Collaborate Disseminate
i’m creating an android app for envato. before submitting my application to envato market, i want to be sure about my security. i’m collecting json data from mysql server and there in no data for username or password. i just parsing some l… Continue reading is this php code protect json hacking and hijacking? [closed]
I have DB_HOST,DB_PORT,DB_DATABASE,DB_USERNAME,DB_PASSWORD of a website but it is not allow to connect . that is not my website how hack it ??
Continue reading How bypass Ip not allow in mysql remot connection? [closed]
Hasura, a service that provides developers with an open-source engine that provides them a GraphQL API to access their databases, today announced that it has raised a $25 million Series B round led by Lightspeed Venture Partners. Previous investors Vertex Ventures US, Nexus Venture Partners, Strive VC and SAP.iO Fund also participated in this round. […] Continue reading Hasura raises $25 million Series B and adds MySQL support to its GraphQL service
Unlike some of its competitors, Google Cloud has recently started emphasizing how its large lineup of different services can be combined to solve common business problems. Instead of trying to sell individual services, Google is focusing on solutions and the latest effort here is what it calls its Business Application Platform, which combines the API […] Continue reading Google Cloud launches its Business Application Platform based on Apigee and AppSheet
Need something where I can select from a table using a function.
Example:
SELECT * FROM HEX(UNHEX(‘users’)) which should select from a table called "users"
This is just an example but the general idea is I want to be able to use … Continue reading select from table programatically in mysql
Consider the following query
SELECT * FROM 0x7573657273 WHERE username = ‘Username’;
As you can see, the 0x7573657273 will evaluate to users and it will work fine.
However, if I tried to select from another schemata using the same method, … Continue reading Using hexes to select from other schematas in SQL injection
I have access to MySQL database which the current user has FILE privilege. I want to upload a web shell but I do not know the root directory of the web server.
Is it possible to somehow locate the root directory using a SQL query?
Continue reading Is it possible to locate web document root using SQL query/SQL Injection?
What’s your average success rate of getting a SQL statement right on the first try? In best case, you botched a simple statement without side effects and just have to try again with correct syntax or remove that typo from a table name, but things can easily go wrong fast …read more
Continue reading Get Your SQL Statements Right the First Time With SQL Lint
I’m currently working on setting up a password rotation strategy for an AWS Aurora/MySQL based application.
My plan was to use a strategy like this…
Application usernames/passwords stored in AWS SSM encrypted parameters.
Application ser… Continue reading MySQL password rotation: Using a single user to change other user passwords
I have a mysql user (version 5.5). Role is only USAGE can’t do load_file function, is possible to privilege escalation?