Protection Type

Note

SQL Injection

By exploiting security vulnerabilities in design, attackers paste the SQL code to input boxes on web pages to obtain network resources or change data.

XSS Attack

Short for cross-site scripting (XSS), XSS is a computer security vulnerability frequently seen in Web apps. It allows attackers to implant code into pages provided to other users. In the HTML code and client script, attackers can exploit XSS vulnerabilities to bypass access control and intercept data like accounts.

Trojan

Trojan is an HTML web page wittily designed by hackers. When a user visits such a web page, the script embedded in it exploits the browser vulnerability to download and run the Trojan placed by the hacker on the browser.

Website Scan

The structure and vulnerabilities of a website are scanned.

WebShell

Also called the website backdoor Trojan, WebShell is a script tool for web intrusion and appears as an ASP, PHP, or JSP program page. After hacking a website, attackers usually place Trojans in the server's Web directory and mix it with normal web pages. Via WebShell, hackers can control the victim's website for a long time.

CSRF

Cross-Site Request Forgery is an attack that attackers exploit trusted websites by disguising requests from trusted users.

OS Command Injection

By exploiting server OS vulnerabilities, attackers transmit OS commands to the server via Web access to obtain network resources or change data.

File Inclusion

It is a malicious attack against PHP websites. When PHP variables are not strictly filtered and unknown whether the parameter is from a local or remote host, a file on the remote host may be specified as a parameter and submitted to the variable pointing. If the submitted file contains a malicious code or even a Trojan, the code or Trojan in the file will be successfully executed with the Web's permission.

Path Traversal

Attackers access restricted directories outside the Web server's root directory by adding "../" or variants to any directory of the Web server or special directories through a browser.

Information Disclosure

This vulnerability is caused by an incorrect Web server configuration or its security vulnerability. As a result, system files or configuration files are exposed to the Internet and sensitive information of the Web server is prone to leakage, including username, password, source code, server information, and configuration information.

Website vulnerabilities

It provides safe, reliable, and high-quality protection for specific vulnerabilities in well-known whole-site Web systems.

WebShell Backdoor

Having known a web system vulnerability, attackers may use it to implant a WebShell page into the Web system, and access the database through the WebShell page. In doing so, they can execute system commands to control the Web system for a long time.

Custom WAF Signature

The user can customize the protection rules for server protection in Custom Rules.