Tag: security

android

An in-depth look at the OkHttp series (four) from the official HTTPS

February 4, 2024

by Logan Thompson

No Comments

Connectivity to as many hosts as possible. That includes advanced hosts that run the latest versions of boringssl and Less out of date host...

Read More

reading

How to improve left-shift security in SDLC?

February 4, 2024

by Harriet Simpson-Cox

No Comments

For most developers, application or software security is not a daily concern. In particular, mandatory phishing training and network layer defense are obstacles to timely...

Read More

The back-end

Great wisdom to teach you to learn Java | Spring Boot project set X – the content-type – Options response headers

February 4, 2024

by Thomas Hutchinson

No Comments

When we are developing the application system, we will always encounter various loopholes. Even after the project is launched, party A will find a company...

Read More

The back-end

【Tryhackme】 Archangel (LFI+ file parsing vulnerability getShell, modify $PATH PATH +SUID option)

February 4, 2024

by Miraan Bajwa

No Comments

Disclaimer Found service infiltrate 80 port burst directory /flags turn to YouTube a video, no other info, should be a rabbit hole Other folder no...

Read More

The back-end

In the era of big data, do you really know App data privacy security?

February 4, 2024

by 金郁婷

No Comments

Brief introduction: Have you ever had the experience: you chat with your friends and say that you want to buy a certain product recently, and...

Read More

The back-end

Tryhackme Startup (Wireshark datagraph)

February 4, 2024

by Ashley Johnson

No Comments

Disclaimer service scan enabled FTP, SSH, HTTP services Anonymous login FTP all files downloaded to local analysis, FTP folder has nothing in it, but this...

Read More

reading

Exploration and practice of building enterprise Serverless Container platform based on K8S

February 4, 2024

by Hayley Price

No Comments

At present, Kubernetes has become a truly enterprise-level container choreography specification, and many cloud platforms have begun to provide container services compatible with Kubernetes interface....

Read More

The back-end

MaxCompute Accesses TableStore(OTS) data

February 4, 2024

by Tamara Foster

No Comments

Abstract: As the core computing component of Alibaba Cloud Big data platform, MaxCompute undertakes most of the distributed computing requirements inside and outside the group....

Read More

The front end

CSP: Let me introduce you to my father, Performance

February 4, 2024

by 李家瑋

No Comments

This article focuses on the idea of using PerformanceAPI to assist in writing domain name lists in CSP directives. It is not a best practice...

Read More

The back-end

SQL Injection Problems

February 4, 2024

by Jackson Thomas

No Comments

This is the second day of my participation in the first Text challenge of 2022. This is the first text challenge of 2022. This is...

Read More

The code of life

[Network security] Automatic analysis and killing of Agent memory horse

February 4, 2024

by Kenneth Smith

No Comments

The starting point of the preface is automatic analysis and killing of The Java Agent memory horse. In fact, other memory horses can be killed...

Read More

reading

Ultimate Guide: 12 tips for Making Nginx Servers harder

February 4, 2024

by Tony Robinson

No Comments

Nginx is a lightweight Web/reverse proxy server and E-mail (IMAP/POP3) proxy server distributed under a BSD-like protocol. In fact, the concurrency of NGINx is indeed...

Read More

The front end

Can you read all the data on your computer with just a few lines of JS?

February 4, 2024

by 王家銘

No Comments

Can you read all your data on your computer/phone with a few lines of JavaScript, and a web page in your browser read all your...

Read More

The back-end

CSRF for Web security vulnerabilities

February 4, 2024

by 李俊賢

No Comments

Before we can understand CSRF, we need to understand two premises. First of all, there are many ways to verify login permission. At present, most...

