Jatin Bhutani's Blog

SQL Injection step by step (for Begginers) ------------------------------­---------------------------------- SQL Injection attacks are code injections that exploit the database layer of the application. This is most commonly the MySQL database, but there are techniques to carry out this attack in other databases such as Oracle. In this tutorial i will be showing you the steps to carry out the attack on a MySQL Database. Step 1: --------- When testing a website for SQL Injection vulnerabilities, you need to find a page that looks like this: www.site.com/page=1 or www.site.com/id=5 Basically the site needs to have an = then a number or a string, but most commonly a number. Once you have found a page like this, we test for vulnerability by simply entering a ' after the number in the url. For example: www.site.com/page=1' If the database is vulnerable, the page will spit out a MySQL error such as; Warning: mysql_num_rows(): supplied argument is not a valid MySQL result res...

SQL Injection step by step (for Begginers) ------------------------------­---------------------------------- SQL Injection attacks are code injections that exploit the database layer of the application. This is most commonly the MySQL database, but there are techniques to carry out this attack in other databases such as Oracle. In this tutorial i will be showing you the steps to carry out the attack on a MySQL Database. Step 1: --------- When testing a website for SQL Injection vulnerabilities, you need to find a page that looks like this: www.site.com/page=1 or www.site.com/id=5 Basically the site needs to have an = then a number or a string, but most commonly a number. Once you have found a page like this, we test for vulnerability by simply entering a ' after the number in the url. For example: www.site.com/page=1' If the database is vulnerable, the page will spit out a MySQL error such as; Warning: mysql_num_rows(): supplied argument is not a valid MySQ...

All UBUNTU keyboard Shortcuts UBUNTU is one of the popular operating system based on LINUX. It has a good number of users after fedora. I have already posted keyboard shortcuts for different web browsers and operating system. Today i am posting keyboard shortcuts for UBUNTU which will help you to work faster. Ctrl + A = Select all Ctrl + C = Copy the highlighted content to clipboard Ctrl + V = Paste the clipboard content Ctrl + N = New (Create a new document, not in terminal) Ctrl + O = Open a document Ctrl + S = Save the current document Ctrl + P = Print the current document Ctrl + W = Close the close document Ctrl + Q = Quit the current applicationKeyb­oard shortcuts for GNOME desktopCtrl + Alt + F1 = Switch to the first virtual terminal Ctrl + Alt + F2(F3)(F4)(F5)(F6) = Select the different virtual terminals Ctrl + Alt + F7 = Restore back to the current terminal session with X Ctrl + Alt + Backspace = Restart GNOME Alt + Tab = Switch between open programs Ctrl + ...

All UBUNTU keyboard Shortcuts UBUNTU is one of the popular operating system based on LINUX. It has a good number of users after fedora. I have already posted keyboard shortcuts for different web browsers and operating system. Today i am posting keyboard shortcuts for UBUNTU which will help you to work faster. Ctrl + A = Select all Ctrl + C = Copy the highlighted content to clipboard Ctrl + V = Paste the clipboard content Ctrl + N = New (Create a new document, not in terminal) Ctrl + O = Open a document Ctrl + S = Save the current document Ctrl + P = Print the current document Ctrl + W = Close the close document Ctrl + Q = Quit the current applicationKeyb­oard shortcuts for GNOME desktopCtrl + Alt + F1 = Switch to the first virtual terminal Ctrl + Alt + F2(F3)(F4)(F5)(F6) = Select the different virtual terminals Ctrl + Alt + F7 = Restore back to the current terminal session with X Ctrl + Alt + Backspace = Restart GNOME Alt + Tab = Switch between open pr...

-- - --------------------------­------------------- The Cross-Site Scripting Framework (XSSF) is a security tool designed to turn the XSS vulnerability exploitation task into a much easier work. The XSSF project aims to demonstrate the real dangers of XSS vulnerabilities, vulgarizing their exploitation. This project is created solely for education, penetration testing and lawful research purposes. XSSF allows creating a communication channel with the targeted browser (from a XSS vulnerability) in order to perform further attacks. Users are free to select existing modules (a module = an attack) in order to target specific browsers. XSSF provides a powerfull documented API, which facilitates development of modules and attacks. In addition, its integration into the Metasploit Framework allows users to launch MSF browser based exploit easilly from an XSS vulnerability. In addition, an interesting though exploiting an XSS inside a victim’s browser could be to browse website on...