From the Baidu space to China blog vulnerability-vulnerability warning-the black bar safety net

These days there are always friends to ask me in ten period of black anti-on introduction to ajax hacking degree of influence exactly how much, and how for this stage of the network status of the web2. 0 vulnerability testing, and use of, this time by means of black anti-for everyone to see for...

Find out IIS the hidden website-vulnerability warning-the black bar safety net

Is entered before, we first take a look at, the intruder is a How to in our on the host to establish a hide site. Open IIS Manager-select a folder-right click-select“Resource Manager”, switch to the site's root directory, create a new folder here named“liuqq”, then we have to“x:\windows\system32”...

Using a reverse connection break the tcp/ip limit of the process-vulnerability warning-the black bar safety net

Everyone is engaged in unicode when there's no found sometimes tftp fails, that is the other host is forced to close a remote connection, this situation generally is the other administrator for the tcp/ip or the firewall's sake, yesterday I after testing, found a way to break this limitation of t...

Hack of the classic tutorial of buffer overflow and decryption(a)-vulnerability warning-the black bar safety net

The buffer overflow weakness was born in the 7 0's. Morris Worm8 0'scan be considered their first public application. From the 9 0's, related document, such as the famous Aleph1's”Smashing the Stack for Fun and Profit”and code has been on the Internet disclosed. This article is about some need to...

Lianzhong game lobby GlobalLink glItemCom.dll SetInfo()use analyze-vulnerability warning-the black bar safety net

author: voidph4nt0m.org pub: 2008-09-04 http://www.ph4nt0m.org Text Mode Affected version: Lianzhong game lobby 2. 7. 0. 8 2 0 0 7 years 8 months 1 6, released Unaffected version: Ourgame also didn't fill :- Genesis: With all the programmers are too trusting user input,not detecting the user...

A variety of URL deception of the century-vulnerability and early warning-the black bar safety net

This article has been published inhack the X-Filesmagazine issue 9..evil octal Starter..reprint please indicate the copyright. Author BLOG:http://www. ciker. org/ No. 7 of the X-Fileshanging horse,don't forget phpwind Foruma text reference to the URL of the cheating ways has caused me great...

Without the lsass process to decrypt the system administrator password-vulnerability warning-the black bar safety net

【Original copyright, the Sadie Starter, cooperation website for reprint please indicate the source“newsdesk”and Article author! Decline of non-cooperation website reprint, the offender, the newsdesk will retain pursue its legal responsibility rights!】 Lsass. exe is a Windows system is an essentia...

The new network Union television system vulnerabilities-vulnerability warning-the black bar safety net

Today idle with nothing to do, went to the web to download Hu GE parodied the gold armor on the curse of the full overtime Group on the view. Inadvertently found that the station's software leaderboard on the new affiliate video system v2. 0 popularity index is quite high, so I just put this syst...

Use ntfs streams to hide files-the vulnerability warning-the black bar safety net

Everyone put on an ntfs partition the files are copied to non-ntfs partition, may occasionally encounter the following situations, the system prompts will have data lost, what is this? ! Actually the ntfs file system is introduced into the"flow"of this concept, each file can have multiple streams...

Just one line of code to make IE 6 crash-vulnerability warning-the black bar safety net

News source:immike A Japanese blog found that just one line of code will make IE6 crash,the code is as follows: styleposition:relative/styletableinput/table This line of code in Firefox,Safari and Opera all parse correctly,however in IE 6 It will cause the mshtml. dll fatal error. If you want to...

firefox break 0day high-risk vulnerabilities: Cross Browser Scripting-vulnerability warning-the black bar safety net

firefox break high-risk vulnerabilities, perform local program. At the same time using IE and firefox users, please note that bug fixes it! Monyer published temporary workaround: put the following code into the Run box, run, or saved as. bat double-click to run, or in cmd run: reg delete...

Examples of the use of Cookies files of the advanced deception techniques-vulnerability warning-the black bar safety net

First, a few basic concepts cookies deception, is in only for the user to do the cookies the authentication of the system, by modifying cookies of the content to obtain the appropriate user permissions to log on. So what is cookies?, I'm here to give you a professional explanation, cookies are...

cmd or shell under the Read terminal of the port-bug warning-the black bar safety net

General method regedit /e c:\3389.reg "HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" type c:\3389.reg | find "PortNumber" del c:\3389.reg 2. xp and 2 0 0 3 Under reg query "HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\Control\Terminal...