Read More

The development tools

Clash For Windows Remote Code Execution Vulnerability Reoccurrence & Analysis

February 4, 2024

by Shayak Krishnan

No Comments

Clash For Windows Remote code execution vulnerability Replay & analysis: only For learning communication, do not use illegal! What is Clash

Read More

The back-end

How do I use the Apache APISIX CSRF security plug-in to intercept cross-site forgery attacks

February 4, 2024

by Anna Saunders-Baker

No Comments

This article describes the working mode and use method of CSRF plug-in in detail. It is hoped that this article can make you have a...

Read More

reading

Adult breakdowns are quiet: How much you can survive, how much you can achieve – afterthoughts

February 4, 2024

by Charlie Powell

No Comments

Read this article, very touched, although the work is only a few years, but will still encounter things. Deliberately copied part of their deepest feelings...

Read More

The back-end

Personal understanding of ConcurrentHashMap1.8

February 4, 2024

by Mandy Gray-Dunn

No Comments

ConcurrenHashMap. Here is my understanding of ConcurrentHashMap, mainly for personal notes. If something is wrong, please criticize. HashMap has "seriously" aroused my curiosity about the...

Read More

reading

Eternal Blue Combat – Bug reappears

February 4, 2024

by Angela Allen

No Comments

Environment preparation target: 192.168.164.129 (Win7) Vulnerability: MS17-010 (Eternal Blue) Purpose: Get the highest permission, remote code execution 1, determine the target and vulnerability 1, MSFConsole...

Read More

The code of life

A historical vulnerability analysis and recurrence of the entire process

February 4, 2024

by 孫飛

No Comments

Deploy the JSPXCMS installation package to Tomcat. After the JSPXCMS installation package is decompressed, replace the ROOT directory of Tomcat with the ROOT directory of...

Read More

The back-end

Counterfeit signature attacks are frequent for foreign trade industry precision fishing

February 4, 2024

by John Armstrong

No Comments

Recently, 360's core security team has detected the spread of a Trojan horse that attacks personnel in the foreign trade industry. This Trojan horse is...

Read More

The development tools

Problems with OpenVPN – Source code analysis

February 4, 2024

by Amber Mccormick

No Comments

When the client-to-client mode is enabled and the Tun mode is used, do not assume that all the clients and servers are in the same...

Read More

The back-end

CopyOnWriteArrayList internal working principle analysis

February 4, 2024

by Louise Evans

No Comments

CopyOnWriteArrayList is a concurrency utility class introduced by Doug Lea in JDK1.5, CopyOnWriteArrayList is actually a thread-safe ArrayList, but it's a little different and it's...

Read More

Artificial intelligence (ai)

Detail malicious code detection technology based on machine learning

February 4, 2024

by William Mendoza

No Comments

Because machine learning algorithms can mine deeper connections between input features and make full use of the information of malicious codes, the detection of malicious...

Read More

The back-end

Small ideas for session utilization

February 4, 2024

by Arnav Mane

No Comments

Session file inclusion and session deserialization are two common methods of session deserialization. Session file inclusion and session deserialization are two common methods of session...

Read More

The back-end

Security classic JWT algorithm vulnerability

February 3, 2024

by Ms. Jacqueline Scott DVM

No Comments

1. What is JWT? JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and independent method for securely transferring information...

Read More

The back-end

Summary of penetration testing ideas

February 3, 2024

by Karen Wallace

No Comments

First, "Metasploit Penetration test devil training Camp" and other books have been more reasonable and thorough division of the penetration test procedures, but I feel...

Read More

The code of life

Summary of Web Service Penetration Test

February 3, 2024

by Hilary Reed

No Comments

Web Services Are platform-independent, low-coupling, self-contained, programmable Web-based applications that use open XML (a subset of standard Common Markup Language)

Read More

The development tools

📚 Metasploit Penetration testing books

February 3, 2024

by Donald Coleman

No Comments

Metasploit Penetration testing books

Read More

The back-end

Common LAN attacks from switch security configuration

February 3, 2024

by David Patterson

No Comments

To build a zero-trust network, network access (NAC) is indispensable, which involves some security tests of switches, hence the article "Common LAN Attacks seen from...

Read More