New answers tagged

0 votes

SQL Injection and Hidden parameter modification

You send data to login.pl. Try downloading login.pl and reading the content code. If the code is really vulnerable, the Perl file will have a query line to the vulnerable database. Put the code ...
user avatar
2 votes

Is this SQLi or XSS? (or both/neither)

Assuming it works, this is both, in two separate places. It's SQL injection, quite straightforwardly. The attacker is breaking out of a SQL string, terminating the current query, and injecting their ...
user avatar
  • 39k
1 vote

Altering requests after authenticating

Some common ideas are following: Don't send user ID to the client. Instead, generate some token (session ID), e.g. UUID like aecf4b7b-5589-4fb0-bce3-b17194d5d432. In the database save this token and ...
user avatar
  • 8,410
1 vote
Accepted

Altering requests after authenticating

Yes, good web app design never trusts the input from the client; always assume that it could be malicious. After authentication and that means that he has access to the API,is it possible to alter ...
user avatar
2 votes

Why are MySQL injections more limited than MS-SQL attacks?

why it appears MySQL is ... Appears to whom? Appears to you? Only you know that. In security there is no "appears". Either particular attack is possible or not. Nothing in this whole video ...
user avatar
  • 8,410
2 votes
Accepted

Trying to understand this SQL injection from VulnHub

why they included the '1'='2 part which evaluates to false $sql .= $_GET["name"]."'"; In the code snippet above, notice that a ' is appended to the end of the $_GET["Name&...
user avatar
  • 418
0 votes

sqlmap is encountering 403 forbidden

I figured it out in the end. When I pinged that URL I noticed it was behind cloudflare which likely blocks automated penetration testing tools, such as sqlmap. The solution is to add --random-agent to ...
user avatar

Top 50 recent answers are included