Tag: security

Hacking Team can monitor iOS users without jailbreaking

February 5, 2024

by Yashvi Jaggi

No Comments

HackingTeam, a monitoring software development company based in Italy, was hacked recently, and 415GB files were leaked. The data leaked by HackingTeam involves at least...

Read More

Secure code audit -PHP

February 5, 2024

by Matthew Brennan

No Comments

Preface: This article: the CMS version is 4.2. The following vulnerabilities are included in CNVD. Environment note: PHP version should use 7.0.9. SSRF: According to...

Read More

Pouch Is officially open source for Alibaba’s own container technology

February 4, 2024

by Toby Peters-Newman

No Comments

Abstract: After the restart of the maintenance of Dubbo, Ali technology in the open source dynamic, at the China Open Source annual meeting, Alibaba formally...

Read More

How to do blockchain project testing?

February 4, 2024

by Angela Martinez

No Comments

Blockchain technology is hot recently, most articles are popularizing the concept of blockchain. Blockchain is likely to be the underlying technology for connected applications in...

Read More

The code of life

Is your Open_basedir secure?

February 4, 2024

by Tiya Wali

No Comments

Open_basedir can restrict user access to a file to a specified area, usually the path to its directory, or the current directory can be represented...

Read More

“Green” does not mean security, a Trojan horse analysis hidden in green software

February 4, 2024

by Dr. Steven James

No Comments

0x00 Background "green software" usually refers to those small software that can be used without installation. These small software can be used directly after running,...

Read More

The code of life

BabaSSL: supports semi-homomorphic encryption algorithm EC-Elgamal

February 4, 2024

by Shlok Sridhar

No Comments

With the rapid development of big data and artificial intelligence, privacy data leakage and abuse happen from time to time, and privacy security has been...

Read More

Ali Android development specification: resource file naming and use specification

February 4, 2024

by Alice Murdoch-Nielsen

No Comments

The pursuit of excellence craftsman spirit, polishing quality code. Full understanding, guided by technical awareness, is the direction of individual learning, team communication and project...

Read More

Android Security Internals chapter 2 Permission Translation

February 4, 2024

by 張婷婷

No Comments

As we said in the previous chapter, Android applications run in a sandbox and by default only have access to their own files and a...

Read More

Digital certificate and its application in security testing

February 4, 2024

by Jake Bailey

No Comments

0x00 Background When performing security tests at the Web level, it is unavoidable to perform man-in-the-middle agent to intercept packets for analysis. Common tools include...

Read More

Exploit the CouchDB unauthorized access vulnerability to execute arbitrary system commands

February 4, 2024

by Sahil Sarma

No Comments

On May 16, Ali Cloud Shield attack and defense team learned from external channels that CouchDB database has unauthorized access vulnerability (in the case of...

Read More

Win2008 FTP 图文教程_ from now on FTP is no longer a problem

February 4, 2024

by Mr. Samuel Richardson

No Comments

Win2008ftp not recently a lot of small friends to help the group ask win2008FTP not

Read More

Pokemon Go could have huge privacy concerns

February 4, 2024

by Dean Wright

No Comments

While we know that Niantic, the company behind Pokemon Go, is part of Google Alphabet, Full Access is required to sign up for an account,...

Read More

Common security problems, defense methods and rescue measures in Webgame

February 4, 2024

by Annette Knight

No Comments

from:http://www.cnxct.com/experience-with-webgame-of-security-and-defense/0x01 background 11 holidays, see a problem on zhihu "web page

Read More

The latest way to access corporate networks from the outside

February 4, 2024

by David Gonzalez

No Comments

0x01 Background Why is entering the Intranet as a goal to discuss, because I think from the attacker's point of view, the core goal of...

Read More

Network security must learn penetration testing process

February 4, 2024

by Chad Fuller

No Comments

This range is a very friendly range for new penetrators. Moreover, the range includes the whole process of information collection, vulnerability utilization and permission promotion...

Read More

Shiro (1)

February 4, 2024

by Jared Finley

No Comments

In the development system, it is necessary to have permissions. Currently, the authorization framework in Java has SpringSecurity and Shiro(formerly called JSecurity). For SpringSecurity, the...

Read More

Spring Security Parsing (2) — Authentication process

February 4, 2024

by Julie Best

No Comments

Remember the previous interpretation of the authorization process mentioned @ EnableWebSecurity cited WebSecurityConfiguration configuration classes and @ EnableGlobalAuthentication comments? WebSecurityConfiguration...

Read More

Is it really possible to remotely control 100 cars like in Furious 8?

February 4, 2024

by 席佳蓉

No Comments

The development of automobile is regarded as another intelligent terminal after mobile phone. It is undeniable that the change from PC to mobile phone has...

Read More

WuDi: dark clouds completed the mission | clouds memoirs (a)

February 4, 2024

by 李龍

No Comments

Dark Cloud Memoir is a special feature produced by technology we-media Xianhei Technology. In 2016, the cloud of vulnerability platform was shut down. A year...

Read More

Hackers use JINGdong vulnerabilities to steal “Beijing beans” nearly 2 million, said after the incident can not find official feedback – black cloud security center

February 4, 2024

by Henry Fraser

No Comments

I bought it anyway

Read More

Network security: Note a code audit

February 4, 2024

by Stanley Watson

No Comments

The thing is, because I CNVD is still a point can be exchanged for JINGdong E card, so I looked for this CMS to see...

Read More

HTTP—- Different request types

February 4, 2024

by Johnny Woods PhD

No Comments

A total of eight request types are defined in HTTP to represent different operations on a given resource, of which the most common are GET...

Read More

Shiro article 3 [Authorization, Custom REAML Authorization]

February 4, 2024

by Rhys Bruce-Griffin

No Comments

Shiro's authorization process is the same as Shiro's authorization process :Shir. Shiro's authorization process is the same as Shiro's authorization process

Read More

WireShark hacker discovery tour – Broiler mail server

February 4, 2024

by 張飛

No Comments

0x00 Background chicken, also known as a puppet machine, refers to a machine that can be remotely controlled by hackers. Once a chicken, it can...

Read More

In-depth analysis of sandbox escape vulnerabilities

February 4, 2024

by Patricia Parsons

No Comments

Root Case The patch adds this judgment to each DatabaseImpl and TransactionImpl interface, leaving it at CO

Read More

The development tools

ERR_UNSAFE_PORT Solution to access failures caused by browser security problems

February 4, 2024

by Michael O'Sullivan-Atkinson

No Comments

ERR_UNSAFE_PORT Inaccessible solution due to browser security problems After the WEB HTTPS server is configured, the ERR_UNSAFE_PORT cannot be accessed when the web browser is...

Read More

How do I prevent Arp attacks

February 4, 2024

by Stephanie Caldwell-Webster

No Comments

You need to find the IP and MAC addresses of gateways. The most direct way to view arp -a is to run arp -a in...

Read More

Little White is mined by the whole Emo horse one day

February 4, 2024

by 王志偉

No Comments

Today, WHEN I opened the server and tried to enter mysql in Docker to test sqlmode, I suddenly found that I could not enter mysql....

Read More