I want to start learning about this .. SQL injection and XSS if someone can recommend books names , websites anything it would be most helpful . I have read through the wikipedia already but it wasn't so helpful ...

Re: Code Injection

who are you trying to hack ?

Re: Code Injection

no one really :) Just Knowledge curiosity. I am into security as a whole , but web security is a new realm for me .. i have never made a website .. thats why some sources seem quite complicated .. and i think there must be some other way than learning web programming in order to know it's security aspects

Re: Code Injection

SQL injection: [url]http://www.securiteam.com/securityreviews/5DP0N1P76E.html[/url] [url]http://www.spidynamics.com/papers/SQLInjectionWhitePaper.pdf[/url] [url]http://www.ngssoftware.com/papers/advanced_sql_injection.pdf[/url]

XSS: [url]http://www.microsoft.com/technet/archive/security/news/crssite.mspx?mfr=true[/url] [url]http://xss-proxy.sourceforge.net/[/url] [url]http://msdn2.microsoft.com/en-us/security/aa973814.aspx[/url] [url]http://www.technicalinfo.net/papers/CSS.html[/url] [url]http://www.net-security.org/dl/articles/xss_anatomy.pdf[/url]

Knock yourself out ;)

Re: Code Injection

how about some OS level C hacking, I got this last year and it is pretty good:

[URL]http://en.wikipedia.org/wiki/Hacking:_The_Art_of_Exploitation[/URL] [URL]http://www.amazon.com/Hacking-Art-Exploitation-Jon-Erickson/dp/1593270070[/URL]

Good book with explanations of buffer overflows, format string exploits etc. Not all examples will work out of the box on your linux system, but you should be able to figure out what is wrong and fix it if you know whats up.

Now, it is time for me to quit my current job soon so that I can work on getting a network forensics or forensic analysis related job. Damn I need to use my interest in unix for something more interesting for myself day to day.

Re: Code Injection

network forensics? Is that like CSI 'n' shit? :)

Re: Code Injection

kind of actually....you can use logfiles to see what happened and examine compromised machines to tell how someone hacked into your network and figure out what happened when etc, its pretty interesting stuff (to me anyway) actually. plus of course i look like i am in the cast from csi, so i should have 1-5 extremely young good looking 190 iq+ chicks around me at all times if it is anything like the show. :lol:

Re: Code Injection

Thank you sooo much ..

preparing for hibernation ...

Re: Code Injection

[quote=res0nat0r;490189]kind of actually....you can use logfiles to see what happened and examine compromised machines to tell how someone hacked into your network and figure out what happened when etc, its pretty interesting stuff (to me anyway) actually. plus of course i look like i am in the cast from csi, so i should have 1-5 extremely young good looking 190 iq+ chicks around me at all times if it is anything like the show. :lol:[/quote]Whatever Horatio, give my regards to the nerds around you ;):D

Sounds like a cool job though, bit like I do with my work related accident investigations.