What is XSSF or the Cross-site Scripting Framework?
The XSS Framework (XSSF) is able to manage victims of a generic XSS attack and hold an existing connection with JavaScript loop refreshing in order to allow future browser-based attacks. After injection of the generic attack (resource “loop” generated by XSSF), each victim will ask the attack server (every “x” sec...
Prequisites before building Shindig for PHP
In order to build and run Shindig for PHP, you must have the following:
A Subversion client installed in order to checkout the code.
Instructions for downloading and installing Subversion can be found here: http://subversion.tigris.org/
Apache with mod_rewrite enabled.
PHP 5.2.x with the json, simplexml, mcrypt and curl extent...
SQL注入式攻击是利用是指利用设计上的漏洞,在目标服务器上运行Sql命令以及进行其他方式的攻击
动态生成Sql命令时没有对用户输入的数据进行验证是Sql注入攻击得逞的主要原因。
比如:
如果你的查询语句是select * from admin where username='"&user&"' and password='"&pwd&"'"
那么,如果我的用户名是:1' or '1'='1
那么,你的查询语句将会变成:
select * from admin where u...