New answers tagged

1 vote
Accepted

How does this PortSwigger lab's XSS work?

When you place this payload in the website parameter value, sending a request like this: POST /post/comment HTTP/1.1 csrf=rJXP2IH8tuMQffr4Ao1XAW5pjCeVm3T8&postId=1&comment=test&name=test&...
user avatar
  • 1,148
2 votes

Why are MySQL injections more limited than MS-SQL attacks?

why it appears MySQL is ... Appears to whom? Appears to you? Only you know that. In security there is no "appears". Either particular attack is possible or not. Nothing in this whole video ...
user avatar
  • 8,410
0 votes

sqlmap is encountering 403 forbidden

I figured it out in the end. When I pinged that URL I noticed it was behind cloudflare which likely blocks automated penetration testing tools, such as sqlmap. The solution is to add --random-agent to ...
user avatar

Top 50 recent answers are included