Collaborate Disseminate
I was recently doing a penetration testing challenge and was able to extract the password hash of the remote user. I tried cracking the password using john the ripper and hashcat but both failed.
Long story short, is it poss… Continue reading Is it possible to reverse a MySQL5.0 password hash?
I’m trying to understand how a website can be hacked through using addslashes in PHP and MySQL for educational purpose.
After reading this topic and this topic, I try to understand how it can bypass with something like 0xbf27 that can be … Continue reading SQL Injection through addslashes
Establishing protection against cybercriminals is a tall order for organizations, but it can begin with something as simple as paying attention.
The post Protection Against Cybercriminals Requires Vigilance appeared first on Security Intelligence.
Continue reading Protection Against Cybercriminals Requires Vigilance
Goal
I want to store encrypted data in a database.
Constraints
Application-level encryption (encrypting before sending to the DB) is not a reasonable option for my use case.
The DB providers I’m considering do not allow me to create mu… Continue reading Why would I use at-rest encryption over a DB’s key-based encryption?
I need to open the port for my MySQL server to the outside and from what I read, the default configuration is not secure nor encrypted.
For that, I have a few solutions in mind with their reason but I’d like to know, from a better security… Continue reading Securing MySQL server from remote connection
LAMP stack, dedicated server.
I set up some MySQL users, gave them full access rights to the necessary databases, and provided the user credentials to some freelance developers.
Now that the project is concluding, I’ve:
… Continue reading Access MySQL via MySQL credentials, assuming no remote MySQL, FTP, or SSH access?
When we try for inject a website for find vulnerable column then sometimes we need to give a wrong value in the website parameter. Like
www.vhul-web.com/index.php?id=1 union select 1,2,3 — –
Now the vulnerable column not … Continue reading why database show vulnerable column when i give a wrong parameter in query?
Need: I need to be able to store AES encrypted user data (journal entries) in my database and those entries need to be plain-text searchable.
Issue: MySQL outputs queries to its logs in plain text.
History: I’ve already accomplished the … Continue reading MySQL AES_ENCRYPT Logs Output
Regardless of the format of encryption, what is the best way to store an encryption key on an AWS EC2 server?
I am storing encrypted information in a MySQL database and my cryptography key is stored in code. Data is encoded/… Continue reading Securely storing an encryption key on AWS
I’m making an app whose functionality includes creating a database and its user. This is accomplished like so:
mysql -e “grant all on database.* to ‘user’@’localhost’ identified by ‘$PW’;”
$PW is the password to be used. T… Continue reading How does one securely create a MySQL database and user via the command line?