• Maximizing Linux System Security: Mastering the Update, Upgrade, and Dist-Upgrade Commands

    Maximizing Linux System Security: Mastering the Update, Upgrade, and Dist-Upgrade Commands

    Introduction: In the ever-evolving landscape of cybersecurity, maintaining the security of your Linux system is paramount. One crucial aspect of this is keeping your software up-to-date. In this guide, we’ll explore three essential commands – sudo apt update, sudo apt upgrade -y, and sudo apt dist-upgrade -y – that play a crucial role in this…

  • Ref 1 : String Concatenating :

    Ref 1 : String Concatenating :

    In SQL, string concatenation is the process of combining two or more strings together to form a single string. The operator used to concatenate strings in SQL is typically the || operator, which is short for “concatenation”. This operator can be used to concatenate strings in a SELECT statement, in a SET statement, or in…

  • Lab 17 : SQL injection with filter bypass via XML encoding

    Lab 17 : SQL injection with filter bypass via XML encoding

    Problem Statement :  This lab contains a SQL injection vulnerability in its stock check feature. The results from the query are returned in the application’s response, so you can use a UNION attack to retrieve data from other tables. The database contains a users table, which contains the usernames and passwords of registered users. To solve the lab, perform…

  • Lab 16: Lab: Blind SQL injection with out-of-band data exfiltration

    Lab 16: Lab: Blind SQL injection with out-of-band data exfiltration

    Problem Statement : This lab contains a blind SQL injection vulnerability. The application uses a tracking cookie for analytics, and performs an SQL query containing the value of the submitted cookie. The SQL query is executed asynchronously and has no effect on the application’s response. However, you can trigger out-of-band interactions with an external domain. The database…

  • Lab 15 : Lab: Blind SQL injection with out-of-band interaction

    Lab 15 : Lab: Blind SQL injection with out-of-band interaction

    Problem Statement : This lab contains a blind SQL injection vulnerability. The application uses a tracking cookie for analytics, and performs an SQL query containing the value of the submitted cookie. The SQL query is executed asynchronously and has no effect on the application’s response. However, you can trigger out-of-band interactions with an external domain. To solve…