Posts

Showing posts from July, 2021

Ghindra: Reverse engineering tool

Image
Introduction This article describes an approach for using Ghidra to perform malicious code analysis. Ghidra is a free software reverse engineering (SRE) framework developed by the National Security Agency (NSA) of the United States. It was released as open-source software in March 2019, making this powerful reverse engineering tool available to all, regardless of budget. Developers at the NSA maintain an active GitHub page for Ghidra where they have addressed hundreds of bugs, questions, and enhancement requests. Since its release, Ghidra has attracted a growing community of contributors and has seen four minor releases. We touched on the release of Ghidra and mentioned its key features in a previous blog. Analyze a File with Ghidra Loading an Executable The latest Ghidra release is available here . Installing it is as simple as downloading and extracting the zip archive. To begin, launch the Ghidra batch file. Then, create a project via selecting File >> Ne

Start learning python

Image
  About Python Programming Free and open-source - You can freely use and distribute Python, even for commercial use. Easy to learn - Python has a very simple and elegant syntax. It's much easier to read and write Python programs compared to other languages like C++, Java, C#. Portable - You can move Python programs from one platform to another, and run it without any changes. Why Learn Python? Python is easy to learn. Its syntax is easy and code is very readable. Python has a lot of applications. It's used for developing web applications, data science, rapid application development, and so on. Python allows you to write programs in fewer lines of code than most of the programming languages. The popularity of Python is growing rapidly. Now it's one of the most popular programming languages. How to learn Python? Python tutorial from Programiz - We provide step by step Python tutorials, examples, and references. Get started with Python. Official Python tutorial - Might be ha

Php: Frameworks

Image
10 Popular PHP frameworks to consider PHP, or hypertext preprocessor, is an open-source server-side scripting language. It’s extremely popular, too — almost 80% of all websites were using PHP as of October 2018. But how do you know which PHP framework is right for you? This post will list the 10 best PHP frameworks out there to help you choose. No more searching through logs - diagnose and fix PHP errors faster with Raygun Learn more and try Raygun Crash Reporting free for 14 days. Why use a PHP framework? A PHP framework provides a basic structure for streamlining the development of web apps. We use them because they speed up the development process. Above all, the responsiveness of websites and applications built using PHP frameworks helps businesses fulfill their performance needs. So there’s no doubt that PHP frameworks will continue gaining attention and popularity in 2019. Here’s a list of the best PHP frameworks, based on popularity and a

Python: Flask alternatives

Image
Useful frameworks for deploying APIs without Flask or Django. https://palletsprojects.com/p/flask https://www.djangoproject.com If you’ve ever deployed an endpoint or created a website with Python, then it’s likely that you’ve heard of Flask and Django. Flask and Django are the industry standard in Python when it comes to doing nearly anything with the HTTP protocol in Python. Flask is typically used for more light-weight applications that don’t need a lot of features, whereas Django fills the void on the web-app spectrum. Both are great tools, but in some niche circumstances, it can be better to instead use a similar web-framework while not retaining the same features that Flask and Django come with. Bottle   https://bottlepy.org B o ttle is an incredibly light micro-framework for WSGI in Python. It is published under the MIT license and is entirely free for modification and distribution. A big advantage to using Bottle is that it is stored inside of a single, small Python module wit

Prevent SQL injection

Image
SQL Injection Examples and ways to prevent SQL Injection Attacks on Web Applications While testing a website or a system, the tester’s aim is to ensure if the tested product is as much protected, as possible. Security Testing is usually performed for this purpose. In order to perform this type of testing, initially, we need to consider, which attacks are most likely to happen. SQL Injection is one of those attacks. SQL Injection is considered as one of the most common attacks as it can bring serious and harmful consequences to your system and sensitive data. What You Will Learn: What Is SQL Injection? Risks Of SQL Injection The Essence Of This Attack Security Testing Of Web Applications Against SQL Injection Vulnerable Parts Of This Attack Automating SQL Injection Tests Comparison With Other Attacks Conclusion Recommended Reading What Is SQL Injection? Some of the user inputs might be used in framing SQL Statements that are then executed by the application on the database. It

Magisk: Android Root

Image
Magisk Installation If you already have Magisk installed, it is strongly recommended to upgrade directly via the Magisk app using its “Direct Install” method. The following tutorial is only for the initial installation. Getting Started Before you start: This tutorial assumes you understand how to use adb and fastboot Your device’s bootloader has to be unlocked If you plan to also install custom kernels, install it after Magisk Download and install the latest Magisk app. We use the app to gather some information about your device. In the home screen, you should see this: Pay special attention to the Ramdisk info. The result of this info determines whether your device has ramdisk in the boot partition. (Unfortunately, there are exceptions as some devices’ bootloader accepts ramdisk even if it shouldn’t. In this case, you will have to follow the instructions as if your device’s boot partition does include ramdisk. There is no way to detect