cnbird_个人页
cnbird
文章
4017
问答
3
视频
0
个人介绍
阿里云安全专家，主要负责阿里云云产品安全。
擅长的技术
-
发表了文章 2012-05-09
informix pentest
http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.
-
发表了文章 2012-05-08
连续IP生成器
#!/bin/sh for i in `seq -f "172.16.40.%g" 3 26` do echo $i done
-
发表了文章 2012-05-08
thinkphp remote exploit
lib/ThinkPHP/Vendor//Vendor/module/action/param1/$%7B@print(phpinfo())%7D ...
-
发表了文章 2012-05-07
dell m14x 驱动 WIN7 64位
http://www.dell800.com/thread-56276-1-1.html
-
发表了文章 2012-05-06
PHP CGI Argument Injection
CVE ID: CVE-2012-1823 PHP是一种HTML内嵌式的语言，PHP与微软的ASP颇有几分相似，都是一种在服务器端执行的嵌入HTML文档的脚本语言，语言的风格有类似于C语言，现在被很多的网站编程人员广泛的运用。
-
发表了文章 2012-05-03
Hijacking SSH Agents
export SSH_AUTH_SOCK=/tmp/ssh-tqiEl28473/agent.
-
发表了文章 2012-04-26
FCKeditor本地test.html
FCKeditor助手 by jacks function BuildBaseUrl( sUrl,command ) { if(sUrl.indexOf("http://")
-
发表了文章 2012-04-25
Application Security Logging
How to Do Application Logging Right is the best guidance I have come across to date.
-
发表了文章 2012-04-23
影子发的渗透测试导图
http://hi.baidu.com/p3rlish/blog/item/51c448399f4c02d33a87cee0.
-
发表了文章 2012-04-23
XSS Shortening Cheatsheet
In the course of a recent assessment of a web application, I ran into an interesting problem.
-
发表了文章 2012-04-23
PhpMyAdmin setup.php RFI Attacks Detected
SpiderLabs is the corporate sponsor of the WASC Distributed Web Honeypots Project which is an ...
-
发表了文章 2012-04-23
NfSpy – ID-spoofing NFS Client Tool – Mount NFS Shares Without Account
http://www.darknet.org.uk/2012/04/nfspy-id-spoofing-nfs-client-tool-mount-nfs-shares-without-account/ https://github.
-
发表了文章 2012-04-18
McAfee Web Gateway And Squid Proxy 3.1.19 Bypass
http://packetstormsecurity.org/files/111842/McAfee-Web-Gateway-And-Squid-Proxy-3.
-
发表了文章 2012-04-18
source conference archive(包括视频)
http://www.sourceconference.com/archive/ http://www.
-
发表了文章 2012-04-18
dom xss scanner
http://code.google.com/p/ra2-dom-xss-scanner/downloads/detail?name=ra.
-
发表了文章 2012-04-17
数据库攻防实践与SOX安全审计
http://security.ctocio.com.cn/39/12311539.shtml http://tech.
-
发表了文章 2012-04-17
使用 Spring 2.5 注释驱动的 IoC 功能
http://www.ibm.com/developerworks/cn/java/j-lo-spring25-ioc/ ...
-
发表了文章 2012-04-17
Current O2 support for analyzing Spring MVC
During the past week I spent some time documenting O2's support for Spring MVC apps.
-
发表了文章 2012-04-17
Slide Show: 10 SQL Injection Tools For Database Pwnage
http://www.darkreading.com/galleries/security/news/232900180/slide-show-10-sql-injection-tools-for-database-pwnage.
-
发表了文章 2012-04-16
iBatis解决自动防止sql注入
#xxx# 代表xxx是属性值,map里面的key或者是你的pojo对象里面的属性, ibatis会自动在它的外面加上引号,表现在sql语句是这样的where xxx = 'xxx' ; ...
-
发表了文章 2012-04-16
Spring+Ibatis集成开发实例
http://blog.csdn.net/daryl715/article/details/1760793 首先简历数据库demo(本文选mysql) 数据库脚本： CREATE...
-
发表了文章 2012-04-16
ibatis学习（三）---ibatis与spring的整合
http://www.blogjava.net/freeman1984/archive/2007/12/07/166112.
-
发表了文章 2012-04-16
超强JSP防SQL注入攻击
第一种采用预编译语句集，它内置了处理SQL注入的能力，只要使用它的setString方法传值即可： String sql= "select * from users where usern...
-
发表了文章 2012-04-14
Oracle数据安全解决方案系列-----Database Vault安装篇
http://space.itpub.net/3704/viewspace-559855 http://www.
-
发表了文章 2012-04-12
sql 2008注入经验
select top 1 oid,name from(select top 1 oid,name from [active].
-
发表了文章 2012-04-12
SQL2005/2008手工注入之批量爆数据for xml path
http://www.cqsec.com/read/SQL2005_2008_Injection_By_Hand_For_XML_Path ...
-
发表了文章 2012-04-10
Drupal FCKEditor/CKEditor PHP Execution
http://packetstormsecurity.org/files/111157/Drupal-FCKEditor-CKEditor-PHP-Execution.
-
发表了文章 2012-04-10
Liferay Java code execution
http://xhe.myxwiki.org/xwiki/bin/view/XSLT/Application_Liferay http://www.
-
发表了文章 2012-04-10
Snort 2 DCE/RPC preprocessor Buffer Overflow
http://www.exploit-db.com/exploits/18723/
-
发表了文章 2012-04-09
Fusker - A NodeJS Security Framework
http://www.slideshare.net/wearefractal/fusker-a-nodejs-security-framework-8850586 http://bishankochher.
