Page 41-Safety Programming Tutorials: Learn Safety Online-php.cn

Article Tags

Safety

Home

Technical articles

Operation and Maintenance

Safety

How to use JVM monitoring and analysis tools in UAVStack

Introduction As the intelligent service technology stack of AllInOne, UAVStack provides a very comprehensive monitoring data sampling function and supports data monitoring and early warning. Recently, we have integrated the original data collection and display functions, added JVM analysis functions, and launched a more easy-to-use JVM monitoring and analysis tool. Developers who are familiar with JDK know that JDK itself provides a set of JVM analysis tools, including jinfo, jmap, jstack, etc. Users can easily obtain JVM memory stack information, memory object allocation, and basic JVM startup parameter information through the command line. However, these tools need to be executed in a command line environment, and in a production environment they need to be forwarded through the bastion host. Some good JVM analysis tools in the open source community

May 14, 2023 pm 03:31 PM

JVMUAVStack

How to reproduce the RCE vulnerability in Apache Solr JMX service

0x00 Introduction Solr is an independent enterprise-level search application server that provides an API interface similar to Web-service. Users can submit XML files in a certain format to the search engine server through http requests to generate indexes; they can also make search requests through HttpGet operations and get returned results in XML format. The vulnerability stems from the security risk in the ENABLE_REMOTE_JMX_OPTS configuration option in the default configuration file solr.in.sh. ENABLE_REMOTE_JMX_OPTS= exists in the built-in configuration file solr.in.sh of versions 8.1.1 and 8.2.0 of ApacheSolr.

May 14, 2023 pm 02:25 PM

solrRCEjmx

How to write a triangle in CSS

CSS writes the triangle /*createanarrowthatpointsup*/div.arrow-up{width:0px;height:0px;border-left:5pxsolidtransparent;/*leftarrowslant*/border-right:5pxsolidtransparent;/*rightarrowslant*/border-bottom:5pxsolid #2f2f2f;/*bottom,addbackgroundcolorhere*/font-size:0px;

May 14, 2023 pm 02:07 PM

CSS

How to analyze and reproduce Apache Commons Collections deserialization vulnerability

1.1 Status Completes vulnerability mining condition analysis and vulnerability reproduction. 1.2 Vulnerability analysis Versions with security flaws: Apache Commons Collections 3.2.1 or below, [JDK version: 1.7.0_80] Apache Maven 3.6.3. POC core code: packagecom.patrilic.vul;importorg.apache.commons.collections.Transformer;importorg.apache.commons.collections.functors.ConstantTransformer;

May 14, 2023 pm 02:04 PM

commonscollections

What is the method of data recovery in linux system

Tools: hexedit, fdisk The following operations are all completed in the root environment. hexedit: On Linux, hexedit is often used to modify the hexadecimal code of the program. Fdisk will not be introduced here. Now let's go into the world of disks and see what disks do to data. First, use root privileges in the terminal to run the following command: Command: fdisk-l/dev/sdb1 is today’s protagonist. From the picture, you can clearly see some related data, such as disk size, sector, I/Osize etc. The disk format is ext4, not vfat32 and NTFS format on MS, at the end of the article

May 14, 2023 pm 01:49 PM

Linux

What is the method for non-destructively adjusting the capacity of C drive with DiskGenius?

How to expand the C drive with DiskGenius? As we all know, after using a computer for a long time, you will find that your C drive space becomes smaller and smaller, or even seriously insufficient. Even deleting some downloaded software cannot fundamentally solve the problem. The best solution is to expand the C drive without loss. Let’s teach you how Use DiskGenius to losslessly expand the C drive. Partitions with data are risky and need to be operated with caution. We are not responsible for data loss. Please back up your important data before operating a partition with data to avoid losing it. Note: If DiskGenius wants to expand the C drive, it can only separate the capacity from the D drive next to it, not another one. Or multiple partition operations, novice friends need to pay special attention to this. The first step is to insert the bootable USB flash drive into the computer, restart the computer and press the shortcut key to enter the computer's

May 14, 2023 pm 01:25 PM

diskgeniusc盘

How to use css to disable mouse events

Disabling mouse events The new pointer-events in CSS3 allow you to disable mouse events for elements. For example, a link cannot be clicked if the following style is set. .disabled{pointer-events:none;}

May 14, 2023 pm 12:43 PM

CSS

How to Easily Complete Enterprise Security Orchestration Response SOAR

The 2019 Security Orchestration and Automated Response Solutions (SOAR) Market Guide released by the authoritative consulting organization Gartner states that “by 2022, more than 30% of security companies with security teams of more than 5 people will use SOAR security orchestration automation. Response plan”. Today we will introduce how enterprises can use the NSFOCUS SOAR system to complete security orchestration and automated response within three minutes. Looking at the pain points and demands of enterprises in security operations from the security incident handling process. In the traditional security operation and maintenance and incident handling of enterprises, the following process is generally followed: Table: After the above 7 steps of the traditional security operation and maintenance process, an information security incident The disposal process is complete. In this process, multiple departments and different roles will participate.

