PRESENÇA DE ANINHA

sexta-feira, 26 de maio de 2023

How To Connect Database With PHP | Cool Interface Software | Tutorial 2

Welcome to my 2nd tutorial of PHP and MYSQL. In the previous video I've discussed How to download and install a server PHP and also How to create databases and How to create tables in the databases in the form of rows and columns.

In this video I've discussed multiple ways to connect database with PHP such as by using variables etc. First of all you have need to install a cool interface software for coding. I suggested you to download any one of them such as Dreamweaver, Notepad++, Sublime Text Editor and Atom etc. I'm using sublime text editor in this series of tutorial.

Syntax of PHP

<?php

//type here the code

How to save the PHP file

You should save your PHP file in the root directory of the server. In XAMPP the "htdocs" is the root directory of the server. In WAMPP "www" is the root directory. Now how to save the file?

Step 1:

Press CTRL + S button to safe the file.

Step 2:

Go to the server location where it has been installed. By default it is installed in Local Disk C. Got C drive.

Step 3:

Go to XAMPP directory.

Step 4:

Go to htdocs diretory.

Step 5:

Save a file there with extension ".php". You can create a different folders for different projects in htdocs directory. So first create the folder in htdocs and then save your files in the folder.

How to Run PHP Script

Step 1:

Open a XAMPP control panel and start Apache and Mysql services.

Step 2:

Open your web browser.

Step 3:

Type localhost/yourFolderName/yourFileName.php and hit enter. For example: localhost/myFolder/index.php.

Best Hacking Tools

MOST USEFUL HACKING TOOL

1-Nmap-Network Mapper is popular and free open source hacker's tool.It is mainly used for discovery and security auditing.It is used for network inventory,inspect open ports manage service upgrade, as well as to inspect host or service uptime.Its advantages is that the admin user can monitor whether the network and associated nodes require patching.

2-Haschat-It is the self-proclaimed world's fastest password recovery tool. It is designed to break even the most complex password. It is now released as free software for Linux, OS X, and windows.

3-Metasploit-It is an extremely famous hacking framework or pentesting. It is the collection of hacking tools used to execute different tasks. It is a computer severity framework which gives the necessary information about security vulnerabilities. It is widely used by cyber security experts and ethical hackers also.

4-Acutenix Web Vulnerability Scanner- It crawls your website and monitor your web application and detect dangerous SQL injections.This is used for protecting your business from hackers.

5-Aircrack-ng - This tool is categorized among WiFi hacking tool. It is recommended for beginners who are new to Wireless Specefic Program. This tool is very effective when used rightly.

6-Wireshark-It is a network analyzer which permit the the tester to captyre packets transffering through the network and to monitor it. If you would like to become a penetration tester or cyber security expert it is necessary to learn how to use wireshark. It examine networks and teoubleshoot for obstacle and intrusion.

7-Putty-Is it very beneficial tool for a hacker but it is not a hacking tool. It serves as a client for Ssh and Telnet, which can help to connect computer remotely. It is also used to carry SSH tunneling to byepass firewalls. So, this is also one of the best hacking tools for hackers.

8-THC Hydra- It is one of the best password cracker tools and it consist of operative and highly experienced development team. It is the fast and stable Network Login Hacking Tools that will use dictonary or bruteforce attack to try various combination of passwords against in a login page.This Tool is also very useful for facebook hacking , instagram hacking and other social media platform as well as computer folder password hacking.

9-Nessus-It is a proprietary vulnerability scanner developed by tennable Network Security. Nessus is the world's most popular vulnerability scanner according to the surveys taking first place in 2000,2003,2006 in security tools survey.

10-Ettercap- It is a network sniffing tool. Network sniffing is a computer tool that monitors,analyse and defend malicious attacks with packet sniffing enterprise can keep track of network flow.

11-John the Ripper-It is a free famous password cracking pen testing tool that is used to execute dictionary attacks. It is initially developed for Unix OS. The Ripper has been awarded for having a good name.This tools can also be used to carry out different modifications to dictionary attacks.

12-Burp Suite- It is a network vulnerability scanner,with some advance features.It is important tool if you are working on cyber security.

