In other words, in Beijing, the dormitory's network connection to the Forum could not be reached, so we had to find a way to break through a few wireless channels and download things. Hey hey, by the way, we can also use dsploit to scan the password.

From ghost son s Blog Open the new station and release it. In the past, the packages should be written in summary. There were not a few people before and after, which is a pseudo-private version.#! /Usr/bin/env python# For God sake, Keep it

Author: painful beliefs The password field in the sysxlogins table is varbinary and cannot be obtained through an error. I recently saw an extended storage named xp_varbintohexstr, so I had the idea: Core DEMO code (query analyzer) Declare @ p

Release date:2010-07-18Affected Versions:ASPLIAN Injection Vulnerability AnalysisDefault background address:Http: // 127.1/Adminmaster/Author:M4r10Http://hi.baidu.com/m4r10Reprinted with copyrightVulnerability Analysis:

Phpaacms is a free and open-source simple article Management System (cms. Vulnerability file: search. php // variable $ _ GET [id] injection caused by lax Filtering Test EXP: Http: // 127.0.0.1/phpaacms/search. php? Id = 1% 20and (select % 201% 20

Vulnerabilities are used for phishing attacks, allowing users to access malicious websites without knowing what to expect. After the Web application receives the URL parameter submitted by the user, it does not perform "trusted URL" verification on

Users can insert malicious code when applying plug-in music links during posting, and the user's browser is controlled by attackers to achieve special purposes of attackers and obtain administrator information.XSS test

Ecshop has a problem when designing the authentication mechanism, which allows malicious users to steal passwords of other users. In the ecshop permission mechanism, you need to know the original password to change the password, but modifying the

An unexpected climax Coldfusion is still relatively stable as a web server, but in terms of its security, if it is improperly set, it is easy to cause the entire server to fall, its own services are started as system permissions. The oldfusion

The Creavion CMS program uses the Fckeditor and does not delete its test page, which leads to the Remote File Upload Vulnerability. Google: "powered by creavion cms" Upload Vulnerability page: Html "> http: // Target/[path]/admin/FCKeditor/editor/

TinyMCE MCFileManager 2.1.2 Arbitrary File vulnerability caused by filtering of non-file names on the Arbitrary upload page Google: inurl:/tiny_mce/plugins/filemanager/ Go to the upload page: htpp: // www.hackqing.cn/tiny_mce/plugins/filemanager/

Affected Versions:JomSocial Joomla! Is an Open Source Content Management System (CMS ). Joomla! A design vulnerability exists in the implementation of the JomSocialy component. Remote attackers may exploit this vulnerability to upload arbitrary

Injection point: asp "> http://www.enzymotec.com/Page.asp cc = 0102041102 IP: 192.117.122.145 Israel inurl: aspSpecific script commands:1. Determine whether injection exists; and 1 = 1; and 1 = 2; And user_name () = dbo determines whether the

From: E-Industry Press authorizes the red and black Union www.2cto.com to publish If you view the link address of the Google image preview page at this time, you can see the following figure: Http://images.google.com/imgres? Imgurl =

Affected Versions:Nicole Stich cformⅱ 11.5 Vulnerability description: WordPress is a free forum Blog system. The cformⅱ plug-in used by WordPress does not properly filter the rs and rsargs parameters that the user submits to the