SQL injection attacks are common vulnerabilities in web-based applications. For years, they have been included in OWASP’s Top 10 web application list. SQLi can allow a denial of service (DoS) attack. Below is an example of how the data looks in a table in SQL. Through this attack, an attacker can unethically retrieve data from the website. The data could be information about customers (username, password, e-mail address) or personal details (phone number, date of birth). An attacker can often update, delete, or download the data. The attacker can sell the data in the dark/deep web or blackmail the company…
Author: Lipson Thomas Philip
Lipson Thomas Philip
Lipson Thomas Philip is a student of Masters in Network and Information Security at Griffith College, Limerick. He has done an internship in Cyber Cell, Gurugram 2021. His motive is to learn on a daily basis. As somebody said "Never stop learning". You learn new things knowing or unknowingly and as your life changes day by day.
In today’s digital world, security is a top priority for organizations and people. With a rising reliance on web applications and online services, ensuring the platform’s security is vital. One of the most common security vulnerabilities developers and security experts should know is Insecure Direct Object Reference (IDOR). This article digs further into IDOR, examining its implications, causes, and mitigation strategies. What is IDOR? Insecure Direct Object Reference is not just an access control vulnerability, it’s a serious threat. It allows unauthorized access to objects directly through user-supplied input in an application, bypassing proper authorization checks. In simpler terms, an…
Introduction DNS is an essential element of the Internet’s infrastructure. It translates the IP address into human-readable domain names, allowing users to access websites or other online services. If there is no DNS, the users must remember the IP address to access the website, which is impossible. For example, the IP address for google.com is 172.253.116.190; here, google.com is easier to remember than 172.253.116.190. What is the Domain Name System? DNS stands for Domain Name System. It is a decentralized and hierarchical naming system that connects/translates domain names to IP addresses. A domain name is associated with one or more IP addresses.…
Visual Studio Code (VS Code) is an open-source, free code editor developed by Microsoft. It is available cross-platform such as Linux, Mac and Windows. It supports many programming languages and frameworks such as C/C++, Django, Java, JavaScript, PHP, Python, Typescript, etc. Furthermore, it is a useful tool that facilitates task execution, version control, and code debugging. It differs from other code editors with a variety of capabilities, including refactoring, syntax highlighting, automated code completion, snippets, and many more. VS Code supports many plugins which are used to create programs in different programming languages and frameworks. This code editor is very…
What is SQL Injection? SQL injection is a database vulnerability in which a hacker manipulates the SQL database of the website by injecting or entering malicious SQL queries into the user input field, such as the address bar or search bar. This attack is only effective on websites using SQL databases. SQL (Structured Query Language) database is a programming language for storing and processing data with the associated website or web application. How does SQL Injection Work? When a user submits information to a web application, it is frequently saved in a database. The web application then queries the database…
The term “URL” is an abbreviation for “Uniform Resource Locator,” which refers to a standardized address used to locate and access resources on the internet. The three words in the URL have unique meanings: A URL is a core concept in web technology that functions as a unique address or identifier for internet sites. It is the web address that you type in the address bar of your web browser to access a website or obtain specific information. An organization known as the Internet Engineering Task Force (IETF) is in charge of regulating the Internet. This organization is responsible for…
We value your input and are always eager to hear from our blog visitors. Whether you’ve come across a technical glitch, want to suggest a new topic for a blog post, or even have an idea for a guest post, we’re here to listen. Your feedback helps us improve our content and ensure that we deliver the most relevant and engaging information to our readers. Please don’t hesitate to drop us a message using the contact form below. Feel free to provide as much detail as possible so that we can address your concerns or ideas effectively. We appreciate your…
Introduction To Go (Golang) Programming Language Go known as Golang, was created and developed by Robert Griesemer, Rob Pike, and Ken Thompson at Google in the year 2007. The Golang programming language was developed to meet the needs of modern software development, especially in the fields of concurrency and scalability. Concurrency was a major problem in software development at the time Golang was developed due to the emergence of multi-core computers and cloud computing. Several of the then-current programming languages, like C++ and Java, had concurrency and scalability restrictions, which made it difficult for developers to write code that could…
Naabu is a fast port scanner written in the go programming language. It focuses on reliability and simplicity. This tool is created and managed by Project Discovery. It is a very straightforward program that quickly checks the host or list of hosts using SYN/CONNECT and reports all ports that only respond. Because of the speed, it saves a lot of time for the users. Features Of Naabu Tool Use Cases for Naabu Tool Many network reconnaissance and vulnerability analysis activities may be performed with Naabu. Typical usage scenarios include: How to install Naabu? The prerequisite for the Naabu tool are:…
Are you a Kali Linux user looking to enhance your browsing experience? Do you want more privacy and security in your online presence? Look no further than the Brave Browser! This step-by-step guide will walk you through the straightforward process of installing Brave Browser on your Kali Linux system, making it a breeze for you. Brave Browser, a multi-platform web browser developed and managed by Brave Software, is not just another browser in the market. It shares similarities with popular browsers like Google Chrome, Microsoft Edge, and Mozilla Firefox, but it also offers unique features that set it apart. Brave…
