117 reputation
7
bio website
location
age
visits member for 9 months
seen 17 hours ago
stats profile views 15

Jun
10
accepted What makes a SQL Injection counted as blind injection?
Jun
8
comment What makes a SQL Injection counted as blind injection?
So example if a website is changes its look upon a ' inserted but no error msg is displayed and I used union to dump the information. It is a partially blind sql injection?
Jun
8
asked What makes a SQL Injection counted as blind injection?
May
8
comment Don't allow access to phpmyadmin page over the network? XAMPP Windows
I'm using apache as my web server. Sorry a dumb question, but is that a .htcaccess file? If so, where do i put it? Or I should edit some configuration file or something?
May
8
asked Don't allow access to phpmyadmin page over the network? XAMPP Windows
Apr
28
comment Hash extension(padding) attack
Hey, sorry just wondering if hmac was used then this a recommended implementation in the real world?
Apr
27
comment Hash extension(padding) attack
Thanks so much dude!
Apr
27
accepted Hash extension(padding) attack
Apr
27
asked Hash extension(padding) attack
Apr
23
accepted How do I make SQL injection harder but not impossible?
Apr
23
asked How do I make SQL injection harder but not impossible?
Apr
20
accepted Isolating database? Is it possible?
Apr
20
comment Isolating database? Is it possible?
hmm.. to prevent vulnerability exist in host os? Is ubuntu a good choice as an OS to use?
Apr
20
comment Isolating database? Is it possible?
Thanks for the reply! Does my example below works? server 1 = Hosting CTF application + CTF database? Inside the server 1, VM machine 1= hosting sql injection flag? Should each flag be hosted in a separate VM machine?
Apr
20
asked Isolating database? Is it possible?
Feb
23
awarded  Popular Question
Jan
29
accepted How secure is this php code against SQL injection?
Jan
27
awarded  Commentator
Jan
27
comment How secure is this php code against SQL injection?
I don't see anything wrong with my where clause? User enter username and password. I look into my db for records, if 1 records is found i authenticate them? As said, this is just a portion of the login script. Your answers doesn't solve all my doubts.
Jan
26
awarded  Custodian