복많은쥐돌이

1. Service Management Service Management의 배경 Process 구성요소 Process 특징 2. Introduction to ITIL ITIL이란 ITIL Process 3. Incident Management Incident Incident Management 목표 Incident activity 4. Problem Management Problem Management 목표 Problem Control Error Control Proactive Problem Management 5. Configuration Management Configuration Management 목표 CMDB Configuration Items Base Line 6. Change Manageme..

Stuxnet : http://blog.ahnlab.com/ahnlab/960 ZeusBot : http://www.botnet.co.kr/what_zeus.html

c99 cihshell mysqlwebsh pro r57shell v1.42 redcod remview wso2

UTube media http://ontwik.com/php/sql-injection-myths-fallacies-best-practices-of-defense/

CRLF는 Carrage Return(CR, ASCII 13, \r) Line Feed(LF, ASCII 10, \n) 을 나타낸다. 이 아스키 코드들은 화면에는 보이지 않지만 윈도우에서 라인의 끝을 알려주기 위해 사용 (유닉스 시스템에서는 LF만 개행 문자로 사용한다.) CR과 LF의 조합은 키보드에서 "Enter"키를 눌렀을 때 나타나는데, "Enter" 키는 일반적으로 새로운 라인을 시작하라는 명령어 (개행 문자 입력 키) CRLF Injection 공격은 해커가 시스템에 CRLF 명령을 날릴 때 발생한다. 이런 공격을 모르는 웹 개발자들은 웹 서버를 CRLF공격에 노출시키게 되고, 해커로부터 CRLF 공격을 당하게 된다. CRLF Injection 자체가 위협적이지는 않지만 대상에 대한 정보를 수..

Version SELECT @@version Comments SELECT 1; #comment SELECT /*comment*/1; Current User SELECT user(); SELECT system_user(); List Users SELECT user FROM mysql.user; -- priv List Password Hashes SELECT host, user, password FROM mysql.user; -- priv Password Cracker John the Ripper will crack MySQL password hashes. List Privileges SELECT grantee, privilege_type, is_grantable FROM information_schema...

Version select versionnumber, version_timestamp from sysibm.sysversions; Comments select blah from foo; -- comment like this Current User select user from sysibm.sysdummy1; select session_user from sysibm.sysdummy1; select system_user from sysibm.sysdummy1; List Users N/A (I think DB2 uses OS-level user accounts for authentication.) Database authorities (like roles, I think) can be listed like t..

ORACLE SQL Injection Notes In ORACLE you can not just SELECT stuff you have to SELECT them from some table. For this purpose you can use special table called DUAL. i.e. SELECT 'dummydata' || 'x' FROM DUAL; You have to close comments if you used /* comment */ style comments Concatenation SELECT utl_raw.concat('x','y') FROM DUAL; SELECT 'x' || 'y' FROM DUAL; SELECT 'a' || 'b' FROM DUAL; SELECT use..

Version SELECT @@version Comments SELECT 1 -- comment SELECT /*comment*/1 Current User SELECT user_name(); SELECT system_user; SELECT user; SELECT loginame FROM master..sysprocesses WHERE spid = @@SPID List Users SELECT name FROM master..syslogins List Password Hashes SELECT name, password FROM master..sysxlogins -- priv, mssql 2000; SELECT name, master.dbo.fn_varbintohexstr(password) FROM maste..

Paint Pnt = new Paint(); Pnt.setColor(Color.RED); canvas.drawRect(10, 100, 200, 170, Pnt); cx cy 밑변 높이