7620 matches found
PHPMPS 0day-vulnerability warning-the black bar safety net
Author:Minghacker From:http://www.3est.com Blog: http://yxmhero1989.blog.163.com PHPMPS ,masterhttp://www.phpmps.com/to download. v2. 0 official version of GBK and v2. 0 full version UTF8 There are serious security risks, hope you do not destroy, and calmly wait for the official fix upgrade...
PHP extension extension to bypass the upload filter-vulnerability warning-the black bar safety net
To everyone demo a php suffix extension; you can bypass the upload your own test. php extension suffix: php3 php4 php5 php. xxx asp extension suffix: asa asp comes into cdx cer idc pl plex plx shtm shtml stm php can be saved as xx. php. xxx automatically ignore the back of the. xxx may also perfo...
To modify log file properties protect yourself will not be the administrator found that(idea)-bug warning-the black bar safety net
by ha0k The log file location is actually stored in the registry, as long as we modify its attributes to mask their intrusion traces, here just modify the default location, the log size of the property, such as log size 0 0 0 0 0 0 0 1,so that it can not be normal recording, so it can be perfect ...
Can record windows login password stuff-vulnerability warning-the black bar safety net
from: t00ls.net ========Principle: windows Authentication in General are ultimately in the lsass process 默认 模块 是 msv10.dll while critical in its export function LsaApLogonUserEx2, the The present program by injecting code into the lsass process hook LsaApLogonUserEx2, the interception of the...
Analysis of web Trojan analysis automated 2 tricks-vulnerability warning-the black bar safety net
Now online web Trojans and more are several sets of a fixed code, The changes are not many, including script code encryption methods, almost all is to explain the type of encryption, since the hack is performed the process of hanging horse, Inglés for the automated analysis of web Trojan also...
Cute Editor vulnerability-vulnerability warning-the black bar safety net
Affects versions: CuteEditor For Net 6.4 Program description: CuteEditor for ASP. NET is built on an Html Foundation, most easy-to-use, most powerful WYSIWYG Asp. net online editor. Vulnerability analysis: In the Load. ashx file, not the file parameter is processed, you can load any file. Exploit...
PHPWIND & DISCUZ! CSRF vulnerability-vulnerability warning-the black bar safety net
PHPWIND & DISCUZ! CSRF vulnerability affects versions: Discuz! 6.0.0 & 6.1.0 & 7.0.0 PHPWIND 6.0 & 6.3 & 7.0 Vulnerability description: PHPWIND & DISCUZ! The presence of CSRF vulnerabilities, triggering PHPWIND & DISCUZ! CSRF WORM! ... d/b31e4d2e6270c384 reference ... d/b31e4d2e6270c384 Safety...
Analysis Backdoor detection techniques-vulnerability warning-the black bar safety net
First of all we want to know what is the backdoor program? On the network common to the“back door”to explain, in fact, we can use a very simple word to summarize it: the back door is left in the computer system, for a particular use by a particular way of controlling a computer system of the...
iGuard simple break-vulnerability warning-the black bar safety net
Source:Prince InfoGuard,called iGuard,commonly known as the page file to prevent tampering,yesterday night was the stuff of the head,a good study,found a solution,record it. First give a This something to the effect of,just lost a webshell in,not killed,on the server is there,but the access time...
dvbbs7. 0 and 8. 0 access backstage to get webshell-vulnerability warning-the black bar safety net
Create a new database file, named a. mdb Create a new text file, 命名为b.txt and write the word Trojan At the command line enter the command copy a. mdb/b+b. txt/b c. mdb Get the c. mdb is already inserted into the word Trojan in the database Then in the posting the place to upload attachments, the...
MS08-0 6 6 AFD.sys Local Privilege Escalation Exploit (POC)-vulnerability warning-the black bar safety net
Author: Eros412 MS Bulletin : http://www.microsoft.com/technet/security/Bulletin/MS08-066.mspx Calculate IoControlCode process . text:00010B9F mov eax, edx+0Ch ; edx=CurrentStackLocation . text:00010BA2 push esi . text:00010BA3 mov esi, ecx . text:00010BA5 mov ecx, eax ;ecx=IoControlCode...
Good fine enterprise website Management System 2 0 0 7-V09 vulnerability-vulnerability warning-the black bar safety net
Relates to version: fine fine enterprise website Management System2 0 0 7-V09official commercial version The other version did not do the test /Should be all of the/ Vulnerability file: EnProductShow. asp /subsequent versions/ ProductShow. asp /earlier version/ ProductShow. asp /later versions/...
