cnbird_个人页
cnbird
文章
4017
问答
3
视频
0
个人介绍
阿里云安全专家，主要负责阿里云云产品安全。
擅长的技术
-
发表了文章 2012-03-21
scap
http://web.nvd.nist.gov/view/ncp/repository?page_num=1 http://nvd.
-
发表了文章 2012-03-21
强烈推荐：MySQL十大必备管理工具盘点
http://tech.it168.com/tu/1297158_6.shtml#show
-
发表了文章 2012-03-21
How to Practice Your Web Application Testing Skills
For those who are learning web application security testing (or just trying to stay sharp) it'...
-
发表了文章 2012-03-21
YEAR OF SECURITY FOR JAVA – WEEK 11 – X-XSS-PROTECTION
What is it and why should I care? X-XSS-Protection is a Microsoft IE technology used to help prevent reflected XSS attacks in IE.
-
发表了文章 2012-03-21
A New Venn Of Access Control For The API Economy
Cloud providers and many federated IAM practitioners are excited about OAuth, a new(ish) security technology on the scene.
-
发表了文章 2012-03-21
Protecting your Web Apps from the Tyranny of Evil with OWASP
http://tv.ssw.com/1492/protecting-your-web-apps-from-the-tyranny-of-evil-with-owasp ...
-
发表了文章 2012-03-21
T5WTPYAFGP - Encrypt Sensitive Information
At South by Southwest this year, during my talk Defense Against The Dark Arts - ESAPI I cover...
-
发表了文章 2012-03-13
Implementing DLP: Deploy
Up until this point we’ve focused on all the preparatory work before you finally turn on the switch and start using your DLP tool in production.
-
发表了文章 2012-03-13
Top 20 Security Blogs
Veracode’s nomination for “Best Corporate Security Blog” at the 2012 Social Security Bloggers ...
-
发表了文章 2012-03-12
SQL Injection Cheat Sheet
http://ferruh.mavituna.com/sql-injection-cheatsheet-oku/
-
发表了文章 2012-03-09
wiki
http://en.wikipedia.org/wiki/Top_100_US_Federal_Contractors ...
-
发表了文章 2012-03-09
Exploiting hard filtered SQL Injections 3
This is a follow-up post of the first edition of Exploiting hard filtered SQL Injections an...
-
发表了文章 2012-03-08
源代码泄露
http://bbs2.99nets.com/forum.php?mod=forumdisplay&fid=113&page=1 ...
-
发表了文章 2012-03-07
owasp 人人网沙龙视频
http://v.youku.com/v_show/id_XMzYxODc0OTQ4.html
-
发表了文章 2012-03-07
DPScan Drupal Security Scanner Tutorial
There are different CMS (content management system) are available like wordpress, Joomla, light CMS and Drupal.
-
发表了文章 2012-03-06
分析能力
这天，新上任的邢县长到小吃摊吃早餐，刚找个板凳坐下，就听炸油条的胡老头一边忙活一边唠叨：“大家吃好喝好哦，城管要来撵摊儿了，起码三天你们捞不着吃咱炸的油条了！” 邢县长心里一惊：省卫生厅领导最近要来视察，昨天下午县里才决定明后两天开展突击整治，这老头儿怎么今天一早就知道了？ 哪料这件事还没弄明白，另一件事儿让县长脑袋里的问号更大了。
-
发表了文章 2012-03-06
元谷存储巴士T250 2.5寸USB3.0硬盘盒支持1T 串口SATA硬盘盒3.0
http://detail.tmall.com/item.htm?id=14601884506&wwdialog=bbxxbbmc&prt=1331034541339&prc=1 ...
-
发表了文章 2012-03-06
從 Github 被 Hack，談 Rails 的安全性（ Mass-assignment ）
http://blog.xdite.net/posts/2012/03/05/github-hacked-rails-security/ ...
-
发表了文章 2012-03-06
Full Detailed Basic SQL Injection - Zer0PwN
_,.
