<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[Information Security Technology Organization]]></title><description><![CDATA[艾尔斯帝欧]]></description><link>https://blog.youkuaiyun.com/I_S_T_O</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; I_S_T_O]]></copyright><item><title><![CDATA[使用低权限Oracle数据库账户得到OS访问权限]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/4252443</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/4252443</guid><author>I_S_T_O</author><pubDate>Mon, 08 Jun 2009 19:03:00 +0800</pubDate><description><![CDATA[使用低权限Oracle数据库账户得到OS访问权限http://54mickey.googlepages.com/Penetration_fromapplication_down_to_.pdf]]></description><category></category></item><item><title><![CDATA[hibernate search分目录存储测试]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/3033056</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/3033056</guid><author>I_S_T_O</author><pubDate>Wed, 08 Oct 2008 13:21:00 +0800</pubDate><description><![CDATA[TEAM : I.S.T.OAUTHOR : Jerry实体类package search.entity;import java.io.Serializable;import java.util.Date;import javax.persistence.Column;import javax.persistence.Entity;import javax.pers]]></description><category></category></item><item><title><![CDATA[hibernate search分目录存储索引]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/3033034</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/3033034</guid><author>I_S_T_O</author><pubDate>Wed, 08 Oct 2008 13:19:00 +0800</pubDate><description><![CDATA[TEAM : I.S.T.OAUTHOR : Jerryhibernate search采用apache lucene做全文索引，在3.0版本中，hibernate search只支持对个单个实体单个目录和通过hash算法来定位目录，进行索引的添加，而删除是查找所有子目录，对于更新操作也是先删除后添加。这种情况对于某些索引结构可以按特定规则来划分的情况，性能上不是太适合。本来是可以通过实现]]></description><category></category></item><item><title><![CDATA[中国联通上装X一下]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/2857896</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/2857896</guid><author>I_S_T_O</author><pubDate>Mon, 01 Sep 2008 00:18:00 +0800</pubDate><description><![CDATA[ISTO  有你更精彩---oracle的数据库，花了十几个小时，终于搞下，但是有点不如所料，算了，截图留个念 AND 装个X吧!  ]]></description><category></category></item><item><title><![CDATA[Discuz!NT 2.5（20080826更新前）注入]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/2843681</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/2843681</guid><author>I_S_T_O</author><pubDate>Thu, 28 Aug 2008 14:45:00 +0800</pubDate><description><![CDATA[漏洞说明：Discuz!NT 2.5 是康盛创想(北京)科技有限公司旗下的一款功能强大的基于 ASP.net 平台的社区软件。基于先进的 .Net Framework，默认支持 SQLServer数据库，可扩展支持Access、MySQL等多种数据库，支持IIS5、IIS6、IIS7，安全高效、稳定易用，充分发挥 ASP.net 特性，支持自由选择切换皮肤，支持多种其它论坛的数据转换。Discuz]]></description><category></category></item><item><title><![CDATA[ORACLE LATERAL-SQL-INJECTION 个人见解]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/2347569</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/2347569</guid><author>I_S_T_O</author><pubDate>Wed, 30 Apr 2008 13:05:00 +0800</pubDate><description><![CDATA[原PAPER地址：http://www.databasesecurity.com/dbsec/lateral-sql-injection.pdf           author : kj021320          team :  I.S.T.O            最近忙啊忙啊的，今天终于有点点时间抽出来看看技术文章了，最近国外又出了关于新型ORA注入技术的PAPER，赶紧测试，主要是出现]]></description><category></category></item><item><title><![CDATA[ASPX 1句话SHELL]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/2120418</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/2120418</guid><author>I_S_T_O</author><pubDate>Tue, 26 Feb 2008 00:58:00 +0800</pubDate><description><![CDATA[ Author : kj021320team : I.S.T.O 这个SHELL 团队内用了蛮久了~ 哎~` 扔出来真不甘心啊!