M0N73 CRIS70

Posts

Showing posts with the label Web

Back With Sqli Learning

I have been off from blogging for a while, this is because I partially stopped learning these stuffs. Now I thought I will begin again from the start as I found a new and Interesting website.Come join me as I walk though the tutorial provided by Portswigger . First we have to make an account, then go to the learn tab.There they provides XML external entity (XXE) injection SQL injection Cross-site scripting (XSS) OS command injection File path traversal (directory traversal) They are improving the courses.So lets start with sql injection. They have given a detailed material about it, even a video tutorial is provided What is SQL injection? It is a web vulnerability which allows an attacker to use SQL commands to retrieve unauthenticated data , Get admin privilege and other harmful acts. While we move along,There are vulnerability labs for testing what we have learned which is a very good feature.In blog lets try the first lab ...

Basics You Should Know to Analyze a Website

I recently realized that,giving walk through wont help half of the beginners..even i have struggled initially to make my own moves without knowing how other analysts are thinking.. So, Lets dive into some basic web tags which will help you know what the site is doing and analyzing. Every website should have this basic structure... <html> <head> <title></title> </head> <body></body> </html> Every web design is structured using Hyper Text Markup Language. the code of HTML is written between <html> and </html> [opening and closing html tags] <head> tag is where we import important things such as CSS or JS files ..we also define CSS and JS within the head tag.Within head opening and close tags there is title tag which defines the title of the page.Then we have body tag,this is where the content of web-page is written.This is were we have to make a close look for analyzing. <div...