Collaborate Disseminate
Perhaps this is a more suitable forum for my question:
Say I have this site. I am interested in getting the value of "DNI" field using Python, or any other tool. Inspecting that element I see that there is no visible value:
<s… Continue reading Get omitted value from website with Python
During my IT school years, I was told that including rows identifiers from a database in the resource URL, in the context of a REST API, is a bad practice. To my understanding, the rationale behind this statement is that exposing technical… Continue reading How to not use database identifiers in a URL in the context of a REST API
I am trying to access the database of a web application
After successfully creating Interception through Burp Suite I copied ‘Request’ to /tmp/user.request file.
Here is my user.request file
After that i started sqlmap and typed this in te… Continue reading CRITICAL : all tested parameters do not appear to be injectable [closed]
I had some files that I want to recover from windows, but I formatted the ssd drive to macos (apfs)? Is there a tool or method to recover those files?
I am having trouble answering what seems like a simple question. I was hoping to find a Yep/Nope style list somewhere, but can’t seem to find one.
What data should be encrypted in a cloud (e.g. AWS/Azure) database?
I have researched ICO as… Continue reading What personal data should be encrypted in a database?
I have a web application talking to a PostgreSQL database.
My threat model is the following:
Attacks must not occur at rest. What i’m afraid of is unwanted deletion of data on a specific table, let’s call it the data table.
What i mean by … Continue reading Cryptographic way to detect deleted rows in a database table
Earlier this month, cloud data warehouse Snowflake turned heads when it debuted on the stock market. Today, Altinity, the commercial company behind the open source ClickHouse data warehouse announced a $4 million seed round from Accel along with a new cloud service, Altinity.Cloud. “Fundamentally, the company started out as an open source services bureau offering […] Continue reading Altinity grabs $4M seed to build cloud version of ClickHouse open source data warehouse
I am having trouble with some user input security. I have a Flutter app where users can submit comments that can contain text e.g. a-z characters, numbers, symbols and emojis. These are stored in a Firestore database.
I have performed chec… Continue reading Sanitising data for a flutter application
I downloaded Spyrix, a free keylogging software, and everything was downloaded successfully, it tells me what websites were visited (even on incognito), screenshots every time the browser changed.. however when I view what was actually key… Continue reading My keylogger doesn’t record the correct keystokes
DataSecOps melds an automated mechanism to manage data, along with security, in an effective operations setup Data is the backbone of any organization. It’s what makes the company run. It is also where all the company secrets are kept. But when data a… Continue reading DataSecOps: Protecting Data in the Cloud