-_-   迟点就会给杀了!还是 剑心的错!哈!这里是他发的地址http://www.loveshell.net/blog/blogview.asp?logID=287这是ISTO的版本    ASPX One Code    " ]]></description><category></category></item><item><title><![CDATA[有关raw socket的一些知识]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/2111827</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/2111827</guid><author>I_S_T_O</author><pubDate>Thu, 21 Feb 2008 17:30:00 +0800</pubDate><description><![CDATA[    众所周知,通过socket编程,我们能够实现机器之间的通信.在TCP/IP协议簇(PF_INET)中,可以建立面向连接的SOCK_STREAM类型的socket,非连接的SOCK_DGRAM类型的socket.事实上,在所有的网络程序中,也是这两种socket用的最为广泛.除此之外,还有一些不常用的socket类型,它们却是在某些网络通信中担当重要的角色.这里要讲的就是这么一种sock]]></description><category></category></item><item><title><![CDATA[利用X-window配置错误入侵Linux]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/2101299</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/2101299</guid><author>I_S_T_O</author><pubDate>Sun, 17 Feb 2008 23:21:00 +0800</pubDate><description><![CDATA[利用X-window配置错误入侵Linuxhttp://54mickey.googlepages.com/Pt_misconfig_x-window.pdf ]]></description><category></category></item><item><title><![CDATA[SQL元数据注射和解决方案]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/2096238</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/2096238</guid><author>I_S_T_O</author><pubDate>Fri, 15 Feb 2008 02:04:00 +0800</pubDate><description><![CDATA[Author : kj021320Team : I.S.T.OBlog : http://blog.youkuaiyun.com/I_S_T_O/台上 kj021320穿着一套便服，一点都不像安全技术人员...台下一群 黑客 骇客 红客 白客 砍客 蓝客 灰客 漂客...还有一堆开发工程师和架构师 貌似很期待的在听课，接收kj021320的培训 kj021320 : hi,大家]]></description><category></category></item><item><title><![CDATA[Using Oracle's Parallel Execution Features]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/2096228</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/2096228</guid><author>I_S_T_O</author><pubDate>Fri, 15 Feb 2008 01:21:00 +0800</pubDate><description><![CDATA[The full list of Oracle parallel execution features currently includes the following         Parallel Query             Parallel DML             Parallel DDL             Parall]]></description><category></category></item><item><title><![CDATA[ADO.NET连接字符串]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/2091236</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/2091236</guid><author>I_S_T_O</author><pubDate>Thu, 14 Feb 2008 01:33:00 +0800</pubDate><description><![CDATA[ ADO.NET连接字符串                        名称                                                                                     ADO.NET连接字符串                                    ]]></description><category></category></item><item><title><![CDATA[ORACLE-JDBC(反编译源代码)]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/2089434</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/2089434</guid><author>I_S_T_O</author><pubDate>Wed, 13 Feb 2008 10:13:00 +0800</pubDate><description><![CDATA[ author : kj021320team: I.S.T.O下载地址 ： http://download.youkuaiyun.com/source/350052 oracle的JDBC驱动包，源代码java文件，有部分反编译出来之后不可以从新编译，后来经过我部分修改 现在全部可用...仅供研究.非法用途或者商业目的者 后果自负 ]]></description><category></category></item><item><title><![CDATA[窥探SQL预编译内幕 ]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/2080625</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/2080625</guid><author>I_S_T_O</author><pubDate>Sun, 03 Feb 2008 23:14:00 +0800</pubDate><description><![CDATA[Author : kj021320TEAM : I.S.T.OAuthor_blog: http://blog.youkuaiyun.com/kj021320前言套话:本来文章打算昨天就写出来，环境没搭好... 