bump
This commit is contained in:
parent
8635ad80bb
commit
524e084c4f
|
@ -23,3 +23,7 @@
|
|||
## Wordlist Manager
|
||||
|
||||
[wordlistctl](https://github.com/BlackArch/wordlistctl.git)
|
||||
|
||||
## All in One
|
||||
|
||||
[Weakpass](https://weakpass.com) provides a password generator, a hash cracker as well as bruteforce lists to download
|
||||
|
|
File diff suppressed because it is too large
Load Diff
|
@ -0,0 +1,30 @@
|
|||
# Insecure Functions
|
||||
|
||||
This is an incomplete collection of potentially insecure functions found in well-known programming languages.
|
||||
Look it up to avoid insecure programming pitfalls.
|
||||
|
||||
## PHP
|
||||
|
||||
### MySQL
|
||||
|
||||
Following functions are insecure without limit or sanitizing input
|
||||
|
||||
```php
|
||||
mysqli_query()
|
||||
mysql_query()
|
||||
mysqli_prepare()
|
||||
query()
|
||||
prepare()
|
||||
```
|
||||
|
||||
### Local File Inclusion
|
||||
|
||||
In concjunction with user input, e.g. `POST` or `GET` these functions are insecure
|
||||
|
||||
```php
|
||||
require()
|
||||
include()
|
||||
require_once()
|
||||
include_once()
|
||||
```
|
||||
|
Loading…
Reference in New Issue