13-Owasp Zed Attack Proxy Project-ZAP and is abbreviated as Zed Attack Proxy is among popular OWASP project.It is use to find vulnerabilities in Web Applications.This hacking and penetesting tool is very easy to use as well as very efficient.OWASP community is superb resource for those people that work with Cyber Security.

14-Cain & Abel-It is a password recovery tool for Microsoft Operating System. It allow easy recovery of various kinds of passwords by sniffing the networks using dictonary attacks.

15-Maltego- It is a platform that was designed to deliver an overall cyber threat pictures to the enterprise or local environment in which an organisation operates. It is used for open source intelligence and forensics developed by Paterva.It is an interactive data mining tool.

These are the Best Hacking Tools and Application Which are very useful for penetration testing to gain unauthorized access for steal crucial data, wi-fi hacking , Website hacking ,Vulnerability Scanning and finding loopholes,Computer hacking, Malware Scanning etc.

This post is only for educational purpose to know about top hacking tools which are very crucial for a hacker to gain unauthorized access. We are not responsible for any type of crime.

Continue reading

quinta-feira, 25 de maio de 2023

Stop Using MD-5, Now!

TL;DR: Don't use MD-5 to identify malware samples. Believe me, it is a bad idea. Use SHA-256 or a stronger hash function.

This post is dedicated to all malware researchers, still using MD-5 to identify malware samples.

Before deep-diving into the details, let me explain my view on this topic. Whenever you want to identify a malware, it is only OK to publish the MD-5 hash of the malware if you post at least the SHA-256 hash of the malware as well. Publishing only the MD-5 hash is unprofessional. If you want to understand why, please continue reading. If you know about the problem, but want to help me spread the word, please link to my site www.stopusingmd5now.com.

By writing articles/posts/etc. and publishing the MD-5 hash only, it is the lesser problem that you show people your incompetency about hash functions, but you also teach other people to use MD-5. And it spreads like a disease... Last but not least, if I find a sample on your blog post, and you use MD-5 only, I can't be sure we have the same sample.

Here is a list to name a few bad examples (order is in Google search rank order):

Kaspersky
Bromium
Fireeye
Webroot
Mcafee
Fox-IT
Cisco
SANS
ESET
Symantec
Watchguard
And unfortunately, even the best books on malware analysis promote the use of MD-5 - see "Practical malware analysis" Chapter 1 Page 10

Introduction to (cryptographic) hash functions

A long time ago (according to some sources since 1970) people started designing hash functions, for an awful lot of different reasons. It can be used for file integrity verification, password verification, pseudo-random generation, etc. But one of the most important properties of a cryptographic hash function is that it can "uniquely" identify a block of data with a small, fixed bit string. E.g., malware can be identified by using only the hash itself, so everybody who has the same malware sample will have the same hash; thus they can refer to the malware by the hash itself.

It is easy to conclude that there will always be collisions, where a different block of data has the same result hashes. The domain (block of data) is infinite, while the codomain (possible hash values) is finite. The question is how easy it is to find two different blocks of data, having the same hash. Mathematicians call this property "collision resistance." Proper cryptographic hash functions are collision-resistant, meaning it is impractical or impossible to find two different blocks of data, which have the same hash.

In 1989 Ronald Rivest (the first letter in the abbreviation of the RSA algorithm) designed the MD-2 hashing algorithm. Since 1997 there are publications about that this hashing algorithm is far from perfect.

In 1990 Ronald Rivest designed the MD-4 algorithm, which is considered as broken at least from 1991. But MD-4 is still in use from Windows XP until Windows 8 in the password protocol (NTLM). Unfortunately, there are more significant problems with NTLM besides using MD-4, but this can be the topic of a different blog post.

In 1991 (you might guess who) designed yet another hashing algorithm called MD-5, to replace MD-4 (because of the known weaknesses). But again, in from 1993 it has been shown many times that MD-5 is broken as well. According to Wikipedia, "On 18 March 2006, Klima published an algorithm [17] that can find a collision within one minute on a single notebook computer, using a method he calls tunneling". This means, that with the 8 years old computing power of a single notebook one can create two different files having the same MD-5 hash. But the algorithms to generate collisions have been improved since, and "a 2013 attack by Xie Tao, Fanbao Liu, and Dengguo Feng breaks MD-5 collision resistance in 2^18 time. This attack runs in less than a second on a regular computer." The key takeaway here is that it is pretty damn hard to design a secure cryptographic hash function, which is fast, but still safe. I bet that if I would develop a hash function, Ron would be able to hack it in minutes.

