Collaborate Disseminate
I’m starting with the use of sqlmap and I have the OWASP broken WebApp on VMWare.
I was trying to perform the –os-shell command to get access to OWASP VMware with this:
# sqlmap -r user.request -D mysql -T user –os-shell… Continue reading Problems with SQLmap on os-shell [on hold]
I’m quite new to web-app security and still learning so forgive me. I was learning about SQLi and I decided to apply what I’ve learned so far from DVWA and Mutillidae. I was given the subdomain gov.ns.agency and my objective … Continue reading Can’t seem to apply SQL injection effectively to domain
I Recently came across a Virtual Machine that has Blind SQL Injection in the X-Forwarded-For header.
I used sleep() to detect the vulnerability.
The Payload worked in HTTP/1.0 and not in HTTP/1.1 .
PAYLOAD:
GET / HTTP/1…. Continue reading Blind SQL Injection and HTTP Version Dependency?
Just want to check how vulnerable are my scripts and projects. From the research of expert’s blog and answer, I found possible attack and injection is based on
file types
sql statements
access to image folder in root,
I … Continue reading secure way to upload text and image in php
Why am I asking?
I am very new to cryptography (so please be patient with me…) and I want to avoid making unnecessary mistakes. I did a lot of research, but – other than with most other programming related questions – I ha… Continue reading How to store nonce and key when working with libsodium secretbox?
I managed to find a vulnerability in a so-called friend of mines website and I want to show him that his website is vulnerable to data extraction.
When I use something like yes’)– as post I get the following debug info:
… Continue reading How to extract data using SQL injection on a vulnerable ASP.NET application?
I wrote a simple PHP code for sql injection.
HTML code:
<html>
<head>
</head>
<body>
<form id=”AJ” action=”stew.php” method=”post”>
Name :
<input type=”text”… Continue reading Simple SQL injection is not working on my website [on hold]
I created a ecommerce site with a developer. He completed almost all his work but in the end we had some financial disagreements so our partnership ended in a bitter dispute. That developer threatened to hack my site using a … Continue reading protection from Backdoor hacks from disgruntled developer/ employee
Someone is challenging me to exploit blind sql injection, Boolean based injection.
demo.php?id =332′ AND ascii(substring(database(),2,1))>116 AND ‘V’=’V
after some attempts i could exploit it with Boolean injection and g… Continue reading Blind Sql injection (boolean) [on hold]
In readiness for the new GDPR legislation that is coming in on May 25th, I am trying to understand what pseudonymization means in the context of web development.
The info I’ve read infers that it is not the same as encryptio… Continue reading What does pseudonymization mean in the context of web development?