Get the App
  • DiscuzroomX foreground arbitrary file deletion vulnerability reappears

    DiscuzroomX foreground arbitrary file deletion vulnerability reappears

    Vulnerability background: DiscuzroomX community software is a community forum platform with excellent performance, comprehensive functions, security and stability, which is built with PHP, MySQL and many other databases. September 29th, 2017, Discuz! Fixed a security issue to strengthen

    Shulou · 2022-06-01 05:46
  • Sarbanes-Oxley Act (SOX) privileged account Management

    Sarbanes-Oxley Act (SOX) privileged account Management

    What is SOX under the Sarbanes-Oxley Act (SOX)? In response to accounting scandals involving Enron, Tyco, WorldCom and other companies, the Sarbanes-Oxley Act (SOX) was promulgated in 2002. SOX requires not to destroy, alter or tamper with electronics.

    Shulou · 2022-06-01 05:46
  • Access control model

    Access control model

    One of the best ways to defend yourself is to put defense first. By setting who has access to that block of information in a strict way, we can defend against confidentiality, integrity and anonymity. All models fake data managers, data owners, or system administrators to define access control.

    Shulou · 2022-06-01 05:46
  • Ip header checksum calculation

    Ip header checksum calculation

    The calculation method of IP header checksum: 1. Zero the checksum field. two。 Then the binary inverse code is summed for every 16 bits (2 bytes). The inverse code summation means that the sum of every 16 bits is summed first, and then the resulting sum is converted into the inverse code. Next, describe the steps of anti-code summation in detail: take a look at the following code algorithm:

    Shulou · 2022-06-01 05:46
  • Linux command-- cat

    Linux command-- cat

    The cat command is mainly used to view the contents of files, usually text files. In the * test, it is mainly used to view relevant configuration files, password files, etc. The main usage is: cat file name root@kali:~/linuxcmd# cat tes

    Shulou · 2022-06-01 05:46
  • Router upgrade

    Router upgrade

    In privileged mode, Router# copy tftp flash:! Hit enter, then type the IP address, then type the router version number to download and restart the final show version.

    Shulou · 2022-06-01 05:46
  • Call the firewall to block the DDOS initiator IP

    Call the firewall to block the DDOS initiator IP

    [root@linux-node1 ~] # cat fw.shangxinxinxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

    Shulou · 2022-06-01 05:46
  • Why is there ERR_SSL_PROTOCOL_ERROR?

    Why is there ERR_SSL_PROTOCOL_ERROR?

    This article mainly introduces why the emergence of ERR_SSL_PROTOCOL_ERROR, the article is very detailed, has a certain reference value, interested friends must read it! Many webmasters may encounter "E" when installing and deploying SSL certificates in Nginx.

    Shulou · 2022-06-01 05:46
  • Cellular Network Standard and Technology of

    Cellular Network Standard and Technology of "computer Network-Top-Down approach"

    When people talk about cellular technology, they often classify it as belonging to a certain generation. Earlier generations of technologies were mainly designed for voice traffic, and some recent cellular systems also support Internet access in addition to voice. Recent generations have evolved directly from previous generations, so by briefly going back and forth between the first and second generation wireless systems.

    Shulou · 2022-06-01 05:46
  • Proxy settings and search engine and password hash acquisition

    Proxy settings and search engine and password hash acquisition

    1, online agent settings, Baidu input online agent, find a free online agent can be used, but it is always inconvenient, there was a wife cat, the result is now to charge. 2. Proxy server settings: local area network settings in Internet options in IE browser, proxy server IP

    Shulou · 2022-06-01 05:46
  • What is the OKCERT certificate?

    What is the OKCERT certificate?

    The editor will share with you what the OKCERT certificate is. I hope you will gain a lot after reading this article. Let's discuss it together. OKCERT is a top root certificate with global trust, and it is also a well-known domestic brand digital certificate authority in China, accounting for a share of China's domestic market.

    Shulou · 2022-06-01 05:46
  • SQL injection vulnerability tested by DVWA

    SQL injection vulnerability tested by DVWA

    Introduction: about the basic knowledge of sql injection, I also wrote the last article, this article will use the target loophole environment to practice, the so-called practice out of the truth, our trial vulnerability platform is DVWA,Github download address: DVWA about the basic knowledge or posture of injection

    Shulou · 2022-06-01 05:46
  • Tips for blind injection of burp

    Tips for blind injection of burp

    Set the * mode from send to intruder to intruder-position. Custom loading payload to intruder-payloads can be customized to instruder-options-m.

    Shulou · 2022-06-01 05:46
  • What is the subdomain name of https certificate?

    What is the subdomain name of https certificate?

    This article will explain in detail what the sub-domain name of the https certificate is. The editor thinks it is very practical, so I share it for you as a reference. I hope you can get something after reading this article. Among the digital certificates installed on the website, there are many types of https certificate subdomain names, which are better than

    Shulou · 2022-06-01 05:46
  • Instructions on building a local debugging environment for Wechat

    Instructions on building a local debugging environment for Wechat

    As we all know, when developing Wechat, you must enter URL, and the URL must be a public network domain name. This article will take you to use tools to build Wechat local development environment, the principle is to map the public network domain name to the local port through the tool. Tool name: ngrok, I use wind here

    Shulou · 2022-06-01 05:45
  • The word

    The word "process" of production environment

    A copy of a process concept running program is an instruction set process ID (Process ID,PID) number loaded into memory that is used to mark the context of each process UID, GID, and SELinux to determine access to and access to the file system, usually from the

    Shulou · 2022-06-01 05:45
  • 61. OSPF of IPv6 configuration experiment

    61. OSPF of IPv6 configuration experiment

    1. Lab Topology 2, basic configuration R1 configuration interface Serial0/0ipv6 address 2000:12::1/64R2 configuration interface Serial0/0ipv6 address 200s

    Shulou · 2022-06-01 05:45
  • Krypton Series 4-7

    Krypton Series 4-7

    Level 4:Vigenere Cipher encryption, can fight against word frequency statistics, need to know the password, this question knows the key length 6. Http://www.simonsingh.net/The_Black_Chamber/crac

    Shulou · 2022-06-01 05:45
  • OSI seven-layer model and TCP/IP four-layer model

    OSI seven-layer model and TCP/IP four-layer model

    2. Hierarchical relationship one. Physical layer: objective: to ensure the error-free transmission of the original data bit stream. Task: the physical layer defines voltage, interface, cable standard, transmission distance, etc. The physical layer protocol defines four basic functional characteristics of the interface: mechanical properties: it describes the shape and size of the connector used in the interface and the number of leads.

    Shulou · 2022-06-01 05:45
  • Problems with ryu installation in SDN

    Problems with ryu installation in SDN

    Recently, I studied SDN and followed the online steps to install ryu. After the installation, I typed ryu-manager for testing, and found something like Problem: pkg_resources.DistributionNotFound: six > = 1.

    Shulou · 2022-06-01 05:45