Now, dear malware researcher, consider the following scenario. You as, a malware analyst, find a new binary sample. You calculate the MD-5 hash of the malware, and Google for that hash. You see this hash value on other malware researchers or on a sandbox/vendor's site. This site concludes that this sample does this or that, and is either malicious or not. Either because the site is also relying solely on MD-5 or because you have only checked the MD-5 and the researcher or sandbox has a good reputation, you move on and forget this binary. But in reality, it is possible that your binary is totally different than the one analyzed by others. The results of this mistake can scale from nothing to catastrophic.

If you don't believe me, just check the hello.exe and erase.exe on this site from Peter Sellinger. Same MD-5, different binaries; a harmless and a (fake) malicious one... And you can do the same easily at home. No supercomputers, no NSA magic needed.

On a side-note, it is important to mention that even today it can be hard to find a block of data (in generic), if only the MD-5 hash is known ("pre image resistance"). I have heard people arguing this when I told them using MD-5 as a password hash function is a bad idea. The main problem with MD-5 as a password hash is not the weaknesses in MD-5 itself, but the lack of salt, lack of iterations, and lack of memory hardness. But still, I don't see any reason why you should use MD-5 as a building block for anything, which has anything to do with security. Would you use a car to drive your children to the school, which car has not been maintained in the last 23 year? If your answer is yes, you should neither have children nor a job in IT SEC.

Conclusion

If you are a malware researcher, and used MD-5 only to identify malware samples in the past, I suggest to write it down 1000 times: "I promise I won't use MD-5 to identify malware in the future."

I even made a website dedicated to this problem, www.stopusingmd5now.com . The next time you see a post/article/whatever where malware is identified by the MD-5 hash only, please link to this blog post or website, and the world will be a better and more professional place.

PS: If you are a forensics investigator, or software developer developing software used in forensics, the same applies to you.
PS 2: If you find this post too provocative and harsh, there is a reason for this ...

Update: I have modified two malware (Citadel, Atrax) with the help of HashClash, and now those have the same MD-5. Many thanks for Marc Stevens for his research, publishing his code, and help given during the collision finding.

Continue reading

The Hero’s Tale: The Tale Of The Bell Tower Drakes By Mark Hansen, TTRPG Adventure Review

When Og went to ring the library's bell in the morning, he discovered they had an infestation of drakes. Although he is a strong, and determined, man, and drakes were smaller than their more well-known cousins, Og knew he was no match for those nesting in the belfry. He would let the master know about it so they could get a band of adventurers to take care of the problem.

The Tale of the Bell Tower Drakes is an adventure written for The Hero's Tale tabletop roleplaying game (TTRPG). I received a copy from the author for review purposes.

The Hero's Tale

The Hero's Tale is an independent TTRPG that uses its own system. You can read my review of the gamebook by following this link (review).

The Hero's Tale was designed by Mark, Brendon, and Jacob Hansen. This father and two sons wanted a family-oriented game that was driven more by story. Mark also writes novelizations of the characters introduced in the basic book for the introductory adventure.

I had the opportunity to talk with Mark about their game, books, and other things he is involved in. You can watch the video on YouTube (link).

The Adventure

The Tale of the Bell Tower Drakes adventure is for novice-tier adventurers. Along with being for beginning adventurers, it is written in a manner to make it easier to access for less experienced players and game masters (narrator in this system). Throughout the adventure there are notes and commentary to help guide the narrator on how to develop the story based on the input from the player characters and the ever so random dice. This isn't a railroading of how the adventure should conclude, but advice for how to keep things moving. This includes multiple ways the adventure can be resolved.

To help make the adventure more accessible to the players the hook is well established through the characters' adventurer's guild, The Guild of the Drunken Sword. The guild is in the city of Twynn Rivers. Some general information about the city is given to allow further exploration by the narrator and the players. There is also a concluding hook to the adventure to allow the party to continue the story.

The adventure takes place over six scenes. These include character interactions, exploration, and combat. But the game is written with an emphasis for everyone to be involved in the creation of the story, and the adventure is written towards the interaction of all the players.