The latest SMSJ Version 8.0 vulnerability-vulnerability warning-the black bar safety net
Author:rover Help a friend testing the site's security, using SMSJ Version 8.0, known as the imitation of the Alibaba stuff, the registered enterprise members, login Manager, find the upload pictures will be categorized into one http://www. rover. com/UserDocument/your registered member account...
Bypass the web environment keyword monitoring attempt-vulnerability warning-the black bar safety net
by Don not Fox http://blog.wang1.cn Problem: win2003+php environment, server installation similar to the“best information monitoring system,”The thing is, for some set of keywords for blocking. So I'm in phpshell, Execute sql queries and system command, you be prompted file does not have permissi...
Verify whether the patch installed three large exploit tools-vulnerability warning-the black bar safety net
We are talking about here is some for creating security tools and exploits program Security Platform. Security experts to perform penetration tests, system administrators can verify whether the patch has been installed, manufacturers can perform regression testing. First, the Metasploit Framework...
Meiping network management family of software vulnerability completely analyze-vulnerability warning-the black bar safety net
My home city, Internet Cafe 1 0 0% with meiping network management system, no way! Also it is only the first look at Mae ping, also hope everyone to the sea Han it! Meiping network management software series actually also should be considered several network management software one! Reputation...
Teach you to kill on the server the ICS firewall-vulnerability warning-the black bar safety net
Now more and more servers using the ICS Firewall, with ipsec to manage the remote login and port security Engage in really want a world without black. Many server directly down but not on the 3 3 8 9, carefully complete analysis didn't find what firewall or fresh software, the ipsec service is...
Disguised as Google Bot breakthrough of the fee website page-bug warning-the black bar safety net
Why some site can be Google search, click on the link to go in after it shows“not registered”and“not a member”? This is a site specifically for the search engine optimization techniques. Then we can also be disguised as a search engine to access these pages. What we need is to modify the browser...
Again break ray client figure ASP webmaster Safety assistant-vulnerability warning-the black bar safety net
Lake2 last in the evil eighth fight, even to put yourself to create the Black anti-ultimatefree killASP Trojan with his ray client figure ASP webmasters security aides tear-kill some, and ultimately of course I win it, the result of course is to successfully“marry”got Lake2 a ASP Trojan, however,...
The use of LINUX systems with DDOS attacks for WINDOWS servers-vulnerability warning-the black bar safety net
Use the moment the most famous of the REDHAT LINUX test,the present attack test I'm using FEDORA CORE3 ,software is the most famousDDOSattack tool TFN2K LINUX version,is to attack the WINDOWS Server system is using Windows 2000 Server service open APACHE2 FTP VNC little relationship,mainly to...
phpBB can be used as HTTP proxy with vulnerability-vulnerability warning-the black bar safety net
Affected system: phpBB Group phpBB 2.0.20 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 1 7 9 6 5 phpBB is a PHP language implementation of a Web-based open source Forum program, the use of more widely. It supports multiple databases as...
js script kill free tools to avoid killing experience and simple analysis-vulnerability warning-the black bar safety net
Article author: bug Information source: evil octal information security teamwww.eviloctal.com to 本文 所 做 的 实验 是以 ah.jsice Fox a variant,the attachment named"病毒 样本 .txt"as a virus sample,other js malicious code without tests. Since Kaspersky the js killing the intensity is relatively large, and...
The use of third-party Internet access software real free Internet access-vulnerability warning-the black bar safety net
New Year's Day the night before, discovered this vulnerability. I was in Jiangsu Changzhou at the school sophomore students. Our school is Nanjing lianchuang company of broadband Internet assistant on the web. This is it, don't know what we black-how many friends, this method can achieve the real...
delphi Trojan DIY of the port complex by the back door implementation-vulnerability warning-the black bar safety net
delphi Trojan DIY of the port complex by the back door. You may want to ask:“why in the Trojan, backdoors are increasingly widespread today, and we also write procedures?” sobiny: “sense of achievement” In fact, the port multiplexing sounds very esotericart, in fact, very simple, simple only need...
Do not think that the installation of a firewall,I political don't you-vulnerability warning-the black bar safety net
How to make tcp packets and udp packets through the firewall by this article httptunnel technology At the same time escaped the firewall shield, as well as the system's tracking test, we can seeNetworksafe to rely only on some or a few of the means are unreliable, while the security system of bli...
