What’s up yall!

In this post we’ll take a look at Python for data recovery.

We’ll be covering a script I made that reads through a disk (in this example, a USB) and checks for specific file signatures in an attempt to recover photos and images (.jpg) from said disk.

If you haven’t seen my previous post about data recovery using a hex editor, I highly recommend it since a lot of the knowledge from that post will be automated using this script.

I’ll also get into how you can use this script to search for other types of files later on… 😉

Let’s get into the tutorial!

What’s good?

In this post we’ll see how to do data recovery using a hex editor.

If you used a data recovery program in the past you might have asked yourself: how do they work?

That is exactly what we’ll be covering on this post. I’m sure by the end of it you’ll have a broader understanding of what files look like in terms of raw bytes and how to identify them in a drive.

Let’s jump into it! 😉

In this post, we’ll check out file transfer in Python 3 with file size verification check.

In many Python scripts you’ll come across the need for sending and receiving files over the network, so I decided to make this tutorial for a simple yet stable set of scripts to implement whenever needed.

We’ll only use standard Python libraries included with a default installation: socket, time, os and sys.

One nice little detail we’ll implement is file size verification, so that the receiving party can be sure they received the file with the exact amount of bytes the sender intended.

Let’s check it out!

In this video we’ll dive into SQL injection for beginners using both automated tools and then replicating the process by hand so we can truly understand what is going on behind the curtains.

To further comprehend this vulnerability, we’ll also take a look at the code behind the web pages: both the PHP scripts and also the SQL statements to digest it properly.

SQL injection has been a heavy contender in OWASP’s top 10 vulnerabilities every year for over a decade at this point, so safe to say that its here to stay in current web apps and in the future.

Let’s begin by clarifying what exactly is SQL / code injection…

Hello guys.

In this post we’ll take a look at how to setup Apache, MySQL and PHP on Windows and Linux. This setup is mainly for a series of SQL injection labs that I’ll be posting in the upcoming days (you’ll find the link for the HTML/PHP below). For this reason, it will be a development setup not a secure one. 😉

What will be covered:

• Installation of Apache, MySQL and PHP
• Configuration of each service where needed
• Creating MySQL user, database and grant privileges
• Download HTML/PHP pages and configure it properly

Since I’ll be doing a series of SQL injection posts, I figured it would make sense to create this post given that understanding the installation process, database users/permissions all contribute to the vulnerability.

With that said, let’s begin!