-
发表了文章 2012-03-06
google dark
google dork: "YOUR QUERY GOES HERE" {site:codepad.
-
发表了文章 2012-03-06
Testing the Security of Virtual Data Centers
https://community.rapid7.com/community/metasploit/blog/2012/03/05/how-to-own-a-virtual-data-ce...
-
发表了文章 2012-03-06
骗你不是人 硬盘传输速度提升4倍的方法
2010年04月01日 07:22 IT168网站原创 作者：IT168内存硬盘频道 编辑：林伟明 在普通的日子，我们是不会刻意强调内容的真伪，毕竟IT168平时的评测报告是建立在事实的基础上。
-
发表了文章 2012-03-05
java security week
http://www.jtmelton.com/2012/01/02/year-of-security-for-java-week-1-session-fixation-preventio...
-
发表了文章 2012-03-05
Top Ten Web Hacking Techniques of 2011
https://blog.whitehatsec.com/vote-now-top-ten-web-hacking-techniques-of-2011/ Every year the ...
-
发表了文章 2012-03-05
Google Privacy Checklist: What to Do Before Google's Privacy Policy Changes on March 1
http://www.pcworld.com/article/250950/google_privacy_checklist_what_to_do_before_googles_privacy_policy_changes_on_march_1.
-
发表了文章 2012-03-05
Checking For Vulnerabilities in Path Fragments
http://www.acunetix.com/blog/web-security-zone/articles/web-vulnerabilities-path-fragments/?ut...
-
发表了文章 2012-03-04
php mvc初学建议
查看一下symfony CodeIgniter cakephp
-
发表了文章 2012-03-04
php mvc开辟系列教程
http://www.cesclub.com/bw/jishuzhongxin/wangluokaifajishu/2012/0103/19238.
-
发表了文章 2012-03-03
java集成的构造方法
1. 子类的构造的方程中必须调用基类的构造方法 2.子类可以在自己的构造方法中使用super()调用基类的构造方法 3.
-
发表了文章 2012-03-01
Sqlmap plugin for BurpSuite
http://blog.buguroo.com/?p=2471
-
发表了文章 2012-03-01
OWASP Top 10 penetration testing software
- Burp Suite
-
发表了文章 2012-03-01
Safely Dumping Hashes from Live Domain Controllers
UPDATE: See http://pauldotcom.com/2011/12/safely-dumping-hashes-now-avai.
-
发表了文章 2012-03-01
美国购物网站排名
http://www.cnblogs.com/zijinguang/archive/2008/04/22/1165469.
-
发表了文章 2012-03-01
渗透测试标准
http://www.pentest-standard.org/ https://www.owasp.
-
发表了文章 2012-02-29
Security Operations Maturity Architecture (SOMA)
http://www.isecom.org/research/soma.html
-
发表了文章 2012-02-29
Faster Blind MySQL Injection Using Bit Shifting
http://www.exploit-db.com/papers/17073/ Faster Blind MySQL Injection Using Bit Shifting ### # http://h.
-
发表了文章 2012-02-29
Bypassing Web Application Firewalls with SQLMap Tamper Scripts
http://websec.ca/blog/view/Bypassing_WAFs_with_SQLMap Web Application Firewalls have become the new security solution for several businesses.
-
发表了文章 2012-02-29
Syhunt: Google V8 - Server-Side JS Injection in vulnerable web apps
http://seclists.org/fulldisclosure/2012/Feb/409 Google V8 Server-Side JavaScript Injection joi...
-
发表了文章 2012-02-28
亚马逊不错的书籍
1. http://www.amazon.com/Qualities-Highly-Secure-Software/dp/1439814465/ref=sr_1_111?s=books&ie=UTF8&qid=1330409500&sr=1-111 2.
-
发表了文章 2012-02-26
信用卡在线支付安全标准与发展
http://www.tppayment.com/html/2011/strategy_0322/266.html
-
发表了文章 2012-02-25
mysql高级渗透经验
concat(0x7C, hex(cc_number), 0x7C) concat(0x7C, ord(substring('11',1,1)), 0x7C) concat(0x7...
