#Enroll
Basics of Cloud Computing

Learn the Basics of Cloud Computing right from the Service Models to The Future of Cloud Computing in Detail.

https://www.udemy.com/course/basics-of-cloud-computing/?couponCode=D09349981999B0149135


#share & #supportus

-------------> @geekcode 📍

Share as more as 🤩

💢TERMUX ADVANCE GUIDE💢

🔰Ultimate Guide To Ethical Hacking With Termux🔰

LINK👇

https://play.google.com/store/apps/details?id=com.androidexample.termux


#share & #supportus

-------------> @geekcode 📍

Share as more as 🤩

IP Addressing and Subnetting - Zero to Hero

Go from zero to advanced in IP addressing in a single course!

https://www.udemy.com/course/ip-addressing-zero-to-hero/?couponCode=HAPPY2021


#share & #supportus

-------------> @geekcode 📍

Share as more as 🤩

🔵 Injection Attack
➖➖➖➖➖➖➖➖➖➖➖➖➖➖
✳️ A code injection happens when an attacker sends invalid data to the web application with the intention to make it do something that the application was not designed/programmed to do.
✳️ In simple words, an injection attack is one in which databases and other systems are vulnerable to such an extent that an attacker can inject malicious or untrusted data into the system. This occurs when untrusted data is sent to an interpreter as part of a command or query. Basically, the attacker's data tricks the interpreter into executing commands without adequate authorization.

✳️ the most common example around this security vulnerability is the SQL query consuming untrusted data. You can see one of OWASP’s examples below:

String query = “SELECT * FROM accounts WHERE custID = ‘” + request.getParameter(“id”) + “‘”;

✳️ This query can be exploited by calling up the web page executing it with the following URL: http://example.com/app/accountView?id=’ or ‘1’=’1 causing the return of all the rows stored on the database table.
(I will explain more about this queries and working of sql injection later)

✳️ The core of a code injection vulnerability is the lack of validation and sanitization of the data used by the web application, which means that this vulnerability can be present on almost any type of technology.
✳️ Anything that accepts parameters as input can potentially be vulnerable to a code injection attack.

#share & #supportus

-------------> @geekcode 📍

Share as more as 🤩

🔴 some of the Types of Injections
➖➖➖➖➖➖➖➖➖➖➖➖➖➖
✅ Depending on the type of database system, the programming language and other factors, there can be many different types of injections:

🔹 Code Injection
🔹 CRLF Injection
🔹 OS Command Injection
🔹 XSS
🔹 Email Header Injection
🔹 SQL Injection
Etc..

#share & #supportus

-------------> @geekcode 📍

Share as more as 🤩

🔵 How do you prevent code injection vulnerabilities?

✅ Preventing code injection vulnerabilities really depends on the technology you are using on your website. For example, if you use WordPress, you could minimize code injection vulnerabilities by keeping it to a minimum of plugin and themes installed.

🔹 If you have a tailored web application and a dedicated team of developers, you need to make sure to have security requirements your developers can follow when designing and writing software. This will allow them to keep thinking about security during the lifecycle of the project.

⚠️ Here are OWASP’s technical recommendations to prevent SQL injections:
👉 Preventing SQL injections requires keeping data separate from commands and queries.

🔹The preferred option is to use a safe API, which avoids the use of the interpreter entirely or provides a parameterized interface or migrate to use Object Relational Mapping Tools (ORMs). Note: Even when parameterized, stored procedures can still introduce SQL injection if PL/SQL or T-SQL concatenates queries and data, or executes hostile data with EXECUTE IMMEDIATE or exec().
🔹 Use positive or “whitelist” server-side input validation. This is not a complete defense as many applications require special characters, such as text areas or APIs for mobile applications.
🔹 For any residual dynamic queries, escape special characters using the specific escape syntax for that interpreter. Note: SQL structure such as table names, column names, and so on cannot be escaped, and thus user-supplied structure names are dangerous. This is a common issue in report-writing software.
🔹 Use LIMIT and other SQL controls within queries to prevent mass disclosure of records in case of SQL injection.

#share & #supportus

-------------> @geekcode 📍

Share as more as 🤩

😍 AlgoExpert All courses Free 😍


▪️What is AlgoExpert?

AlgoExpert is an interview prep platform for software engineers. It's specifically geared towards those who want to work at a FAANG-level company. Featuring a robust interactive coding environment, AlgoExpert also has expansive video solutions.

SIZE : 20 GB +

Download link :
https://mega.nz/folder/qI1SEAKQ#0scBk0i_Y0dwgrlb5yehRw

#share & #supportus

-------------> @geekcode 📍

Share as more as 🤩

Practical Web Design & Development: 7 Courses in 1

Master in Practical Web design and development using Photoshop, HTML5, CSS3, Bootstrap and more.

https://www.udemy.com/course/learn-web-design-html-css-adobe-photoshop/?couponCode=WEB7CHRISTMAS20F

#share & #supportus

-------------> @geekcode 📍

Share as more as 🤩

#enroll
Scrum Fundamentals for Scrum Master and Agile Projects- 2020

Master the Scrum concepts necessary for Scrum Master Certification & Agile Scrum Project Management

https://www.udemy.com/course/scrum-genman/?couponCode=SCRUMNEWYR

#share & #supportus

-------------> @geekcode 📍

Share as more as 🤩

SUPPORT US 💙 @geekcode 🙏

#enroll
React Basics for beginners
Learn react basics from scratch with functional components and Hooks with axios.

https://www.udemy.com/course/react-basics-for-beginners/?couponCode=SHEYYYY

#share & #supportus

-------------> @geekcode 📍

Share as more as 🤩