Technical Analysis of CVE-2020-25213: WP File Manager RCE Vulnerability
Background CVE-2020-25213, a Remote Code Execution (RCE) vulnerability in the WordPress WP-File-Manager plugin (version 6.0 to 6.8). WordPress is the […]
tcp, tcp-pkt, tcp-stream in Suricata rule
In Suricata’s official document, there are oversimplified descriptions for these three protocol options, and it’s really confusing. In order to
SEED TCP Attacks Lab Writeup
This is a write-up for SEED TCP Attacks Lab (PDF link). Environment Pre-requisite Task 1: SYN Flooding Attack Task 1.1
Key Exchange, TLS1.2 and TLS1.3
Above all, we need to know that asymmetric encryption is much slower than symmetric encryption. So, in practice, we usually
Odoo 17 – Deployment and running with Nginx
Source installation and running Although Odoo provides packaged installers for convenience, I prefer to download the source code and run
A Python trick at Leetcode
Today, I solved the jump game problem on Leetcode. After submitting the correct answer (runtime: 350 ms), I clicked the
About Stateful or Stateless Rules on Cloud Server’s Connection
In the Cloud Oracle network management panel (Networking > Virtual cloud networks > vcn-1234-xxxx > Subnet Details), when editing Ingress
Memory Layout and Buffer Overflow Attack
Memory Layout of a C Program A typical memory representation of a C program consists of the following sections. ไฝฟ็จ
Read Horrible Word (.doc) Content using Apache POI Library
Using Apache POI library to read contents from old Microsoft .doc file, including paragraphs and tables in order. Figure out a workaround to the strange situation that HWPFDocument eats or swallows some characters and beeps.