cnbird_个人页
cnbird
文章
4017
问答
3
视频
0
个人介绍
阿里云安全专家，主要负责阿里云云产品安全。
擅长的技术
-
发表了文章 2010-02-14
RealNetworks Helix Server URI Traversal Arbitrary File Access
RealNetworks Helix Server URI Traversal Arbitrary File Access Vendor: RealNetworks (http://www.
-
发表了文章 2010-02-13
Practical Intrusion Analysis: Prevention and Detection for the Twenty-First Century
http://www.informit.com/store/product.aspx?isbn=0321591801
-
发表了文章 2010-02-13
Durzosploit javascript exploits
http://engineeringforfun.com/wiki/index.php/Durzosploit_Introduction ...
-
发表了文章 2010-02-13
whois.com was hacked
The popular website WHOIS.com used to check the availability of domain names and the current own...
-
发表了文章 2010-02-13
GuestStealer allows for the stealing of VMware guests from vulnerable hosts based on the Directory Traversal Vulnerability
GuestStealer allows for the stealing of VMware guests from vulnerable hosts based on the Directo...
-
发表了文章 2010-02-12
openbsd 安装向导和优化
http://www.openbsd.org/faq/zh/faq4.html http://v.
-
发表了文章 2010-02-12
RS/HF Wireless Hacking Live-CD (WiFi Slax) - Hack Wifi Add
http://wirelessdefence.org/Contents/WirelessDistros.
-
发表了文章 2010-02-12
Nagios和Cacti系列培训
http://itboba.com/taxonomy/term/959
-
发表了文章 2010-02-12
Penetration testing guide
Standards compliance There are a number of good standards and guidelines in relation to informat...
-
发表了文章 2010-02-12
Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers
Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers1.
-
发表了文章 2010-02-12
Windows SMB NTLM Authentication Weak Nonce Vulnerability
(to get the scripts mentioned by this advisory please get the fullversion at http://www.
-
发表了文章 2010-02-12
Finding Domain Controllers for use with WinScanX using DCLookup.exe
WinScanX Pro is only $10.00 for the month of February (normally $250.
-
发表了文章 2010-02-12
SSL Audit (alpha)
Developed as part of G-SEC's investigation for the"Secure SSL/TLS configuration Report 2010" (to...
-
发表了文章 2010-02-12
Two papers on Oracle 11g Security
Hey all,Since there seems to be a fair bit of disinformation, and utter nonsense, floating aroun...
-
发表了文章 2010-02-12
keimpx: Check for the usefulness of credentials across a network over SMB
Introduction============keimpx is an open source tool, released under a modified version ofApache License 1.
-
发表了文章 2010-02-12
PHP 5.2.12/5.3.1 session.save_path safe_mode and open_basedir bypass
[ PHP 5.2.12/5.3.1 session.save_path safe_mode and open_basedir bypass ]Credit: Grzegorz StachowiakProvided by: SecurityReason.
-
发表了文章 2010-02-11
Cpanel Image Manager Local File Include Exploit
[ Cpanel Image Manager Local File Include Exploit ][~] Author : AnTi SeCuRe[~] TeaM : SauDi ViRuS TeaM[~] Site : WwW.
-
发表了文章 2010-02-11
A Lazy Pen Tester’s Guide to Testing Flash Applications
Yesterday, I received a post in the Pen-Test mailing list requesting for tips/resources on penetration testing of flash applications.
-
发表了文章 2010-02-11
SAP MaxDB versions 7.6.03 suffer from a pre-authentication remote code execution vulnerability.
http://packetstormsecurity.org/1002-exploits/sapone_fc.
-
发表了文章 2010-02-11
JDownloader support suffer from a code execution vulnerability.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Product JDownloader[1] is an open source do...
-
发表了文章 2010-02-11
LDAP injection proof of concept exploit.
[+] Vurnerebility: LDAP Injection [+] Category : Implemented Web exploit [+] Category : At...
-
发表了文章 2010-02-11
asp.net viewstat Tampering Vulnerabilities
Trustwave's SpiderLabs Security Advisory TWSL2010-001: Multiplatform View State Tampering Vulnerabilities Published: 2010-02-08 Version: 1.
-
发表了文章 2010-02-11
ibm aix rpc.cmsd remote exploit
http://packetstormsecurity.org/1002-exploits/rpc_cmsd_opcode21.
-
发表了文章 2010-02-10
java servlet 源代码以及API
http://java.sun.com/products/servlet/download.html
-
发表了文章 2010-02-10
采访分布式数据访问层(Data Access Layer)作者许超前
分布式(Distributed)数据访问层(Data Access Layer)(以下简称DAL)是综合MySQL Proxy、Memcached、集群等等技术优点而构建的一个软件系统。
-
发表了文章 2010-02-10
owasp视频
http://owasp.blip.tv/ http://irongeek.blip.tv/
-
发表了文章 2010-02-10
hak5 USB Switchblade
http://wiki.hak5.org/wiki//USB_Switchblade
-
发表了文章 2010-02-10
Mobile Device Hacking: Turning your phone, PDA or internet tablet into a pen-testing platform
http://www.irongeek.com/i.php?page=maemo/nokia-770-800-hacking-pen-testing ...
-
发表了文章 2010-02-10
Using Database Caches to Detect SQL injection (SecTor 2009)
http://www.securitytube.net/Using-Database-Caches-to-Detect-SQL-injection-(SecTor-2009)-video.
-
发表了文章 2010-02-09
livecd 下载集合
www.livecdlist.com
-
发表了文章 2010-02-09
blackhat 2010 dc 视频资料
http://www.blackhat.com/html/bh-dc-10/bh-dc-10-archives.
