Category: Network security

Recently encountered a ransomware case with the extension .orkf, targeting personal PCs and demanding a few hundred dollars. Data recovery is possible for…

I planned to write a shell script to convert v2ray configuration files to clash configuration files, using template strings to parse variables. Xuejin’s…

Neo4j

Using the htop command, it was found that user IDs in processes often map incorrectly on the host due to container isolation, showing…

Hadoop Yarn allocates resources and schedules tasks in clusters. It exposes RPC services that can be exploited for unauthorized access and command execution.

The Apache HTTP Server vulnerability in versions 2.4.49 and 2.4.50 allows attackers to read files outside the web directory or execute arbitrary commands.

Atlassian Confluence disclosed CVE-2021-26084, a remote code execution vulnerability allowing attackers to execute arbitrary code. Upgrade to the latest version.

During an emergency, I found the SSH connection method keyboard-interactive in SSH logs. It is similar to Password authentication, differing only in log…

Trojan port 443 is often blocked. Using NAT and iptables, traffic can be forwarded to ports 40000-50000. A shell script can dynamically change…

Spring Actuator is used for monitoring and managing applications via HTTP Endpoints or JMX. Issues with POCs for /actuator/env and /actuator/restart endpoints were…