Collaborate Disseminate
I have made a vulnerable SQLi website ( to teach students ).
I am able to dump the database but I am not able to run os commands or upload os-shell.
I want to show them how to use –os-shell option of sqlmap. How should I p… Continue reading How to make –os-shell command work on UBUNTU 16.04 ( Digital Ocean )?
Disclaimer: Parameterized queries are the way to go, no need to discuss about that 🙂
I’ve seen the following code at a friends place:
var query = “SELECT * FROM students WHERE name = ” + name;
with name being a user prov… Continue reading Is forbiding the ; char enough to prevent SQL injection?
Am I safe from MySQL access from another host even if they know the credential of my database, including the port?
As far as I know the bing port doesn’t allow any remote access. Correct me if I’m wrong.
My web’s INSERT INTO query stopped working after my friend hacked my website with directory traversal.
He said he didn’t do anything with my website. He just only saw my backend folders. He can see all my PHP files inside t… Continue reading Can directory traversal attack on web makes sql query stop working [on hold]
I want to know how to protect my website from hackers. I am a php-mysql developer. For fetching data from databases I always use MySQLi. For preventing my website from SQL injection, I always use PHP’s $db->real_esacpe_str… Continue reading Can hacker delete my server files and database where I am using below function?
I’m looking for the security of sql injection.
sql = select * from where field01 = ‘1’ AND field = ‘where’
example01 (‘sql’, ‘where’)
The above sentence is looking to check that ‘where’ goes in once and ‘and’ goes in twic… Continue reading How can I check SQL statements?
I had encrypted 2 MySQL databases with AES_ENCRYPT in ECB 128 bit mode. Now I forgot my encryption key, but I have plain text (I have one database without encryption and same with encryption). How to find the encryption key s… Continue reading Can I recover a lost AES key?
When the former CTOs of YouTube, Facebook, and Dropbox seed fund a database startup, you know there’s something special going on under the hood. Jiten Vaidya and Sugu Sougoumarane saved YouTube from a scalability nightmare by inventing and open sourcing Vitess, a brilliant relational data storage system. But in the decade since working there, the pair […] Continue reading They scaled YouTube. Now they’ll shard everyone with PlanetScale
I am connected to a remote Linux MySQL database server as root. The server has –secure-filepriv set. So UDFs doesn’t work. Is it possible to read values of environment variables on the server?
Continue reading How to read system environment variables from Mysql client?
There’s a weird user entry in my MySQL database. The table is using a character set of utf8_general_ci. Here’s the row:
display_name: 77娱ä¹Â�77aee.comçƒÂ门高频彩全网赔率最高Å Continue reading Translate weird characters in MySQL database