Posts

Showing posts from October, 2020

How to be Secure in Social media and games?

Image
This is 2020 , an era where people totally depend on technology or simply speaking the Cyber World. If I say Social media then most of us use it Wright!  But most of us don't know the probable threats that once caused can seriously damage whole of our life . After installing during the configuration process we give the access to some various informative & vital parts of our device such as: Call logs, Media access etc..... And also link some  other apps mostly games to Social media such as Facebook for accessing photos,  medias etc...some people also link it without having the right knowledge just because they see the option. And here comes the most dangerous part. If by chance anyone gains the access to your social media account with a bad intention he/she can easily get the access to everything linked with it. And to get that is super easy...           And as a result of getting the access to your account the person will change your acco...

What is Blind SQL Injection?

Image
Blind SQL Injection is a type of SQL ( Structured QueryLanguage )  injection attack that asks the database questions related to True  Or  False and then determines the answer based on the application's response.  This attack is done when the application is configured to show generic error messages, but has not mitigated the code that is vulnerable to SQL Injection.  Sometimes when exploiting SQL Injection to a Web Application it shows error messages saying that the syntax of  SQL query is incorrect and Blind SQL is almost same as the normal SQL Injection. In this case the only difference is the way of retrieving Data from the DATABASE.  In case the database doesn't output the Data then the attacker has to force it out by asking the database a series of questions related to True  or False. Now in the of Blind SQL Injection   the risk factor of a Web Application is the same as of normal SQL Injection.  Here the attacker may verify th...

What is SQL Injection ?

Image
SQL Injection is a method of injecting codes.  This technique is used to insert malicious codes or statements of SQL in data-driven applications into it's entry field to get executed.  SQL injection may exploit a vulnerability of a software in case the user's input is incorrectly filtered for string literal escape characters in the statement or when the user input is not correctly typed & is executed unexpectedly. SQL Injection is also called the attack vector but can be used for attacking any type of SQL database. SQL Injection attack allows attackers to mess with the database, to spoof identity, tampering with the existing data and many more which the ba guys can do also to totally disclose all data on the system, and become the administrator of that data server.                      - Thank You            All The Best!                Stay Safe ...