IE (7 9+ Exes) NCTAudioFile2. AudioFile ActiveX Remo-vulnerability warning-the black bar safety net

/ ------------------------------------------------------------------------------------------------- PoC 7 9 Exes's / IE NCTAudioFile2. AudioFile ActiveX Remote Stack Overfl0w Auther: InTeL original Advisory: http://secunia.com/secuniaresearch/ Attack Vector: EIP smash Type: Remote Malicious...

About ani 0day simple analysis-vulnerability warning-the black bar safety net

Would have been no effort with this vulnerability, but today to listen to the swan in the irc said the online exp use is not good enough, covers only 2 bytes, so the afternoon using a bit of free time to talk a bit. In my xp sp2 cn, full patches, the vulnerabilities occur in the following places...

Moving-2 0 0 6 file upload vulnerability principle and the attack implemented-vulnerability warning-the black bar safety net

Preface: This article is only to let everyone know about this vulnerability, please do not attack others! Action-the recent explosion of a vulnerability, much noise uproar, a lot of big stations have hung up. The use of 2 0 0 3 year of a vulnerability, the very old, in front of a burst of...

The big data library default address-vulnerability warning-the black bar safety net

/data/dvbbs7. mdb Action Network Forum database /databackup/dvbbs7. mdb Action Network Forum database /bbs/databackup/dvbbs7. mdb Action Network Forum database /admin/data/qcdnnews. mdb green to create article management system database /data/qcdnnews. mdb green to create article management syste...

Alternative crack the pigeon connection password-vulnerability warning-the black bar safety net

Author: black lantern Black Mask） Source: Black Mask'blog Articles have been published in the hacker X-Files of 2 0 0 6 year 1 1 issue of the magazine, reproduced please indicate the Dove gray for everyone is no stranger to it, his powerful features are make you Black fraternity not interpretatio...

MS Internet Explorer (FTP Server Response) DoS Exp-vulnerability warning-the black bar safety net

!/ usr/bin/perl MS 07-016 FTP Server Response PoC Usage: ./ ms07016ftp.pl LISTENIP Tested Against: MSIE 6.02900.2180 SP2 Details: The response is broken into buffers, either at length 1 0 2 4, or at '\r\n'. Each buffer is apended with \x00, without bounds checking. If the response is exctly 1 0 2...

For iis write permissions of use-vulnerability warning-the black bar safety net

We may have seen the remote analysis of IIS settings, which iis a variety of settings for the analysis, I here for iis write permissions to the analysis, the following reference to the remote analysis of IIS Settings article for iis write permissions to the analysis of the content: Write...

With ASP Trojan FTP and decompression-vulnerability warning-the black bar safety net

In broilers placed on the website,the most troublesome is probably the update and upload a lot of files, Terminal Services broad daylight easy to be found,open your own ftp and not assured. Your own online in a circle is found by combining the non-component upload asp Trojan can be easily achieve...

3 3 8 9 password sniffing-vulnerability warning-the black bar safety net

Arp spoofing plus sniffing, play black friends must not unfamiliar, we play the most is in the same network sniffing the ftp password, so generally like penetration of the main station to open a ftp, but more often is the main station on 3 3 8 9 more likely to than ftp large bar, if you can direc...

WEB vulnerabilities mining techniques-vulnerability warning-the black bar safety net

Source: security focus Author: 7all sgh81at163.com WEB vulnerability Mining Technology |=---------------= WEB vulnerability Mining Technology=-----------------------------=| |=-----------------------------------------------------------------=| |=---------------= 7all7all7at163. com...

Who control our browser-vulnerability warning-the black bar safety net

1 phenomenon? From about the beginning of this year, a lot of people will find, when browsing some websites, the address bar url will be somehow plus“? curtime=xxxxxxxxxx”is x is the number, and pop-up advertising window. A lot of people think this is the site your own pop-up advertising, also di...

