glaslos

import SimpleHTTPServer
import SocketServer

paths = set()


class Handler(SimpleHTTPServer.SimpleHTTPRequestHandler):
    def do_GET(self):
        # Detect remote file inclusion
        if '=http' in self.path:

jstrosch

#!/usr/bin/env bash

# Author:       Josh Stroschein
# Date:         22 Nov 2020
# Reference:    https://suricata-update.readthedocs.io/en/latest/quickstart.html#directories-and-permissions

if (($EUID != 0)); then
    echo -e "[!] Please run this script as root or with \"sudo\"\n"
    exit 1
fi

rishiloyola

1. Generate new domain name for logstash server.

For this tutorial 
domain name = logstash-prod.xyz.com
ip = 1.2.3.4

* Enter to following directory
```
$ sudo mkdir /etc/pki
$ cd /etc/pki

tylernchls

HTTP Basics

Excerise #2

• Solution: Inpect Post request in dev tools and you will see magic number at bottom with the post data.

SQL Lesson

String injection

• Goal: Return all users from the user table in the db via string injection
• Enter Smith will give you single record
• Solution: Fart' OR '1'='1
• The above will return all users in the db even though their is no user named Fart. This is because every record will return with a true value hence the OR statement('1'='1 or true), therefore return the whole users table.