Considering a number of attacks on web application these days, one must be pro-active in case of the security. You might already be using Web Application Firewall for your web application security including but not limited to ModSecurity. However, ModSecurity works at the application layer. That means it is installed with Web Server Software (Apache, […]
Continue reading…
SQL Injection
How to Clean a Hacked WordPress Site!
Getting your site hacked is really a painfull thing, and if you are reading this probably your WordPress site got hacked. The first thing you need to do is don’t get panic. Be calm and let see how we can get your site back to normal. Since WordPress can be really hard for non-technical people […]
Continue reading…
Combine Python Graphical User Interface with SQL Injection
Python is great language for penetration testing, I saw that people mostly develop python applications with command line versions only. How ever python have such a beautiful library named Tkinter to develop a graphical user based application, in this article we will combine Tkinter with sql injection to create a small GUI application that can […]
Continue reading…
Use Python to automate SQL Injection!
Manually testing for SQL Injection on your web application is really a hectic job, and some times the automatic scanners available does not actually fit your needs. Python comes to our rescue with its rich set of available libraries that can easily automate this task for us. You can easily write python scripts that fits […]
Continue reading…
WordPress Security Through Logging & Audit Trail
WordPress security; many typically think of hardening techniques, WordPress hacks, firewalls and other similar defensive mechanisms and plugins. Though there is another very important aspect of security; logging and audit trials. A WordPress audit trail allows you to keep an eye on the production of all your users, keep a record of every change that […]
Continue reading…