Along with providing some information about the city, Bell Tower Drakes includes an adventuring party of non-player characters (NPCs), and other tools for use by the narrator. The characters are fully developed and are there to create more problems for the player characters. However, they are also a nice addition for possible future encounters in the city, or if a player character is lost during the adventure a narrator may have one of the NPCs defect to help the party—allowing the player to continue the adventure.

The adventure also includes some of the resources that would be found in the main game book for quicker, easier reference to keep the flow of the game going.

Bell Tower Drakes should be able to be completed in one or two gaming sessions.

Overall

The Tale of the Bell Tower Drakes continues the feel of play presented in The Hero's Tale book and introductory adventure. The adventure is easy to read and provides enough support advice to answer a number of situations that would most likely arise during the gaming session.

The Tale of the Bell Tower Drakes could easily be adapted for other gaming systems. This is due to the main mechanics of the game being focused on the story creation.

The content of the work, both in words and in pictures, all agree with the general desire to have a gaming system that is family friendly.

I recommend The Tale of the Bell Tower Drakes to those who enjoyed the introductory adventure in the game book, and to those who are looking for a fantasy setting that could be introduced to younger gamers.

Here are the links to the items mentioned above in the article.

The Hero's Tale: Fantasy Role Playing for Family and Friends (Review).

A video chat with Mark Hansen (YouTube link).

The Tale of the Bell Tower Drakes is available on Amazon.

I'm working at keeping my material free of subscription charges by supplementing costs by being an Amazon Associate and having advertising appear. I earn a fee when people make purchases of qualified products from Amazon when they enter the site from a link on Guild Master Gaming and when people click on an ad. If you do either, thank you.

If you have a comment, suggestion, or critique please leave a comment here or send an email to guildmastergaming@gmail.com.

I have articles being published by others and you can find most of them on Guild Master Gaming on Facebook and Twitter (@GuildMstrGmng), and Instagram (danyocom). There are also videos on my YouTube Channel (@danielyocom5714).

You can also find out more about what I do at guildmastergaming.com.

Mark Hansen

quinta-feira, 18 de maio de 2023

<> cheap whitehat monthly SEO Plans <>

Hello

I`ve just checked your website and saw that it could really use a boost

if you ever should choose to consider a SEO strategy for your website,
kindly check our plans here
https://www.cheapseoagency.co/cheap-seo-packages/

thanks and regards
Cheap SEO Agency

Unsubscribe:
https://mgdots.co/unsubscribe/

sexta-feira, 12 de maio de 2023

investment opportunity

Do you want to be making money from the comfort of your home?

With my business strategy on stock and crypto trading, I can guarantee you can make up to $25k daily if you have the time and resources to invest.

Get back to me for more information if you are interested.

Thanks

James.

quinta-feira, 11 de maio de 2023

Investment opportunity

quarta-feira, 10 de maio de 2023

Investment opportunity

sexta-feira, 17 de fevereiro de 2023

Re:[2] Good morning

Good morning [nvsntq]
E-mail database at the lowest prices [rklzvklk]
Our E-mail new.bussines.year@gmail.com [wroho]
To unsubscribe, send us an email with the subject 'unsubscribe' [qmxnkvm]

CARTA AOS ABERTOS

Posso tentar entender as manifestações de religiosos fervorosos, não me referindo a nenhuma religião em especifico mas sim como um todo, o que realmente engrandece o ser humana há quem diga que é o respeito, as diferenças pelo que conheço ou acredito, religião esta incluído na diferença? pelo que lembro sim, e nessa diferenças estão incluídos, opção sexual, social e tudo que faz o ser humano diferente. eu não concordo caríssimos com um estádio cheio de "religiosos" com o intuito de se maldizer de outras formas de crença, somos iguais na diferença e isso torna nosso Brasil exatamente como ele é "DIFERENTE" por isso deixo aberta essa lacuna de fé sem rumo e sem sentido, justamente aquela fé que domina o consciente ao invés do coração, que faz o ser humano excluir e maltratar aqueles que não estão de acordo com algo que foi deixado a séculos com o intuito de não nos deixar sem registro e olhem que eu me pergunto sempre o que seria desses seres sem ela viu, mas voltado crer ou não crer depende de cada um, e isso depende de cada um e de cada qual.

por fim deixo esses questionamentos que jamais morreram serão doados para as futuras gerações ate que alguém decida abrir não somente os olhos a cabeça também.

