Reflective XSS- uses IMG to bypass the blacklist
Preface: This is a reflection type XSS vulnerability dug a few days ago, and it is also the first exclusive SRC vulnerability dug by me...
Read More
Tag: hackers
Zabbix attack surface mining and utilization
January 4, 2024
by Trevor Clark
No Comments
Zabbix is an enterprise-class solution that enables real-time monitoring of thousands of servers, virtual machines, and network equipment for many large enterprises. This topic introduces...
Read More
DLL hijacking vulnerability and thinking
January 3, 2024
by Joyce Khan
No Comments
DLL hijacking, as the name suggests, is to execute the code of an external library (DLL), not a portable executable PE file. Through the search...
Read More
All that bug detection stuff
January 3, 2024
by Keith Fletcher
No Comments
It seems that I haven't posted for a long time, and I'm going to talk about "bug detection stuff" on a whim. There is a...
Read More
Cookie injection
January 3, 2024
by Frank Green
No Comments
In most cases, data can be submitted not only by get and post, but also by cookie. The other party may intercept the two methods,...
Read More
Netizens broke the news: Weibo blocked the currency circle big V
January 3, 2024
by Mr. Maurice Page
No Comments
Recently, Songsong editor Jie Ge learned from netizens that Weibo has also started on the coin circle recently, and began to block the coin circle...
Read More
Emergency Response: Windows Intrusion Detection
January 3, 2024
by Wendy Daniels
No Comments
Incident Response Service (IRS) is an emergency Response Service that causes Service interruption, system breakdown, network breakdown, data loss, enterprise reputation damage, and damage to...
Read More
Remember the routine of digging a hole
January 3, 2024
by Jiya Choudhary
No Comments
Introduction: From the beginning of last month, AFTER the end of those projects, I entered the period of digging holes. My daily work is digging...
Read More
Socks5 agent is configured with FRP to implement Intranet roaming
January 2, 2024
by 陶承翰
No Comments
1. FRPS configure [common]bind_addr=0.0.0.0bind_port=7000token=1234562. FRPC configure [common]server_addr= public ipserver_po
Read More
Network security study: Intranet penetration case, break the penetration bottleneck
January 2, 2024
by Rebecca Hunt
No Comments
BaseDN The BaseDN is the base distinguishable name, which specifies the root of the tree. For example, specify base N as DC=who
Read More
Is it not members who don’t let copy and paste? Look at me “three plate axe”!
January 1, 2024
by 楊婷婷
No Comments
Directory preface Body first board axe second board axe third board axe end preface do not know you have had such experience, we are not...
Read More
Catch them all! Every program ape should understand the hacker technology summary!
January 1, 2024
by Adam Shields
No Comments
The above paragraph estimated that many friends have seen, programmers have been hacked countless times, in the eyes of others, as if we need to...
Read More
I’ll bet you a pack of latiao this is the most detailed code audit on the web.
December 31, 2023
by 馬雅惠
No Comments
Preface This is the ultimate CMSv1.7 vulnerabilities of some new discovery, first from MVC to exploit the vulnerability using MVC first, first open index.php first...
Read More
Code audit of a customer relationship management system
December 31, 2023
by Beth Robinson
No Comments
Point a praise! Now open fOFA daily, confirm the target, right-click the page source code. I can't confirm which CMS is the one without the...
Read More
How many ways can a vulnerability recur?
December 31, 2023
by Lisa Daniel
No Comments
0x00 $this->show cause command execute 2021 latest collation Network security penetration Test/security learning (full set of videos, DFACTORY face classics, quality manual, essential kit) one...
Read More
You can’t imagine the joy of digging holes
December 30, 2023
by Richard Mcclain
No Comments
In the process of vulnerability mining, it is more careful than the ability of asset collection. Often unremarkable front-end files, but always bring unexpected surprises...
Read More
How do I handle server attacks?
December 30, 2023
by Katherine Jones
No Comments
At present, the most common way to solve DDOS attacks on servers is to use hardware firewalls, which is often referred to as high defense...
Read More
How did xiao Bai become a hacker? Follow this route!
December 26, 2023
by 劉懿
No Comments
Hello, I'm Jay Chou. Next, I will write a series of articles to organize the detailed learning steps of network security and recommend learning resources....
Read More
[Vulnerability Analysis] Summary of vulnerability of remote command execution
December 24, 2023
by Ryan Lopez
No Comments
Simple introduction 1. Introduction of FastJson FastJson. Jar package the original download address: https://github.com/alibaba/fastjson FastJson used in the Java Bean serialized as J
Read More
Authentication bypasses vulnerability analysis
December 22, 2023
by 趙雅筑
No Comments
Recently, Tenable disclosed Arcadyna network device authentication bypass vulnerability, and many manufacturers use components that generate vulnerability. Because Arcadyan device firmware manufacturers do not open...
Read More
What is a hacker’s favorite attack vector, technique or method?
December 22, 2023
by Olivia Smith
No Comments
More than 38% of hackers answered XSS vulnerability, followed by SQL injection, fuzzy testing, business logic, information collection, SSRF, RCE, enumeration, reverse engineering, IDOR, Brute...
Read More
White hat hacker and security researcher must — network security basic question and answer 25 cases
December 21, 2023
by Cynthia Rodgers
No Comments
This article mainly introduces the network security most basic 25 questions, is the entry level small white must see the question, for want to learn...
Read More
POST, error, and character injection
December 21, 2023
by Hilary Reed
No Comments
The following tools are recommended: BURp Burp is a proxy tool for browsers and related applications to intercept, modify, and replay data packets. Prerequisite: JAV...
Read More
Is there no data in memory when the computer is turned off?
December 21, 2023
by Jhanvi Loke
No Comments
Hello everyone, I am Jay Chou. What's the first thing that comes to mind when you think about cyberattack techniques? Is a DDoS? Is it...
Read More
Is there no data in memory when the computer is turned off?
December 20, 2023
by Lisa Daniel
No Comments
Hello everyone, I am Jay Chou. What's the first thing that comes to mind when you think about cyberattack techniques? Is a DDoS? Is it...
Read More
PWNHUB July internal race Babyboa, beautiful OR Writeup
December 18, 2023
by Mr. Sean Lane
No Comments
Babyboa examines the use of Boa Webserver's CGI files, and the nice Xor examines the use of reverse analysis of decrypting functions to construct stack...
Read More
How to anti-hacker backdoor procedures
December 18, 2023
by Sean Smith
No Comments
Preface that what, the forehead is not the recent National Day? Because of the epidemic, we are all at home, but such a thing happened,...
Read More
Do not easily try “panda burning incense”, this, I regret!
December 18, 2023
by Judith Smith-Potter
No Comments
Recently, got a "legitimate" "panda burning incense", always want to try to run on their own computer, to see once popular "panda burning incense" run...
Read More
Make a note of a successful code audit
December 18, 2023
by 張雅惠
No Comments
A preface not long ago when shopping CNVD saw a niche CMS, large CMS we can not audit what loopholes, a review of the above...
Read More
Kali Linux — Network Security — Use WireShark to capture packets of common protocols and analyze the principles
December 18, 2023
by Tom Hooper
No Comments
Wireshark is an efficient and free tool for capturing and describing network data packets. Wireshark is free, open source, and multi-platform support. Under the protection...
Read More