Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
SQLFluff - A SQL Linter And Auto-Formatter For Humans

https://1.bp.blogspot.com/-43j_9MotGMY/YKS4b8ieLCI/AAAAAAAAWO4/_ANfE8G8RPAwsvZaRJ9q_bqqfNDImADiQCNcBGAsYHQ/w640-h132/sqlfluff_1_sqlfluff-wide.png
SQLFluff is a dialect-flexible and configurable SQL linter. Designed with ELT applications in mind, SQLFluff also works with jinja templating and dbt. SQLFluff will auto-fix most linting errors, allowing you to focus your time on what matters.
Getting Started

To get started, install the package and run sqlfluff lintor sqlfluff fix.

test.sql $ sqlfluff lint test.sql == [test.sql] FAIL L: 1 | P: 1 | L003 | Single indentation uses a number of spaces not a multiple of 4 L: 1 | P: 14 | L006 | Operators should be surrounded by a single space unless at the start/end of a line L: 1 | P: 27 | L001 | Unnecessary trailing whitespace ">$ pip install sqlfluff
$ echo " SELECT a + b FROM tbl; " > test.sql
$ sqlfluff lint test.sql
== [test.sql] FAIL
L: 1 | P: 1 | L003 | Single indentation uses a number of spaces not a multiple of 4
L: 1 | P: 14 | L006 | Operators should be surrounded by a single space unless at the start/end of a line
L: 1 | P: 27 | L001 | Unnecessary trailing whitespace


You can also have a play using SQLFluff online.

For full CLI usage and rules reference, see the docs.

Documentation

For full documentation visit docs.sqlfluff.com.

Releases

SQLFluff is in beta phase - expect the tool to change significantly with potentially non-backward compatible api and configuration changes in future releases. If you'd like to join in please consider contributing.

New releases are made monthly. For more information, visit Releases.

SQLFluff on Slack

We have a fast-growing community on Slack, come and join us!

https://join.slack.com/t/sqlfluff/shared_invite/zt-o1f4x0e8-pZzarAIlQmKj_6ZwD16w0g

Contributing

There's lots to do in this project, and we're just getting started. If you want to understand more about the architecture of SQLFluff, you can find more here.

If you'd like to contribute, check out the open issues on GitHub. You can also see the guide to contributing.
Download Sqlfluff

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Great Comparison of Stealth Hacks Versus Destructive Hacks By Ralph Langner

I've highly recommended the documentary Zero Days by Alex Gibney in the past, as the interviews with cybersecurity experts and military personnel are gold. One of the people in the film that Alex interviews is Ralph Langner, who provides great information about the digital world, security and Stuxnet in Alex's film. He created his own documentary about Stuxnet, highlighting two campaigns of it in his video The Stuxnet Story: What really happened at Natanz.

He compares and contrasts the two campaigns - the first campaign being the worst nightmare for entities, as it operated in stealth and did little damage over time that could have been easily dismissed as normal operations. Some of the points he brings up about the first campaign remind me of how people always talk about destructive attacks because they sound more interesting, but it's the recon or informational attacks that hackers do that can be far worse, even though it's only informational. Intellectual property theft, as an example, can be very costly for a company, but for an attacker, it can be a short and stealthy campaign that never is discovered if done right.

By contrast the second campaign sounds worse in theory because destruction is involved, but actually results in the underlying problem being solved faster because it's identified quicker: it does more damage, it spreads everywhere, uses zero days and stolen certificates, and makes noise which results in it being discovered. This is like an attack group that takes on a big target and causes major disruptions for people all over: they then become the focus and enemy of a lot of people who didn't know about them, rather than operating by stealth (the recent pipeline attack is a good example of this, as the attack made many people aware of the group and has created a lot of enemies for the group). This type of attack lacks long term strategy and creates a lot of enemies; as Sun Tzu might caution - it actually costs more over the long run for the attacker.

This is a good reminder that while destructive hacks get a lot of attention, we should be extremely careful with information hacks. While less glamorous or interesting, they actually can be much more costly.

submitted by /u/timfcrn
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Which is your favourite cybersecurity youtube channel? And why?

Mine is hak5 because I love their teaching style and their whole series - weekly dose of techno lust is my favourite one. Hak5 features talented hackers such as glytch which is awesome.

submitted by /u/dominatevil
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
https://b.thumbs.redditmedia.com/-WMzHKRIEIMx8u4y3X2-vzRkWCZ1oQnMAVWTCnhQwUA.jpg Hello! i have been wondering if i could get my usb, connect the controller pins to something like an arduino, re-flash its EEPROM, and do interesting stuff with it.

My usb has a couple pins on its side connected to the controller, i havent been able to find its datasheet, im going to leave its complete serial number, if someone gets the datasheet, knows how to flash it ot if even knows if its posible, it will help me out a buch, Thanks.





https://preview.redd.it/bes74cxmqv071.jpg?width=1280&format=pjpg&auto=webp&s=adf829dc30531c7d0c7d33793c36c8464965b815

submitted by /u/tuviejaentanga37
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles
Blog TryHackMe Walkthrough

Today it is time to solve another challenge called “Blog”. It is available at TryHackMe for penetration testing practice. The challenge is of medium difficulty if you have the right basic knowledge and are attentive to little details that are required in the enumeration process. The credit for making this

The post Blog TryHackMe Walkthrough appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
VAST : Visibility Across Space And Time

VAST is a tool for the network telemetry engine for data-driven security investigations. Key Features High-Throughput Ingestion: import numerous log formats over 100k events/second, including Zeek, Suricata, JSON, and CSV. Low-Latency Queries: sub-second response times over the entire data lake, thanks to multi-level bitmap indexing and actor model concurrency. Particularly helpful for instant indicator checking over the […]

The post VAST : Visibility Across Space And Time appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video
Shuffling the codes: Reasons you must learn programming for finding great bugs

Hello homies! I hope you are doing great and working on your stuff. We are getting pretty good amount of time due to pandemic and luckily…Continue reading on InfoSec Write-ups »
Read more...