Teach you in a mirroring system to copy the administrator account-vulnerability warning-the black bar safety net

Often see some people in the invasion of a Windows 2 0 0 0 or Windows NT after the grandly create an Administrator group of users, it seems that when the administrator is not present generally, today, even contrary to what even the previous of the mind, Share one similar to the RootKit thing, of...

Social engineering attack idea of the figure-vulnerability warning-the black bar safety net

!...

Hack tell your network“overrun attack”offense and Defense recorded-vulnerability warning-the black bar safety net

As the network popularity, a large number of public Shellcode“overflow”codeand overflow attacks principle in the security web site to find, thus derived a series of security problems, many know a little about network security knowledge people can use ready-made attack software to easily launch an...

The Windows File System vulnerability in the.- Vulnerability warning-the black bar safety net

Downloadyou will create a c:\con. txt? windows file system vulnerabilities Alas, the finished front of the crap head are blacked out, there is error and tell me Oh. ---------------------------- If you want to con. txt is not very normal? Well, you first go to create, as long as with independent...

CGI Hack finishing-vulnerability warning-the black bar safety net

The General idea, skip the limit, view sensitive files and password-related files. Write the word cgi, into the background try pass webshell（background if the authentication or MD5 over time, you can try to cookies spoofing, local submit, and look for the executable in the directory and the...

Kept in purdah who did not know: FU_Rootkit-vulnerability warning-the black bar safety net

I in 2 0 0 4 year 1 1 period of black anti-posted on the gadgets clever to delete the Guest/Administrator accounts on this article, there are a lot of friends asking about tools is how to write, in fact this tool inside most of the code is my copy FURootkit over. Since friends like, these days I'...

For the domestic Enterprise Security ten vulnerabilities-vulnerability warning-the black bar safety net

The growing dependence on Internet applications in the modern enterprise, evolving security threats and changing regulatory standards so that the maintenance of a trusted network environment becomes a major problem. In today's global economic environment, the company enterprise has never been...

Pass to eat all the Mall-vulnerability warning-the black bar safety net

Tutorial content: Today to teach you a pass to kill the Mall method! of! Is actually change the idea of it!!!! Very simple!! To prepare a site Hunter. Pony. The Malaysian one!! We first go to open site Hunter! Search below this paragraph!! Keywords: To buy-cart-go to the cashier-confirm consignee...

The preparation of the"invisible"Web App(in PHP, for example)-bug warning-the black bar safety net

This year the write things are is no power, dryly,we look at a thing good. Basically CGI scanners this includes the vast majority ofSQL injectiondetection tools, backend/upload/database scanner Are determined by the HTTP response code to determine, is 2 0 0, 4 0 4, 4 0 0 of these, believe that al...

IE mhtml redirection vulnerability using the method-vulnerability warning-the black bar safety net

Author: yunshuAtph4nt0m.org Team: http://www.ph4nt0m.org Data: 2006-05-11 This vulnerability is primarily an information leak, see http://secunia. com/advisories/1 9 7 3 8/specific description. In order to ensure client safety, the xmlhttp is not cross-domain access to information. But the IE...

Appalling analysis 2 0 0 0 0 a MySpace password-vulnerability warning-the black bar safety net

If you don't believe online how dangerous, then, may wish to look at this report, although such as the Nigerian Scam and other means has been widely known and recognized, but fully no one was going to believe it also wouldn't have this way. A foreign friend once accidentally got a MySpace in 2 0 ...

Forgery of Sender Email addresses-bug warning-the black bar safety net

| --- ! !...

Create your own simple Backdoor-vulnerability warning-the black bar safety net

We all know nc is a powerful and flexible hacking tools, he can do many things, such as a telnet client port, such as the invasion of time to bounce back the shell, such as scanning...... But have you ever wondered will he build into a service-level Backdoor? Now much better with me as the rookie...

Lightning cracked 5 seconds beheaded Word document password-vulnerability warning-the black bar safety net

For Word document encryption would have been understandable, but if over time you forget the password? Although the network is flooded with a variety of cracked software, but they are without exception the use of a brute-force way, takes a long time and the success rate low. Today we will use a...

Several home malicious code-vulnerability warning-the black bar safety net

Here to say a few page malicious code:"not is to let everybody put these code into your homepage! Just want everyone to be able to understand the malicious code, play a better protective effect!" A, The Loop code: "Put the following code added to the page, you can achieve the above effects" img...