May 14, 2023 pm 12:22 PM

soar

How to deeply understand GOT table and PLT table

0x01 Preface Operating systems usually use dynamic linking to improve the efficiency of program running. In the case of dynamic linking, all functions in the link library are not loaded together when the program is loaded, but are loaded on demand when the program is executed. If a function is not called, then it will not be loaded in the program. Being loaded into life. This design can improve the smoothness of program operation and reduce memory space. Moreover, modern operating systems do not allow modification of code segments, only data segments, so the GOT table and PLT table came into being. 0x02 A preliminary exploration of the GOT table and the PLT table. Let's take a brief look at an example. If we follow up scanf@plt, we will find that there are three lines of code jmp. An address pushes a value to the stack. jmp

May 14, 2023 pm 12:13 PM

gotplt

The idea of sqlmap processing sign encryption

When I tested the company's APP, I found that we added a 32-bit character to all parameter contents and finally performed MD5 encryption. Since the APP processing process first verifies whether the sign is correct, if the signature verification fails, it will not be able to enter the database at all. In order to use SQLMAP to test it, I wrote a script for proxy data. After intercepting the data packet , perform encrypted replacement of its parameter content and 32 characters. Note: This script is suitable for the company's internal system, because you can know the encryption process; or you can get the encryption method of the front-end JS. First, I wrote a program using Django to simulate the company's system. The process was to obtain the POST ID and token, and add a custom encrypted word.

May 14, 2023 am 11:52 AM

Signsqlmap

How to perform APK simple code injection

1. Foreword When the apk is not encrypted, the smail file is obtained by decompiling it. Just inject the code that needs to be injected. Then seal and sign it! 2. Make apk Use androidstudio to generate a simple apk. Just use the default code. packagecom.example.myapplication1;importandroidx.appcompat.app.AppCompatActivity;importandroid.os.Bundle;publicclassMainActivityextendsAppCompatActivity{

May 14, 2023 am 11:43 AM

apk

How to optimize SylixOS network card driver

1. Development environment Operating system: SylixOS Programming environment: RealEvo-IDE3.1 Hardware platform: AT9x25 development board 1. Technical implementation After writing the network card driver and realizing the basic sending and receiving functions, this article will briefly introduce it How to optimize the sending function of the network card driver and improve the throughput and real-time performance of sending. 1.1 Network card sending throughput optimization The network card driver can improve sending throughput through zero copy. The driver calls the enetCoreTx sending function to realize the sending of Ethernet messages. This function receives two parameters, which are netdev structure type pointer and pbuf type pointer. enetCoreTx will copy the content pointed to by pbuf to

May 14, 2023 am 11:16 AM

sylixos

How to use wireshark simply

The ideal access environment for wireshark is a hub, but there are basically no pure hubs on the market now. Most of the so-called hubs on the market are small switches and the like. As we all know, the traffic of the switch router is sent to the destination port, that is, the destination port will only receive data packets sent to itself, while the hub is broadcast and sends data packets to all ports in the entire broadcast domain, so on the hub Packet capture is ideal. When wireshark captures packets, you can use filtering to capture only the packets you want to capture, or you can set no filtering, in which case all packets on the network will be captured. In the data packets captured by wireshark, data packets of different protocols are highlighted in different colors, and in the v of the main menu

May 14, 2023 am 10:31 AM

wireshark

What are the commonly used Oracle statements for performance testing?

Oracle's performance test mainly simulates a large number of SQL statement operations to put pressure on the database server. Before testing, you need to prepare the following SQL statements to be simulated, test scripts, and prepare the test control machine, test pressure machine, and the database server under test. Oracle database performance advantages and disadvantages Advantages 1. Can run on all mainstream platforms (including windows). Fully supports all industry standards. Adopt a completely open strategy. This enables customers to choose the most suitable solution. Full support to developers. 2. Parallel servers extend the capabilities of windownt by enabling a group of nodes to share work in the same cluster, providing high availability and high scalability cluster solutions. 3. If windowsNT

May 14, 2023 am 09:13 AM

Oracle