Have to say by the campus network see Network Security status-vulnerability warning-the black bar safety net
Preface originally really do not want to write this article, but really can not let people endure. Did not expect the school campus network security situation is actually so bad, one of the most impressive Willy-nilly. Or administrator of quality and safety awareness. Status of the recall a year...
Scotty no trace CleanCache help you erase private history-vulnerability warning-the black bar safety net
In viruses and hackers to wreak havoc today, personal information security is particularly important, so that your information is not leaked out, the usual practice is to clear XP history, we can right-click on“Start”--properties--customize--clear, on the IE Properties window in Microsoft also...
The use of MS vulnerabilities and then talk about elevated permissions WEBSHELL-a vulnerability warning-the black bar safety net
PS:long time no write articles, and today idle all right it's not alright, I'm more depressed, quickly test CET4, but the in the mind have no bottom, and casually throw a garbage article out, hoping to be helpful to everyone. Today I want to bring to everyone is that when we get the WEBSHELL afte...
Guest permissions break 8 law-vulnerability and early warning-the black bar safety net
Guest privilege escalation method summary: Now the invasion is more and more difficult, People's safety awareness have generally increased a lot, even the individual user to understand firewalls, antivirus software and to equipment in hand, for Microsoft's patch to upgrade also no longer is not...
Foreign hackers resources-vulnerability warning-the black bar safety net
allhack.com This website provides a library and a download area. The library for beginners provides hacking knowledge and computer technology basics. The download area includes the Scan Tool, FLOOD tool, decryption tools, denial of service attacks and the like. alw. nih,gov In the security...
Mining of the virus through the Flash vulnerability propagation, a careful computer becomes mine machine-vulnerability warning-the black bar safety net
4 on 24 May, tinder the security team Alarm, the virus groups the use of Adobe Flash vulnerability propagation mining viruses. Virus gang the mining program implanted to the game download Station“52pk”, www.52pk.com when the user visits the website, the poison page to show after, without any...
Struts2 S2-052(CVE-2017-9805)remote code execution vulnerability bug research-vulnerability warning-the black bar safety net
Struts2 S2-052 remote code perform vulnerability bug and the previous Struts2 vulnerability bug there is a difference, S2-052 operating the Java deserialization cracks, rather than reputation notorious ognl in. The flaws of the trigger point is the REST plug-in to parse begged in the xml file, ca...
7z's LZMA compression algorithm with Bitdefender heap buffer overflow vulnerability-vulnerability warning-the black bar safety net
Previously, in order to write that article about 7z PPMD compression algorithm vulnerability of the articles, I read a lot of the 7-Zip source code, and found a lot of very valuable information, this information can better help my analysis of anti virus products, vulnerability in it. So, I'm read...
Google said in the release“of the Android O”the new version will not fix the screen hijacking vulnerability-vulnerability warning-the black bar safety net
Millions of Android smartphones are suffering from a serious“screen hijacking”vulnerabilities, a hacker could steal user passwords, Bank details and help ransomware app to steal money. Google is claiming that publishing the“Android O”version does not fix the vulnerability The worst thing is that...
“Customer Support formula Scam” fresh out of the oven, Microsoft recommends that users timely update-vulnerability warning-the black bar safety net
On the Internet, a variety of fishing and malware advertising scams is increasing, which is a well-known type of Scam is the“Customer Support formula Scam（Tech Support Scam”, and the main way to convince the user to believe their computer problems, and requests you to jump the page to“fix”the...
Hands-on teach you to dig a Western Digital NAS vulnerabilities-vulnerability warning-the black bar safety net
Some time ago on a platform found on the foreign security team broke up the Western Digital NAS products 80 A few vulnerabilities, but did not exploit the details, just in Division I in the use of products in the Western Digital NAS, so there's this article, here in this article is based, the mor...
s2-045 vulnerability analysis-vulnerability warning-the black bar safety net
This analysis write me a little shame, it is strongly recommended to resist struts2, instead of a more reliable SpringMVC in. The background is that the Struts2 default handling of the multipart message of the parser is jakarta, is this component there is a problem. ! The components defined in th...
HEVD kernel vulnerability training of SMEP bypass-vulnerability warning-the black bar safety net
! 0x00 Preface This articles content comparison basis, but also more fun, of course, has been to see the yuan brother mentioned DVE bypass mitigation, on the DVE feel very magical, but I still do not quite understand, very want to learn. Two days before the in security client sent an article HEVD...