-
发表了文章 2012-02-24
Mysql 另类盲注中的一些技巧
http://www.oldjun.com/blog/index.php/archives/62/ # oldjun注：帮朋友打下广告，新书上市。
-
发表了文章 2012-02-24
itil证书查询
https://mylogin.exin.nl/Portal/polarserver.asp?Screen=FrameSet&SID=623C84F6A43AEABC&PageID=151...
-
发表了文章 2012-02-24
SAP NetWeaver Internet Sales - local file read
SAP NetWeaver 7.0 Internet Sales (crm.b2b) has local file read vulnerability.
-
发表了文章 2012-02-24
vsftpd cmds_allowed 权限控制
vsftpd cmds_allowed cmds_allowed=ABOR,CWD,LIST,MDTM,MKD,NLST, PASS,PASV,PORT,PWD,QUIT,RETR,RMD...
-
发表了文章 2012-02-24
CSRF with upload – XHR-L2, HTML5 and Cookie replay
XHR level 2 calls embedded in HTML5 browser can open a cross domain socket and deliver HTTP request.
-
发表了文章 2012-02-24
Website Insecurity: This grinds my gears....
This document reflects my personal opinion on the state of application security.
-
发表了文章 2012-02-24
Session Management Cheat Sheet
https://www.owasp.org/index.php/Session_Management_Cheat_Sheet ...
-
发表了文章 2012-02-24
intro to chrome addons hacking
http://blog.kotowicz.net/2012/02/intro-to-chrome-addons-hacking.
-
发表了文章 2012-02-23
站库分离拖东西提示
http://pnig0s1992.blog.51cto.com/393390/775440 exec master.
暂无更多信息
-
发表了文章
2018-02-06
Microsoft BuleHat 2018 Videos and Slides
-
发表了文章
2018-02-05
From Serialized to Shell :: Auditing Google Web Toolkit
-
发表了文章
2018-02-01
Microsoft Ignite Videos
-
发表了文章
2018-02-01
AWS Reinvent 2017 Security Sessions
-
发表了文章
2018-01-28
Google Patent
-
发表了文章
2018-01-28
GOOGLE CLOUD PLATFORM 安全性
-
发表了文章
2018-01-21
OBIEE Pentest
-
发表了文章
2018-01-20
分布式系统
-
发表了文章
2017-12-06
MTCS Certification Scheme
-
发表了文章
2017-12-03
Attack OGC WFS Implementation
-
发表了文章
2017-11-20
Alictf 2015决赛题目设计和解题思路
-
发表了文章
2017-11-12
Lync server 2013 部署开发常用工具下载
-
发表了文章
2017-08-23
Big Data Secuity Solution
-
发表了文章
2017-08-11
Google漏洞过滤规则研究
-
发表了文章
2017-08-10
INTEL Processor Trace for vulnerability discovery
-
发表了文章
2017-08-04
AWS自动化合规slide
-
发表了文章
2017-08-04
Secure Multi-party Computation
-
发表了文章
2017-08-01
Harvesting the Low-hanging Fruits: Defending Against Automated Large-Scale Cyber-Intrusions by Focus
-
发表了文章
2017-07-29
Blackhat 2017&Defcon 25学习笔记
-
发表了文章
2017-07-25
MapReduce技术的初步了解与学习
滑动查看更多
-
回答了问题
2015-02-02
【安全测试分享】阿里巴巴安全测试专家分享，等你来挑战！
Re【安全测试分享】阿里巴巴安全测试专家分享，等你来挑战！ 支持王挺，我是来支持王挺的赞0 踩0 评论0 -
提交了问题
2014-04-30
ECS可以做负载均衡吗
-
回答了问题
2014-04-30
ECS可以做负载均衡吗
ReECS可以做负载均衡吗 好的我去试试赞0 踩0 评论0
滑动查看更多
暂无更多信息