For free time that I don’t have

This publishing is around bonus stuff which I’ve considered ,MySQL injection , I had written a query :

/page.php?id=-1 union select table_name,2 from from information_schema.tables
where TABLE_SCHEMA='Sc0rpion'

As you see we used a single quote in query Read more…

Bypassing, General, Hacking, Mysql injection, PHP, Security bypass mysql_real_escape_string, Bypassing, escaping by mysql_real_escape_string(), Mysql injection, PHP, Securitybypass magic_quote

Today my words are linked to my previous publications around MySQL injection attack , I examine the structure of URL used to attack .  as known each database has exclusive language ( query ) and the developing coding language handling dynamic queries makes no difference … Read more…

Bypassing, Mysql injection, PHP, Security bypass magic_quote, bypass mysql_real_escape_string, escaping by mysql_real_escape_string(), information schema, information schema mysql, local database, magic_quote, Mysql injection, order by, TABLE_SCHEMA, union select, union select table_name, unsafe dynamic mysql query

I’ve been with studding nearly 6 months and the expectancy is that it would continue until next 3 months to see my concern , konkoor . by the way this rest or free time caused me to post up blog whereas I could imagine nothing to write till I found my old PHP project !

I have made decision long time ago that was to make public the Injector source Read more…

Hacking, Mysql injection, PHP Auto injector, bypass magic_quote, bypass mysql_real_escape_string, file_get_contents, information_schema.tables, Mysql injection, PHP source of Injector, str2ascii, TABLE_SCHEMA

As server has only http port opened ( 80 ) , anything useful can’t be returned by your most trusted vulnerability scanner , the most known method called Injection may be using Read more…

Hacking, Mysql injection, PHP, Security addslashes(), breaking quote, dynamic MySQL queries, mysql_injection, mysql_real_escape_string, scape from injection, single quote

Injector is a tool that injects user defined queries into vulnerable page and does some processes and activities , in fact it’s a utility tool which enables users to profit injection bugs considering he/she knows nothing about injection attacks structures , tricks and queries ( I suppose this is default contemplation of all utilities ) Read more…

Hacking, Mysql injection, PHP Bypassing, Com based, Injection, Injector, MySQL, mysql_real_escape_string

Hi guys , let me complete the title : MySQL injection attack and comparison ways to protection PHP code against injection , each time somebody hears about Persian tutorial journal which is related to kind of Injection attacks such as MySQL , Mssql  and … Read more…

Hacking, Mysql injection, PHP, Security Blind SQL Injection, Injection, MySQL, Security, Vulnerable PHP code