23

A lone but not alone

[Daniel @dvniel_exe]

Day 69 ⚜️

- Password hashing and salting. Encryption vs hashing. Vulnerable hashing algorithms. purpose built password hashing algorithms and developer mistakes

#cybersecurity #websec #sendhelp

[CYPHER | 🦅🛡️ @Cypher_484]

SQLi UNION attack — retrieved data from another table and logged in as administrator. ✅
The payload:
' UNION SELECT NULL,'yB7TTZ',NULL--
First find the column that accepts strings. Then pull whatever you want from any table.
Databases talk too much when you know how to ask.👀

[CYPHER | 🦅🛡️ @Cypher_484]

Solved my first SQLi lab on @pwncollege 🎉
Bypassed a login by injecting into the username field.
The server literally printed the query it was running in debug mode
WHERE username = 'admin' 1=1--
Always TRUE. Authentication dead.
#Cybersecurity

[23 @__hemophile]

@Cypher_484 Big man!

[CYPHER | 🦅🛡️ @Cypher_484]

Started learning SQL injection on @PortSwiggerAcademy today.
First thing that broke my brain a little:
Adding '-- to a URL can comment out the rest of a SQL query.
category=Gifts'--
One vulnerable input. The entire query logic rewritten.
This is just the beginning. 🔍

[CYPHER | 🦅🛡️ @Cypher_484]

https://t.co/lAfgkyl1KL

[Chess.com @chesscom]

Chess at school
Chess on plane
Chess at work
Chess on toilet
Chess in bed
Chess in dreams

And still 600 rated

[Sirsuletek @Sirsule4]

Day 38/39
Explored a Windows Forensics room and honestly It was challenging and had me stuck the entire day😂but every challenge made the investigation process more interesting.
The deeper I got into the investigation process, the more interested I became in digital forensics.

[Daniel @dvniel_exe]

Day 48 ⚜️

- Still on IDORs. Today i learned what a secure authorization design looks like
- Installed owasp juice shop and played around with it. I think dvwa focuses more on the vulnerabilities then juice-shop is more about security testing in general.

#cybersecurity

[23 @__hemophile]

@Sirsule4 @CiscoNetAcad Idan. 🔥

[Sirsuletek @Sirsule4]

Day 35 of my cybersecurity journey.

Today I worked with Metasploit and realized it’s not just about running exploits.

It’s about understanding payloads, options, and how each step fits together.

Still learning, but it’s making sense the deeper i go,

[23 @__hemophile]

@dvniel_exe Started solving overthewire natas some days ago, lol
Great work brother

[Daniel @dvniel_exe]

Day 33⚜️

- Almost done with xss. Today was about what xss vulnerabilities look like in modern apps and apis, react, vue and other frameworks
- More labs

#cybersecurity #xss #lockedin

[23 @__hemophile]

@dvniel_exe Your web-security repo is private?
I couldn't find it

[23 @__hemophile]

@DaniyalAjdadi @DHEOTF @DDAWN010 🤡
wake up

[23 @__hemophile]

@dvniel_exe have you worked with Google's firing range?

[23 @__hemophile]

@Odinakx Well, I'll say Nb5, Check!
The King can move to b7 and a6
If b7, Qc8, Checkmate!
If a6, Qc8, Check! Then Qa8, Checkmate!

What do you think??

[Sirsuletek @Sirsule4]

Futhermore!!!

[23 @__hemophile]

@Sirsule4 🔥🔥🔥

[23 @__hemophile]

@sudosheggs @ireteeh @TemitopeSobulo @_DeejustDee @RedHatPentester @tryhackme @_Amarachick @BugBountyCenter You are doing great, brother 👏🏽