The NTP vulnerability can be caused by Windows System trigger DoS-vulnerability warning-the black bar safety net
! The researchers published for cve-2 0 1 6-9 3 1 1 vulnerability PoC of this vulnerability can cause the NTP daemon to crash, and trigger the Windows System to denial of service. The NTP Protocol can be used by hackers to exploit. NTP is a widely used Clock synchronization Protocol, this Protoco...
How to use Rowhammer vulnerability Root Android phone with Video demo+Exploit source code-the vulnerabilities and early warning-the black bar safety net
! Recently, security research experts through research found a root the Android phone to the new method, i.e., by Rowhammer vulnerability to root Android phone. In addition, the attacker can even use this exploit with presently known Android vulnerabilities Bandroid and Stagefright to the target...
discuz the latest version 2 0 1 6 0 6 0 1 SSRF vulnerability analysis and solution-vulnerability warning-the black bar safety net
References SSRF to GET the SHELL tick:the tick-2 0 1 5-0 1 5 1 1 7 9 Vulnerability poc Visit: /forum. php? mod=ajax&action=downremoteimg&message=img=1,1http://23.88.58.149/1.jpg/img&inajax=1&fid=2&wysiwyg=1&formhash=ead1f9a6 Need to bring formhash, you can also post mode request. discuz have a...
Talk about how Python development is rejected SSRF vulnerability-vulnerability warning-the black bar safety net
0x01 SSRF vulnerability common Defense techniques and bypass methods SSRF is a common Web vulnerability, usually present in the need to request external content, such as localized network images, XML parsing when the external entity injection, software offline download. When the attacker passed a...
iOS Trident vulnerability patch analysis, the use of the code published（POC）-bug warning-the black bar safety net
Description 2 0 1 6 years 8 months 2 5,, for the recent emergence of iOS monitoring tool PEGASUS,Apple released important security update:iOS 9.3.5。 And before found the iOS malware is different, this kit uses three different iOS 0 day vulnerability that lets all hit a patchiOS 9.3.5 the...
PHP 7 is due: the deserialization vulnerability case studies and analysis,-vulnerability warning-the black bar safety net
Leak the pointer In a typical PHP-5 deserialization of use, we will use a dispenser to cover a pointer to the string contents of the pointer, thus reading the next stack slot. However, in PHP-7,The internal string representation is different. In PHP-7, The basic structure of the struct zval...
Adobe Flash Player Vulnerability, CVE-2 0 1 6-4 1 1 7）sample analysis-vulnerability warning-the black bar safety net
This year in May, the foreign security experts discovered an unknown Adobe vulnerabilities being exploited. In the vulnerability was disclosed after, Adobe released an upgrade patch for fix this vulnerability, APSB16-1 5, The number for the CVE-2 0 1 6-4 1 1 7 The. At the same time, the CVE-2 0 1...
OpenSSHD user enumeration vulnerability-vulnerability warning-the black bar safety net
! Summary: By sending a long password,a remote user can enumerate on the system running the SSHD user. This problem exists in most of the modern configuration,as compared to the calculation of BLOWFISH hashes,takes longer time to calculate the SHA256 / SHA512 to. CVE-ID:CVE-2 0 1 6-6 2 1 0 Test...
phpwind9. x Md5 Padding Extension vulnerability analysis-vulnerability warning-the black bar safety net
0x00 Preface This is one of the more interesting vulnerabilities, exploits already in the clouds online submitted http://www.wooyun.org/bugs/wooyun-2016-0210850 that official has also released a patch（http://www.phpwind.net/read/3709549 that 并且 安全 研究员 phithon 也 第一时间 发出 了 他 的 漏洞 分析...
HITB16 issues resolution: Java applications ORM injection the development of new methods-vulnerability warning-the black bar safety net
! “Hack In The Box”conference is in Europe in Amsterdam, organized by the global well-known Security Summit. This year's conference very interesting, one by a security researcher Mikhail Egorov and Sergey Soldatov presented the topic“Java application ORM injection the development of new...
The exception in the exception--by means of a system of exception handling exception achieve incredible exploit-vulnerability warning-the black bar safety net
Memory read, write, execute attribute is system security the most important one of the mechanisms. Usually, if you want to overwrite the data in memory, you must first ensure that the block of memory having a write attribute, if you want to execute a piece of code in memory, you must first ensure...
Chrome third-party extensions to be exposed can record private information and sell it-vulnerability warning-the black bar safety net
The Swedish security firm Detectify Labs currently represents some of the Chrome extension app will track The user's Internet history, and even also includes Facebook Connect and privacy of the access token, is connected to a private Dropbox and Google Drive file link. Affect a wide range is not...