Two hidden Trojans of the new method(may be some errors, please correct me)-vulnerability warning-the black bar safety net

win9x under the device name DOS vulnerability is all week, in fact win2000 also has a similar vulnerability. We tentatively called the a vulnerability to“to the device name for the folder denial of service vulnerability”, although long ago There's this vulnerability, probably 1 year ago a friend...

Trojan free kill hardcover tutorials-vulnerability warning-the black bar safety net

The first part: of the domestic and foreign antivirus analysis In speaking of the positioning memory feature code before the first analysis of domestic and foreign famous antivirus memory search Kill features. Everyone in the use of the Trojan process will discover, the memory of killing, general...

Internet cafe billing King chain version of the break-vulnerability warning-the black bar safety net

Management software for“accounting Wang chain version”, it's never touched I like to play free, so we'll crack it. After my repeated attempts,“smart ABC”spill is a relatively simple and effective method. Speaking of this method, I am afraid that NO, a known to everybody. It can almost close all t...

ASP database plug horse small conference-vulnerability warning-the black bar safety net

lake2 （ http://lake2.0x54.org ） With the development of technology, ASP database plug horse also is not what fresh stuff, believe you played this. Oh, and that you have not met insert the asp code is spaces apart case? i.e. insertion of each of the characters between the There are spaces for? Now...

Dynamic function monitoring technology in a buffer overflow detection-vulnerability warning-the black bar safety net

Dynamic function monitoring technology in a buffer overflow detection applications Abstract: this article through the Window of the environment under the function of the hijacking method of analysis, and combined with the debugger techniques, the proposed dynamic monitoring process of the functio...

js script kill free tools to avoid killing experience and simple analysis-vulnerability warning-the black bar safety net

Author: bug Information source: evil octal information security team www.eviloctal.com） 本文 所 做 的 实验 是以 ah.jsice Fox a variant,the attachment named"病毒 样本 .txt"as a virus sample,other js malicious code without tests. Since Kaspersky the js killing the intensity is relatively large, and furthermore,...

To shadowless go without a trace anonymous breakthrough network limit-vulnerability warning-the black bar safety net

Network management as the name suggests, is every pipe of the network, and tried various means to restrict our Internet access people. In the network established all sorts of rules, don't download, don't use IM, not allowed to access the restricted site, etc., so we can't enjoy the Internet bring...

LeadBBS v2006 upload vulnerability research-exploit warning-the black bar safety net

POST /User/uploadFile. asp? submitflag=yes HTTP/1.1 Content-Type: multipart/form-data; boundary=@$gxgl Referer: http://webidc.vicp.net/User/uploadFile.asp?submitflag=yes Host: webidc.vicp.net Content-Length: 3 4 5 Cookie: ASPSESSIONIDQQCDQQAQ=OFNPJGMBGGBDEEOJMLGJEMMC; x86AtBD=0; x86Time=2 0 0...

Construct a special file name to bypass multiple anti-virus engine-vulnerability warning-the black bar safety net

Category: design error Threat level: medium BUGTRAQ ID: 1 5 4 2 3 Affected by the anti-virus engine: Kaspersky Antivirus Symantec AntiVirus F-Prot Antivirus ClamWin Antivirus Avast Antivirus RAV AntiVirus Microsoft AntiSpyware Tested version: Symantec AntiVirus Corporate 8.0 Kaspersky Antivirus...

By the PHP imap function to bypass safe mode and open_basedir restrictions vulnerability thought-the vulnerability of early warning-the black bar safety net

Last night in the green League saw this vulnerability announcement, 2 on 2 8, released, is imapopen of the module exists on the vulnerability, a local attacker could use this vulnerability to unauthorized traversal of the mail directory, illegal create, delete, playback command file. The most...

Network box netbox let the rookie easily have their own Super http Backdoor-vulnerability warning-the black bar safety net

A: Preface in today's Microsoft power era, looking for broilers has been not what difficult matter, a variety of fool tools greatly convenient for newbies in the invasion, but often the invasion is successful, how to do a good job the back door, put the broiler as long as the catch is often...