Cloud Security

The purpose of this article is to let everyone know what to do after encountering a Trojan. This trojan is my first contact. I think it will be helpful to you in my experience in Trojan killing. I have not studied the details of this trojan, such as

// Create a file. htaccess under the directory of the 2CTO. COM website and edit  Authname "2CTO. COM"AuthType BasicAuthUserFile/etc/httpd/vconf. d/2CTO. COM. htpasswdRequire valid-user// Create a password file for the 2CTO. COM domain and the file

Log on to the backend directly using admin' or 1 = 1 # Find the injection point MYSQL external connectionDescription: Target station http://bes.sina.netIn the background, I still need the account and password .. JokeAdmin 'or 1 = 1 #The password is

Www.2cto.com: Not a new article, but it is of reference value.There are many hacker intrusions. in a broad sense, we can divide them into network intrusions and physical intrusions. This article will tell you a story about physical intrusions. The

Some time ago, after reading the "clean code", I found that many of these methods help to write more secure code. I used to read some web apps and found some vulnerabilities in the coding style. For example, a CMS has the functions of document

1. http://www.buynow.com.cn/search.php? Goods_id = 122079535 [SQLi]2. http://www.buynow.com.cn/article.php? Article_id = 220 [SQLi]3. http://www.buynow.com.cn/goods_kinds.php? Act = list & cat_id = 50020211 [SQLi]4. http://www.buynow.com.cn/help.php?

1. the real name of personal information exists in the stored xss2. The name of the receiver of the shipping address and the street address have stored xss, but the length limit is imposed on the server. A little effort3. There is also a zip code, a

Title: Ushahidi 2.2 Multiple VulnerabilitesAuthor: shpendk www.2cto.comAddress: http://download.ushahidi.com/Affected Versions: 2.2Test Platform: Xampp on Windows 1) CSRF Add Admin PoC: Bytes ----------------------------------------------------------

Backup with low Msql permissions drag the entire databaseFirst, run the backup statement backup database to disk = 'path' below the SQL statement ':Run successfully: Find OK. bak in the backup directory, and then take an important step to restore

If the original comparison information such as snapshot, Hash, and timestamp is not retained, this can only be traversed ...... The Method for Determining the file modification time is not advisable because the attacker may greatly modify the file

The sky classroom has an excellent course system, which is a system used by instructors to make multimedia courseware.More than N universities in China are in use...1. SQL Injection exists in the excellent course system. You can directly obtain the

Note:I recently saw an article on the forum titled "all-around Daniel", with emotion. In fact, the so-called "all-around" is a solid foundation for basic knowledge. Although this article is not "omnipotent", it is not a big task. It only proves that

I also accidentally discovered it. I don't know if anyone has ever posted it.The vulnerability occurs in akcms_keyword.php.$ I = strpos (_ FILE __, 'akcms _ keyword. php ');$ Mypath = substr (_ FILE __, 0, $ I );Include $ mypath. 'akcms _ config.

 What pig saw was that it was another way of thinking to verify penetration.  Get WEBSHELL ~ Ding ding is very comprehensive and has no such defect. He wrote a micro-engine FTP and SQL2005, which is not allowed to escalate permissions by regular

First Article: http://www.bkjia.com/Article/201205/131109.html is the foundation of xss. Now let's take a look at the xss practice: First:TakeWww. B2B .cnPerform the test. Test and search with labeled characters"/You can check whether any search

0 × 00 breakthrough in dongle kitchen knife# Principle: BAD: caidao-> safedog-X-> backdoorGOOD: caidao-> middle-> safedog-> backdoor-> middle-> data sent by caidao kitchen knife will be intercepted by dongle, because the data sent by the kitchen

Read the backdoor tips with me: Pick, modify, hide, and hide the example first. Example 1: You are recognized only when you have a glance in the directory. Why are you so outstanding?     Suspicious: file name, time, and size. (Experienced people

Insert the QQ space log into XSS to enable friends to open a pop-up window in their QQ spaceIn fact, I don't know what XSS is. I also accidentally discovered it! A pop-up window appears when a friend opens his QQ space! You can try it!I don't know.

There are three questions in total, and the difficulty increases in turn. In a js function, if a variable can be enclosed in single quotes without being escaped or filtered, the entire function can be closed and the remaining content can be directly

Kingdee network improper design can modify any user password problems appear in the password retrieval address: http://id.kingdee.com/password/forgot.action mobile phone retrieval password, because of the mobile phone verification code is not strict,