Cloud Security

This is my summary of writing a simple compression shell. During this period, I read a lot of materials, learned a lot of code, made a lot of notes, had some care and experience, and hoped to share and learn with you. Once again, I would like to

Author: zhxflDescription: A complete cracking attack was launched here for beginners to practice. This topic is only available for research purposes. VB program, and compare the breakpoint bpx _ vbaStrCmp (executed in the cmd box)Undo the breakpoint

Is it really difficult to choose between public and private keys when using public key cryptography for encryption and signature?This article is the second version, because the first version is unfortunately ...... Let's talk less and get down to

1. breakpoint: The so-called breakpoint is where the program is interrupted. This word is no longer familiar to the decrypted. So what is interruption? Interruption occurs because of a special event (interruption event). The computer suspends the

[Shelling author] instantly stunned[Author email] [email] RegKiller2002@yahoo.com.cn [/email][Tools] OllyDBG, LordPE, ImportREC, PEiD v0.94[Shelling platform] WinXP SP2[Software name] Win98 notepadSoftware size: 568 KBProtection options: Standard

[Software name]: forgot's unpackme 1.7[]: See the attachment.[Shell removal statement]: Crack for beginners. It is only interesting and has no other purpose. For errors, please enlighten us![Operating System]: winxp[Shelling tool]: traditional tools

The program in this article: http://www.fractalpc.com/resources/SetupFractalPC30.exeObtain the complete input table:Breakpoint: GetModuleHandleA. A normal breakpoint must be placed at the end of the function. Otherwise, it will be detected. When the

Author: IceWorld ice and snow site: http://iceworld.126.com/ Alas, it's about to start again ...... before I start work every day, I always sigh so much, and then I can't help but fight 12 copies of the spirit, with one hand mechanically turn on the

Impact program: php-chart_v1.0Official program: http://php-charts.com/Defect type: PHP Code Execution.========================================================== ======================================Test Platform System: Debian squeeze 6.0.6Server

I thought I 'd take a moment to post about some web security tools I use pretty often, which help as a security consultant when responding to various web hacking related incidents. these tools have helped me write my own scripts whenever I'm in a

You may have seen such a vulnerability. Here we take the crazy Jiafu technology cms upload vulnerability as an example. Google Keyword: inurl: newslist. asp? NodeCode = Exp:Admin/uploadfile. asp? Uppath = mad. asp & upname = & uptext = form1.mad.

The leakage of important information on the two machines of changtu network can result in the loss of WebSite Services, if filtering is not strict, leading to backend permission leaks, focus on the server IP address and PORT221.6.35.205: 18888 2.

XSS has accessed the street network. For more information, see http://www.bkjia.com/article/201302/189991.html. After reading this, it turns out that Baidu's function is not in full... 1 previously, XSS went to the street network and found Baidu's

Iis6 will be able to escalate the permission to the target site. However, this time the target site permission is required, and all the previous permissions are lost. Try again. 1. External servers, each site only supports the corresponding scripts.

1. Add the follow interface POST to GET; 2. Do not just brush fans, xss can steal identities, and csrf can do the same! 1. Is this site SA: http://caipiao.weibo.com, First Login, fill in the information spread! 2. Add attention to the interface is

Qq mail does not strictly filter cross-origin requests, which may cause persistent hijacking of user emailsWe know that in the browser's security model, the Same-Origin Policy-SOP (Same Origin Policy) is the most basic part. It determines which

 Open the website, an enterprise site. Add adminDefault background.Go back to the home page and open a Production point connection. Add "and 1 = 1" after the parameter. A dog is found.So you don't need to scan the yundun, And the IP address will be

Http://tcfile.baidu.com/index.php? Url = url this url is designed to provide a mobile phone user with an interface to access a web page on the computer for traffic. However, this page has a problem when obtaining the corresponding content of the url.

Today, I encountered such a problem and briefly recorded my solution. First, let's talk about the server environment. Port 80 of the server is configured according to the standard virtual host. It supports asp, aspx, and php, but does not support

Lesson 2 http://www.bkjia.com/Article/201301/186364.htmlWell. I found this directly when I was looking for the first lesson. Anyway, the beginning is very simple direct output in the source file, there is no filter reflected XSS detailed description: