Showing posts with label Web Hacking. Show all posts
Showing posts with label Web Hacking. Show all posts

Saturday, January 31, 2015

Accessing Databases with Object-Oriented PHP Tutorial



- 01. Introduction


 01_01-Welcome 

 01_02-What you should know before watching this course


01_03-Using the exercise files


01_04-Setting SQLite permissions


01_05-A quick primer on using PHP objects



 Downlaod >> 01. Introduction :  Password For 7zip is AlbDll.com


-----------------------------------------------------------


- 02. Why Use Object-Oriented PHP to Access a Database 

02_01-Overview of PHP database APIs


02_02-Using prepared statements



02_03-Using transactions


 Downlaod >> 02. Why Use Object-Oriented PHP to Access a Database  :  Password For 7zip is AlbDll.com

-----------------------------------------------------------

Wednesday, January 21, 2015

EC-Council Certified Ethical Hacker CEH v8 (Tools)




Module 00 - Student Introduction
- Student Introduction
- Course Materials
- CEHv8 Course Outline
- EC-Council Certification Program
- Certified Ethical Hacker Track
- CEHv8 Exam Information
- Lab Sessions
- What Does CEH Teach You?
- What CEH is NOT?
- Remember This!
- CEH Class Speed
- Live Hacking Website
- Advanced Lab Environment
- Student Computer Checklist
- Launching Command Shell
- Snapshots of Virtual Machines
- AirPcap
- Live Hack Website
- Lets Start Hacking!!!!!


Module 01 - Introduction to Ethical Hacking

- Module Flow: Info Security Overview
- Security News
- Internet Crime Current Report: IC3
- Data Breach Investigations Report
- Essential Terminology
- Elements of Information Security
- The Security, Functionality, and Usability Triangle
- Module Flow: Information Security Threats and Attack Vectors
- Top Information Security Attack Vectors
- Motives, Goals, and Objectives of Information Security Attacks
- Information Security Threats
- Information Warfare
- IPv6 Security Threats
- Module Flow: Hacking Concepts
- Hacking vs. Ethical Hacking
- Effects of Hacking on Business
- Who Is a Hacker?
- Hacker Classes
- Hacktivism
- Module Flow: Hacking Phases
- Hacking Phases
- Module Flow: Types of Attacks
- Types of Attacks on a System
- Operating System Attacks
- Misconfiguration Attacks
- Application-Level Attacks
- Examples of Application-Level Attacks
- Shrink Wrap Code Attacks
- Module Flow: Information Security Controls
- Why Ethical Hacking is Necessary
- Scope and Limitations of Ethical Hacking
- Skills of an Ethical Hacker
- Defense in Depth
- Incident Management Process
- Information Security Policies
- Classification of Security Policies
- Structure and Contents of Security Policies
- Types of Security Policies
- Steps to Create and Implement Security Policies
- Examples of Security Policies
- Vulnerability Research
- Vulnerability Research Websites
- Demo - Vulnerability Research Website
- What is Penetration Testing?
- Why Penetration Testing
- Penetration Testing Methodology




Tuesday, June 18, 2013

JSQL INJECTION V0.2 IS A JAVA TOOL FOR AUTOMATIC DATABASE INJECTION



An easy to use SQL injection tool for retrieving database informations from a distant server.

You can discuss about jSQL Injection on the discussion group.

jSQL Injection features:

GET, POST, header, cookie methods
normal, error based, blind, time based algorithms
automatic best algorithms detection
data retrieving progression
proxy setting
evasion
For now supports MySQL.

Running injection requires the distant server url and the name of the parameter to inject.

If you know an injection should work but the jSQL tool doesn't access the database, you can inform me by email or use the discussion group.

For a local test, you can save the following PHP code in a script named for example simulate_get.php, and use the URL http://127.0.0.1/simulate_get.php?lib= in the first field of the tool, then click Connect to access the database:

<?php
mysql_connect("localhost", "root", "");
mysql_select_db("my_own_database");

$result = mysql_query("SELECT * FROM my_own_table where my_own_field = {$_GET['lib']}") # time based
or die( mysql_error() ); # error based

if(mysql_num_rows($result)!==0) echo" true "; # blind

while ($row = mysql_fetch_array($result, MYSQL_NUM))
echo join(',',$row); # normal
?>

DOWNLOAD