-
发表了文章 2010-02-07
HP StorageWorks 1/8 G2 Tape Autoloader - privilege escalation, DOS
A vulnerability was found in Web Administration Interface of device HP StorageWorks 1/8 G2 Tape Autoloader.
-
发表了文章 2010-02-07
Weaning the Web off of Session Cookies Making Digest Authentication Viable
http://www.vsecurity.com/download/papers/WeaningTheWebOffOfSessionCookies.
-
发表了文章 2010-02-06
蜜罐项目和网站
https://www.honeynet.org/node/507 http://www.honeypots.net/
-
发表了文章 2010-02-06
Fingerprinting web applications (Joomla, Mediawiki and Wordpress)
http://www.mytty.org/wafp/ Next generation web scanner.
-
发表了文章 2010-02-06
Best of Application Security
Ten of Application Security industry's coolest, most interesting, important, and entertaining links from the past week -- in no particular order.
-
发表了文章 2010-02-06
Dradis Framework v2.5 is out!
We have pushed a new major release of Dradis (an open source frameworkto enable effective inform...
-
发表了文章 2010-02-06
eWebeditor suffers from administrative bypass, database disclosure, shell upload and directory traversal vulnerabilities
################################################################# # Securitylab.
-
发表了文章 2010-02-06
Outlook Web Access (OWA) suffers from a vulnerability that allows direct access to files blocked by policy
This trick is mostly useful but can also be used for wrong purposes.
-
发表了文章 2010-02-06
LANDesk command injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.
-
发表了文章 2010-02-06
IBM AIX 'rpc.cmsd' Calendar Daemon Remote Stack Buffer Overflow Vulnerability
A commercial exploit is available through the Immunity Partners program: https://www.
-
发表了文章 2010-02-06
Ipswitch IMail Server Multiple Local Privilege Escalation Vulnerabilities
http://www.securityfocus.com/data/vulnerabilities/exploits/38109.
-
发表了文章 2010-02-06
Vulnerability in Oracle 11gR2 allows system privileges for all
At the recent Black Hat DC 2010 conference , British security expert David Litchfield demonstrat...
-
发表了文章 2010-02-06
Samba Symlink Directory Traversal Vulnerability
http://www.youtube.com/watch?v=NN50RtZ2N74 http://www.
-
发表了文章 2010-02-06
Linux Kernel 'kernel/signal.c' Local Information Disclosure Vulnerability
http://www.securityfocus.com/data/vulnerabilities/exploits/35929.
-
发表了文章 2010-02-06
Linux Kernel 'fasync_helper()' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/data/vulnerabilities/exploits/37806.
-
发表了文章 2010-02-06
Linux Kernel 'pipe.c' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/data/vulnerabilities/exploits/36901.
-
发表了文章 2010-02-06
Oracle WebLogic Server Node Manager "beasvc.exe" Remote Command Execution
http://intevydis.blogspot.com/2010/01/oracle-weblogic-1032-node-manager-fun.
-
发表了文章 2010-02-06
Ipswitch IMAIL 11.01 multiple vulnerabilities (reversible encryption + weak ACL)
|------------------------------------------------------------------|| __ __ || _________ _______...
-
发表了文章 2010-02-06
Samba Remote Zero-Day Exploit Feb
http://www.youtube.com/watch?v=NN50RtZ2N74 Samba Remote Directory Traversallogic fuckup discover...
暂无更多信息
-
发表了文章
2018-02-06
Microsoft BuleHat 2018 Videos and Slides
-
发表了文章
2018-02-05
From Serialized to Shell :: Auditing Google Web Toolkit
-
发表了文章
2018-02-01
Microsoft Ignite Videos
-
发表了文章
2018-02-01
AWS Reinvent 2017 Security Sessions
-
发表了文章
2018-01-28
Google Patent
-
发表了文章
2018-01-28
GOOGLE CLOUD PLATFORM 安全性
-
发表了文章
2018-01-21
OBIEE Pentest
-
发表了文章
2018-01-20
分布式系统
-
发表了文章
2017-12-06
MTCS Certification Scheme
-
发表了文章
2017-12-03
Attack OGC WFS Implementation
-
发表了文章
2017-11-20
Alictf 2015决赛题目设计和解题思路
-
发表了文章
2017-11-12
Lync server 2013 部署开发常用工具下载
-
发表了文章
2017-08-23
Big Data Secuity Solution
-
发表了文章
2017-08-11
Google漏洞过滤规则研究
-
发表了文章
2017-08-10
INTEL Processor Trace for vulnerability discovery
-
发表了文章
2017-08-04
AWS自动化合规slide
-
发表了文章
2017-08-04
Secure Multi-party Computation
-
发表了文章
2017-08-01
Harvesting the Low-hanging Fruits: Defending Against Automated Large-Scale Cyber-Intrusions by Focus
-
发表了文章
2017-07-29
Blackhat 2017&Defcon 25学习笔记
-
发表了文章
2017-07-25
MapReduce技术的初步了解与学习
滑动查看更多
-
回答了问题
2015-02-02
【安全测试分享】阿里巴巴安全测试专家分享，等你来挑战！
Re【安全测试分享】阿里巴巴安全测试专家分享，等你来挑战！ 支持王挺，我是来支持王挺的赞0 踩0 评论0 -
提交了问题
2014-04-30
ECS可以做负载均衡吗
-
回答了问题
2014-04-30
ECS可以做负载均衡吗
ReECS可以做负载均衡吗 好的我去试试赞0 踩0 评论0
滑动查看更多
暂无更多信息