-
发表了文章 2012-04-09
SQL Injection through HTTP Headers
http://resources.infosecinstitute.com/sql-injection-http-headers/ ...
-
发表了文章 2012-04-06
oracle attack module
https://github.com/carnal0wnage/carnal0wnage-code/tree/master/oraclemodules_public ...
-
发表了文章 2012-04-06
Http-Only is not secure [testing]
Its been a while since i posted. I've been bogged down with code reviews and training but even...
-
发表了文章 2012-04-04
automation sdlc
1. construction CWE,CAPEC,CCR 2.verification CWE,CWRAF,CWSS,CAPES,CCR 3.
-
发表了文章 2012-04-04
expression language injection
http://www.wisec.it/sectou.php?id=4e6e1cae16dc7 https://www.
-
发表了文章 2012-04-04
simeon和Frank写的书支持一下
Web渗透技术及实战案例解析 http://www.phei.com.cn/module/goods/wssd_content.
-
发表了文章 2012-04-01
HTML5 Top 10 Threats Stealth Attacks and Silent Exploits
HTML5 is an emerging stack for next generation applications.
-
发表了文章 2012-04-01
sqlmap gui
This is a awesome sqlmap python gui made by xcedz.
-
发表了文章 2012-04-01
sql injection
http://code.google.com/p/sqlifuzzer/downloads/detail?name=sqlifuzzer-0.
-
发表了文章 2012-04-01
OWASP Top 10 Tools and Tactics
http://resources.infosecinstitute.com/owasp-top-10-tools-and-tactics/ http://www.
-
发表了文章 2012-03-31
websploit
http://code.google.com/p/websploit/
-
发表了文章 2012-03-29
jboss pentest
http://www.redteam-pentesting.de/en/publications/jboss/-bridging-the-gap-between-the-enterprise...
-
发表了文章 2012-03-29
solaris 9 下载
http://web.cs.sunyit.edu/network/downloads/OperatingSystems/Solaris/x86/Solaris_9_0904/sol-9-u7-install-x86.
-
发表了文章 2012-03-27
近期要购买的书籍
1.IT治理 http://product.china-pub.com/198862&ref=browse 2.
-
发表了文章 2012-03-26
struts2 xsltResult Local code execution vulnerability
the file: http://svn.apache.org/repos/asf/struts/struts2/trunk/core/src/main/java/org/apache/struts2/views/xslt/XSLTResult.
-
发表了文章 2012-03-24
安全设计原则
https://buildsecurityin.us-cert.gov/bsi/articles/knowledge/principles.
-
发表了文章 2012-03-23
SAP Direct Browsing URLs for Pentesting
List of SAP HTTP Resources to hack at… /rep/build_info.
-
发表了文章 2012-03-23
Using SQLMap for Automated Vulnerability Assessment
Vulnerability assessors and code auditors are often faced with situations where a large volume ...
-
发表了文章 2012-03-22
owasp appsec
https://www.owasp.org/index.php/OWASP_AppSec_Research_2010_-_Stockholm,_Sweden https://www.
-
发表了文章 2012-03-22
setup a fake ap with backtrack5
Recently I needed to setup a fake access point for a presentation, I fired up my Backtrack5 ...
暂无更多信息
-
发表了文章
2018-02-06
Microsoft BuleHat 2018 Videos and Slides
-
发表了文章
2018-02-05
From Serialized to Shell :: Auditing Google Web Toolkit
-
发表了文章
2018-02-01
Microsoft Ignite Videos
-
发表了文章
2018-02-01
AWS Reinvent 2017 Security Sessions
-
发表了文章
2018-01-28
Google Patent
-
发表了文章
2018-01-28
GOOGLE CLOUD PLATFORM 安全性
-
发表了文章
2018-01-21
OBIEE Pentest
-
发表了文章
2018-01-20
分布式系统
-
发表了文章
2017-12-06
MTCS Certification Scheme
-
发表了文章
2017-12-03
Attack OGC WFS Implementation
-
发表了文章
2017-11-20
Alictf 2015决赛题目设计和解题思路
-
发表了文章
2017-11-12
Lync server 2013 部署开发常用工具下载
-
发表了文章
2017-08-23
Big Data Secuity Solution
-
发表了文章
2017-08-11
Google漏洞过滤规则研究
-
发表了文章
2017-08-10
INTEL Processor Trace for vulnerability discovery
-
发表了文章
2017-08-04
AWS自动化合规slide
-
发表了文章
2017-08-04
Secure Multi-party Computation
-
发表了文章
2017-08-01
Harvesting the Low-hanging Fruits: Defending Against Automated Large-Scale Cyber-Intrusions by Focus
-
发表了文章
2017-07-29
Blackhat 2017&Defcon 25学习笔记
-
发表了文章
2017-07-25
MapReduce技术的初步了解与学习
滑动查看更多
-
回答了问题
2015-02-02
【安全测试分享】阿里巴巴安全测试专家分享，等你来挑战！
Re【安全测试分享】阿里巴巴安全测试专家分享，等你来挑战！ 支持王挺，我是来支持王挺的赞0 踩0 评论0 -
提交了问题
2014-04-30
ECS可以做负载均衡吗
-
回答了问题
2014-04-30
ECS可以做负载均衡吗
ReECS可以做负载均衡吗 好的我去试试赞0 踩0 评论0
滑动查看更多
暂无更多信息