explode() and preg_replace() functions are recommended

September 2nd, 2010

Hi , I wanna indicate to two small and petty serious notes I reached and experiences gotten in php programming , however each programmer has his manner but it’s necessary to read php changelogs .

… Read more

Up again !

August 30th, 2010

Hi , I’ve been thinking around ten minutes and I couldn’t fine any appropriate title , it doesn’t matter since I want to say my words :]

It’s long time my blog hasn’t been updated so I’ve fairly expected decreasing my blog views , such a dead place , but still I have my visitors and their comments which I never imagined .
… Read more

Lifeway

April 17th, 2010

Hi everybody , I’m ashamed to admit that the phrase just came across my lips … I know it’s long time that my blog hasn’t been updated , three months I think , because of career and student life that I would be out of free time which I indicated in my blog title … Read more

Magic of programing

January 31st, 2010

Today I’ve been accidentally paying attention to a php code that reminds me a issue that it ain’t totally important how long has somebody been in programing world , just his ability to reduction and maintenance ! … Read more

Cpanel Bypass Safe mode [ extract tar.gz by Cpanel ]

January 30th, 2010

Hello everybody , after a insufferable weak that I complain with , I’m here to post up the blog , I’ve recently been occupied by penetration test on some web applications , while these days I’ve frequently seen several bypasses for php and I just wondered , the vulnerabilities are advancing coming out faster than I thought they would … Read more

Sc0rpion.ir hacked

January 27th, 2010

You may be announced of my web site hacked few days ago , it was around five O’clock , I was received an instant message of defacement of the sc0rpion.ir , I knew that it’s not an imbalance , each site has approximately been hacked one time till today . … Read more

Bypassing the mysql_real_escape_string()

January 22nd, 2010

This publishing is around bonus stuff which I’ve considered ,MySQL injection , I had written a query :

/page.php?id=-1 union select table_name,2 from from information_schema.tables
where TABLE_SCHEMA='Sc0rpion'

As you see we used a single quote in query … Read more

Current status

December 22nd, 2009

Finally after a couple of unfortunate events that led me to be away from virtual world , I’m here with a tolerable home and internet connection , I’ve fixed up my most of my problems such as changing server and .. I think I can continue just like before . … Read more

6th International ISC Conference on Information Security and Cryptology

October 12th, 2009

6th International ISC Conference on Information Security and Cryptology was successfully held in Isfahan . I went because of invitation I’d received from Ali Abbasi ( black_ice ) . there wasn’t only me but also we were a team formed from four people and we appeared as ” vulnerability analysis & penetration testing group - computer security incident response team - Sharif university of technology ” . … Read more

Ward class

September 29th, 2009

In the present paper there will be a speech about one of safety ways of the programming language PHP . in each web application you surely must care about any processing data obtained from the user and operating for their storage the database MySQL . … Read more