迟来的祝福~Mickey 生日快乐！首先感谢PT007竭力帮我搭环境，可惜最后还是没能用上，还有ISTO团队的幕后成员,AMXSA，SUMMER等...还有我几位好朋友axis，s]]></description><category></category></item><item><title><![CDATA[asynchronous session 攻击 ]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/2032321</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/2032321</guid><author>I_S_T_O</author><pubDate>Wed, 09 Jan 2008 17:25:00 +0800</pubDate><description><![CDATA[asynchronous session 难道是万份之1的攻击机会？Team : I.S.T.OWriter : kj021320Tester : Living/Amxsa BLOG : http://blog.youkuaiyun.com/I_S_T_O(套话) 首先介绍一下什么是 session , 相信很多开发人员已经很熟悉了！但是我还需要老生常谈, session是服务器上面的一块内存区域 ,]]></description><category></category></item><item><title><![CDATA[优酷视频下载工具]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/2024011</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/2024011</guid><author>I_S_T_O</author><pubDate>Thu, 03 Jan 2008 22:49:00 +0800</pubDate><description><![CDATA[今天在优酷里面找一些MV来看,虽然不说里面的视频有高质量,但是还是蛮全的,速度也不错…后来发现想看的视频太多了,一个一个慢慢等缓冲来看慢死了,还是想办法下载吧!       再网上搜索了半天…下载的办法不是从IE缓存里面里面COPY出来(这样的话让IE自己缓冲下载速度太慢了),就是安装那些影音嗅探工具….汗,我的机子里面大多软件都是绿色的了,更加不想安装软件,算了,自己想办法来写一个吧! ]]></description><category></category></item><item><title><![CDATA[APPLET AND XSS THE MAIL ]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/1916900</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/1916900</guid><author>I_S_T_O</author><pubDate>Tue, 04 Dec 2007 19:38:00 +0800</pubDate><description><![CDATA[AUTHOR : KJ021320TEAM : I.S.T.OBLOG : blog.youkuaiyun.com/kj021320在APPLET中其实可以运行JAVASCRIPT 而 JS中又可以获取COOKIE,添加IFRAME等然而我们就可以采用这样的方式绕过某些过滤器去XSS EMAIL了！晚饭的时候跟 刺他们讨论了一下~~偶感觉局限性很大 所以扔出来 抛砖引玉看看有没有人可以有更好的利用方式1。]]></description><category></category></item><item><title><![CDATA[asp request0x00字符截断与利用]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/1904533</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/1904533</guid><author>I_S_T_O</author><pubDate>Tue, 27 Nov 2007 17:36:00 +0800</pubDate><description><![CDATA[TEAM : I.S.T.OAUTHOR: LIVING今天kj021320叫我 测试上次发现的MSSQL查询语句引擎的 截断效果！看看在WEB上面的时候会不会有什么,错误信息会暴露结果发现这个ASP接收参数时候的截断, 跟kj021320讨论了一会 ,本以为没有利用价值的！但是kj021320说有,不过有特定条件首先看看ASP程序的大致代码：response.write ]]></description><category></category></item><item><title><![CDATA[hadoop中RPC的使用方法---DEMO]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/1900872</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/1900872</guid><author>I_S_T_O</author><pubDate>Sat, 24 Nov 2007 17:28:00 +0800</pubDate><description><![CDATA[ TEAM : I.S.T.OAUTHOR :  Jerryhadoop其实不难 不过部署起来不太容易！毕竟是分布式  这里简单写了一个demo 其实很早就写了 原来文地址http://hi.baidu.com/zhyhongyuan/blog/item/1906368127ddc6dabd3e1ef0.html明明是RPC  转的人看都不看就写为IPC     无语...看看]]></description><category></category></item><item><title><![CDATA[别再让注射遗传下去---杜绝对象查询注射]]></title><link>https://blog.youkuaiyun.com/I_S_T_O/article/details/1897442</link><guid>https://blog.youkuaiyun.com/I_S_T_O/article/details/1897442</guid><author>I_S_T_O</author><pubDate>Thu, 22 Nov 2007 10:59:00 +0800</pubDate><description><![CDATA[别再让注射遗传下去---杜绝对象查询注射TEAM : I.S.T.OAUTHOR : kj021320官方BLOG : http://blog.youkuaiyun.com/I_S_T_O转载需注明作者,未经作者同意,不得用于任何形式的商业活动现在越来越流行ORM技术~~~程序员把有关数据库的操作都交给持久层去处理,也为了更方便所以框架也提供了另外对象查询语言例如HIBERNATE的HQL EJB的E]]></description><category></category></item></channel></rss>