随笔分类 - Secure
摘要:# chmod 700 ```text -rwx ``` # blank line at the bottom of the file, LF files Common file extensions in use are: .DER .PEM (Privacy Enhanced Electron Mail) .CRT .C
阅读全文
posted @ 2020-09-22 17:24
fndefbwefsowpvqfx
摘要:http://www.steves-internet-guide.com/ssl-certificates-explained/ In this tutorial we will look: TLS and SSL Public and Private keys Why we need certif
阅读全文
posted @ 2020-09-22 16:49
fndefbwefsowpvqfx
摘要:https://www.grc.com/fingerprints.htm 对比网站证书的fingerprint
阅读全文
posted @ 2020-09-22 15:52
fndefbwefsowpvqfx
摘要:https://wiki.openssl.org/index.php/Command_Line_Utilities Base64 Encoding Strings For simple string encoding, you can use "here string" syntax with th
阅读全文
posted @ 2020-09-22 14:20
fndefbwefsowpvqfx
摘要:curl -k https:/www.test.com -v –-key key.pem –-cacert ca.pem –-cert client.pem -k allows insecure connections,makes everything here insecure PKI – Pub
阅读全文
posted @ 2020-09-22 13:57
fndefbwefsowpvqfx
摘要:Authentication Passport - Simple, unobtrusive authentication. Grant - OAuth middleware for Express, Koa, and Hapi. Authorization CASL - Isomorphic aut
阅读全文
posted @ 2020-09-01 22:07
fndefbwefsowpvqfx
摘要:JWT What is JSON Web Token? JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmittin
阅读全文
posted @ 2020-08-25 14:58
fndefbwefsowpvqfx
摘要:Binary Planting Blind SQL Injection Blind XPath Injection Brute Force Attack Buffer Overflow via Environment Variables Buffer Overflow Attack CORS Ori
阅读全文
posted @ 2020-08-25 14:46
fndefbwefsowpvqfx
摘要:XSS (Cross Site Scripting跨站脚本)。 XSS定义的主语是“脚本”,是一种跨站执行的脚本,也就是javascript脚本, 指的是在网站上注入我们的javascript脚本,执行非法操作。 CSRF (Cross-site request forgery 跨站请求伪造,也被称
阅读全文
posted @ 2020-08-25 14:43
fndefbwefsowpvqfx

浙公网安备 33010602011771号