Collaborate Disseminate
We’re just a few weeks away from the Microsoft Build conference, where historically, a lot of announcements are made.
The post Everything You Need to Know About Azure Infrastructure — April 2018 appeared first on Petri.
Continue reading Everything You Need to Know About Azure Infrastructure — April 2018
I wish to encrypt/decrypt data in my MySQL database stored on my server. I use a salted hash for my passwords. All encryption/decryption would occur on the server. I use PHP end points which my remote clients access. The end … Continue reading Is PHP OpenSSL safer than just using MySQL AES_ENCRYPT/DECRYPT alone?
The user input of a given query is being sanitized (PHP, real_escape_string), yet the query fails with “Illegal mix of collations”. This query is below:
SELECT * FROM `table` WHERE `column` = “�½��ļ���.zip”
Does this imply… Continue reading Does MySQL error "Illegal mix of collations" imply an SQL injection vulnerability?
MariaDB [(none)]> SET @key_str = SHA2(‘Is it secure?’,512);
Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]> SET @crypt_str = AES_ENCRYPT(‘cleartext’,@key_str);
Query OK, 0 rows affected (0.01 sec)
MariaDB [(none)]> select… Continue reading Are MariaDB’s encryption and compression functions secure?
I am a pentesting n00b, working my way through vulnhub VMs. I am stuck trying to figure out how to make portforwarding work with a mysql instance bound to address of 127.0.0.1. Can someone give me some pointers?
I have a low… Continue reading Port forwarding mysql when it’s bound to localhost
I know that filtering bad keyword is not a good approach to preventing SQL injection. However, when I couldn’t answer why this is not a good approach, here is my rule:
1) When I see ;, I make it to ” (So that no one can ma… Continue reading SQL injection evasion
$result = $db->query(‘SELECT * FROM USERS WHERE password=”‘.$_GET[‘password’].'”‘);
if($result->fetchArray()) $step1=true;
$result = $db->query(‘SELECT * FROM USERS WHERE password=\”.$_GET[‘password’].’\”);
if($re… Continue reading SQL Injection ByPass
Using sqlmap i often get warnings about “target URL content is not stable” and also about parameters that “appear not to be dynamic”. What do those mean exactly? I can’t find more info on this. Thanks in advance.
Continue reading What is considered Stable URL content and what are Dynamic Parameters? (sqlmap)
In this post we cover different techniques for execution of SQL and OS commands through MySQL database servers that can be used for delivering and executing malicious payloads on a target system.
The post A Deep Dive into Database Attacks [Part IV]: De… Continue reading A Deep Dive into Database Attacks [Part IV]: Delivery and Execution of Malicious Executables through SQL Commands (MySQL)
What would these hashes be in the query?
How can I generate them?
http://www.example.com?id=-29/!50000UNION/ /!50000SELECT/
1,2,0x3c68353e3c63656e7465723e494e4a45435445442042592041525452304e3c2f63656e7465723e3c2f68353… Continue reading Hex in the SQL Injection query [closed]