P.S.: COMENTEM

CINE DESCENTE

2012
7 vidas
A casa do lago
A cor do paraiso
A procura da felicidade
Besouro
Conversando com DEUS
Diarios de motocicletas
Do inferno
Em busca da felicidade
Em nome de deus
Ensaio sobre cegueira
Frida
Guerra do fogo
Guerra dos mundos
Joana Darck
Loucos de amor
Matadores de Velhinhas
Meu nome não é johny
Nalfrago
O baixio das bestas
O carteiro e o poeta
O conde de monte cristo
O dia em que a terra parou
O diario de uma paixão
O livro de Eli
O maior jogo da historia
O musicista
O nome da rosa
O oleo de lourenso
O segredo de Brokeback Mountain
Orgulho e preconceito
Os contos proibidos do marquês de Sade
Sociedade dos poetas mortos
Tróia
Uma lição de amor
Valentin
Viajem ao centro da terra

Marcadores

sexta-feira, 26 de maio de 2023

How To Connect Database With PHP | Cool Interface Software | Tutorial 2

Syntax of PHP

How to save the PHP file

How to Run PHP Script

More articles

Best Hacking Tools

MOST USEFUL HACKING TOOL

2-Haschat-It is the self-proclaimed world's fastest password recovery tool. It is designed to break even the most complex password. It is now released as free software for Linux, OS X, and windows.

4-Acutenix Web Vulnerability Scanner- It crawls your website and monitor your web application and detect dangerous SQL injections.This is used for protecting your business from hackers.

5-Aircrack-ng - This tool is categorized among WiFi hacking tool. It is recommended for beginners who are new to Wireless Specefic Program. This tool is very effective when used rightly.

7-Putty-Is it very beneficial tool for a hacker but it is not a hacking tool. It serves as a client for Ssh and Telnet, which can help to connect computer remotely. It is also used to carry SSH tunneling to byepass firewalls. So, this is also one of the best hacking tools for hackers.

9-Nessus-It is a proprietary vulnerability scanner developed by tennable Network Security. Nessus is the world's most popular vulnerability scanner according to the surveys taking first place in 2000,2003,2006 in security tools survey.

10-Ettercap- It is a network sniffing tool. Network sniffing is a computer tool that monitors,analyse and defend malicious attacks with packet sniffing enterprise can keep track of network flow.

11-John the Ripper-It is a free famous password cracking pen testing tool that is used to execute dictionary attacks. It is initially developed for Unix OS. The Ripper has been awarded for having a good name.This tools can also be used to carry out different modifications to dictionary attacks.

12-Burp Suite- It is a network vulnerability scanner,with some advance features.It is important tool if you are working on cyber security.

14-Cain & Abel-It is a password recovery tool for Microsoft Operating System. It allow easy recovery of various kinds of passwords by sniffing the networks using dictonary attacks.

15-Maltego- It is a platform that was designed to deliver an overall cyber threat pictures to the enterprise or local environment in which an organisation operates. It is used for open source intelligence and forensics developed by Paterva.It is an interactive data mining tool.

These are the Best Hacking Tools and Application Which are very useful for penetration testing to gain unauthorized access for steal crucial data, wi-fi hacking , Website hacking ,Vulnerability Scanning and finding loopholes,Computer hacking, Malware Scanning etc.

This post is only for educational purpose to know about top hacking tools which are very crucial for a hacker to gain unauthorized access. We are not responsible for any type of crime.

quinta-feira, 25 de maio de 2023

Stop Using MD-5, Now!

Introduction to (cryptographic) hash functions

Conclusion

Continue reading

The Hero’s Tale: The Tale Of The Bell Tower Drakes By Mark Hansen, TTRPG Adventure Review

quinta-feira, 18 de maio de 2023

<> cheap whitehat monthly SEO Plans <>

sexta-feira, 12 de maio de 2023

investment opportunity

quinta-feira, 11 de maio de 2023

Investment opportunity

Investment opportunity

Investment opportunity

quarta-feira, 10 de maio de 2023

Investment opportunity

Investment opportunity

sexta-feira, 17 de fevereiro de 2023

Re:[2] Good morning