SQL / SQLI tokenizer parser analyzer. For C and C++ PHP (https://libinjection.client9.com/doc-sqli-php) Python (https://libinjection.client9.com/doc-sqli-python) Lua (https://github.com/client9/libinjection/blob/master/lua) Java (https://github.com/jeonglee/Libinjection) (external port) [LuaJIT/FFI] (https://github.com/p0pr0ck5/lua-ffi-libinjection) (external port) See https://www.client9.com/ for details and presentations.
Simple example: #include #include #include "libinjection.h" #include "libinjection_sqli.h" int main(int argc, const char* argv[]) { struct libinjection_sqli_state state; int issqli; const char* input = argv[1]; size_t slen = strlen(input); /* in real-world, you would url-decode the input, etc */ libinjection_sqli_init(&state, input, slen, FLAG_NONE); issqli = libinjection_is_sqli(&state); if (issqli) { fprintf(stderr, "sqli detected with fingerprint of '%s'\n", state.fingerprint); } return issqli; } ">#include
#include
#include
#include "libinjection.h"
#include "libinjection_sqli.h"

int main(int argc, const char* argv[])
{
struct libinjection_sqli_state state;
int issqli;

const char* input = argv[1];
size_t slen = strlen(input);

/* in real-world, you would url-decode the input, etc */

libinjection_sqli_init(&state, input, slen, FLAG_NONE);
issqli = libinjection_is_sqli(&state);
if (issqli) {
fprintf(stderr, "sqli detected with fingerprint of '%s'\n", state.fingerprint);
}
return issqli;
} $ gcc -Wall -Wextra examples.c libinjection_sqli.c
$ ./a.out "-1' and 1=1 union/* foo */select load_file('/etc/passwd')--"
sqli detected with fingerprint of 's&1UE'
More advanced samples: sqli_cli.c (https://github.com/client9/libinjection/blob/master/src/sqli_cli.c) reader.c (https://github.com/client9/libinjection/blob/master/src/reader.c) fptool (https://github.com/client9/libinjection/blob/master/src/fptool.c)
VERSION INFORMATION
See CHANGELOG (https://github.com/client9/libinjection/blob/master/CHANGELOG) for details. Versions are listed as "major.minor.point" Major are significant changes to the API and/or fingerprint format. Applications will need recompiling and/or refactoring. Minor are C code changes. These may include logical change to detect or suppress optimization changes code refactoring Point releases are purely data changes. These may be safely applied.
QUALITY AND DIAGNOSITICS
The continuous integration (https://www.kitploit.com/search/label/Continuous%20Integration) results at https://travis-ci.org/client9/libinjection tests the following: build and unit-tests under GCC build and unit-tests under Clang static analysis (https://www.kitploit.com/search/label/Static%20Analysis) using clang static analyzer (http://clang-analyzer.llvm.org/) static analysis (https://www.kitploit.com/search/label/Analysis) using cppcheck (https://github.com/danmar/cppcheck) checks for memory (https://www.kitploit.com/search/label/Memory) errors using valgrind (http://valgrind.org/) code coverage online using coveralls.io (https://coveralls.io/github/client9/libinjection)
EMBEDDING
The src (https://github.com/client9/libinjection/tree/master/src) directory contains everything, but you only need to copy the following into your source tree: src/libinjection.h (https://github.com/client9/libinjection/blob/master/src/libinjection.h) src/libinjection_sqli.c (https://github.com/client9/libinjection/blob/master/src/libinjection_sqli.c) src/libinjection_sqli_data.h (https://github.com/client9/libinjection/blob/master/src/libinjection_sqli_data.h) COPYING (https://github.com/client9/libinjection/blob/master/COPYING)

Download Libinjection (https://github.com/client9/libinjection)

Deep Web
Does connection timed out mean the site is dead?

I stumbled upon dozens of sites that just quite load it seems. TOR doesn't say it's dead, it just says that it's taking a long time time. Still can't load them, so can I access them somehow?

submitted by /u/343intact
[link] [comments]

No Rate Limit Forgot Password [skilvul.com]
https://alpinnnnnn13.medium.com/no-rate-limit-forgot-password-skilvul-com-18eaf5c3a54e?source=rss------bug_bounty-5

Hallo teman teman perkenalkan nama saya Mohammad Alfin Hidayatullah, Saya ingin menceritakan bagaimana saya menemukan bug NO RATE LIMIT di…Continue reading on Medium » (https://alpinnnnnn13.medium.com/no-rate-limit-forgot-password-skilvul-com-18eaf5c3a54e?source=rss------bug_bounty-5)

hacking: security in practice
This hack looks fake to me

I was watching this video from CNN. I'm not computer illiterate per se, and went into this video thinking that it would be some basic social engineering hack or something similar to r/itsaunixsystem, maybe something to laugh at. At 1:15 the victim opens a website, then clicks on a link. The voice over says "Here's what the IT guy doesn't realise, by clicking that link, he's just given David full access to his computer." My thought is that this is total BS, as I know of not a single mechanism in a web browser that would allow full remote access just by clicking one link(typically there would be popups to grant permission). Does anyone know of a way this is possible? I suspect it is completely faked as they never show proof of anything to the camera.

submitted by /u/Danny_dunn
[link] [comments]

hacking: security in practice
A WannaCry documentary that I made [crossposted from r/cybersecurity because of how much support I've been getting there. Hope this sub finds it interesting as well!]

submitted by /u/TechWithShaan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

HTML Injection — Reflected (GET)-BWAPP
https://that-odd-introvert.medium.com/html-injection-reflected-get-bwapp-d12277952f63?source=rss------bug_bounty-5

Description:Continue reading on Medium » (https://that-odd-introvert.medium.com/html-injection-reflected-get-bwapp-d12277952f63?source=rss------bug_bounty-5)

Changing the Email preference of someone.
https://abbaswafa.medium.com/changing-the-email-preference-of-someone-baae247de321?source=rss------bug_bounty-5

Sometime it is a feature but sometime converts into a Reward.Continue reading on Medium » (https://abbaswafa.medium.com/changing-the-email-preference-of-someone-baae247de321?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

HTML Injection — Reflected (GET)-BWAPP

Description:Continue reading on Medium »
Read more...

Changing the Email preference of someone.

Sometime it is a feature but sometime converts into a Reward.Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Deepfakes Are on the Rise, but Don't Panic Just Yet

Deepfakes will likely give way to deep suspicion, as users try to sort legitimate media from malicious.

Hacking on Medium
The emotion behind “All tests passed! You rock”.

https://cdn-images-1.medium.com/max/1200/1*yE_fE1i4i-wBUD7xgHkzRg.jpeg
“Make it work, make it right, make it fast.”

Continue reading on hackgenius »

Hacking on Medium
How to Verify If Your Phone Has Been Hacked

https://cdn-images-1.medium.com/max/1200/0*B5uAG8zPhzEgEALy
And What You Can Do When Your Phone is Hacked

Continue reading on Technology Hits »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Changing the Email preference of someone.

Sometime it is a feature but sometime converts into a Reward.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video