分类 ‘技术文章’ 下的日志
Clickjacking Details
来源： ha.ckers.org
Today is the day we can finally start talking about clickjacking. This is just meant to be a quick post that you can use as a reference sheet. It is not a thorough advisory of every site/vendor/plugin that is vulnerable - there are far too many to count. Jeremiah and I got the final word today that it was fine to start talking about this due to the click jacking PoC against Flash that was released today (watch the video for a good demonstration) that essentially spilled the beans regarding several of the findings that were most concerning. Thankfully, Adobe has been working on this since we let them know, so despite the careless disclosure, much of the work to mitigate this on their end is already complete.
Clickjacking的一些细节
Clickjacking猜想
Clickjacking太猥琐了
入侵骗子站xuehk.com全过程
鬼仔注：本文的亮点在“仔细看过讨论后得知原来用nc反弹回来的shell权限是比webshell权限高的”这句，其实这个以前在 提权之道（关于WNDOWS 2003 目录权限的初探） 中就提到过---“反弹回来的SHELL的权限与网站的权限是不一样的”。
文章作者：落叶纷飞[J.L.S.T]
信息来源：安全叶子技术小组[J.Leaves Security Team] （http://00day.cn）
本文已发表于黑客手册0807期,转载请保留此信息.
这篇文章在两个多月前的时候我就完成了，但是只是做为我自己的入侵笔记来用，并没有想过要投稿。但现在因为比较急用银子，所以就发给N0h4ck献丑了。（为了有人对号入座，我把图片稍稍处理了一下，请读者们见谅）。
PHP二分法注射猜解
来源： wolvez
b.php
<?php
$conn = new com("ADODB.Connection");
$connstr = "DRIVER={Microsoft Access Driver (*.mdb)}; DBQ=". realpath("data.mdb");
$conn->Open($connstr);
$rs = new com("ADODB.RecordSet");
$sql="select * from news where id=".$_GET[id];
$rs->Open($sql,$conn,1,1);
if(! $rs->eof) {
echo "{ok}";
} else{
echo "{no}";
}
?>Serv-U 7.2.0.1 Remote FTP File Replacement Vulnerability (auth)
Serv-U 7.2.0.1 Remote FTP File Replacement Vulnerability (auth)
#Serv-U 7.2.0.1 ftp file replacement
#user must have upload permissions
#
#(x) dmnt 2008-10-01