Introduction: In today’s digital age, online reviews play a crucial role in shaping the reputation and success of businesses. Google Maps, one of the most widely used navigation and mapping services, relies heavily on user-generated content, including reviews. Positive reviews can significantly boost a business’s credibility and visibility. In this article…

We mainly use error base SQL injection when we do not access any website admin by manual SQL injection or WAF Bypass. I recommend using Firefox Hackbar extension for Error base SQL injection, There is a part in hackbar like ERROR/DOUBLE .it …

SQL injection is a code injection technique that might destroy database.SQL injection is one of the most common web hacking techniques.SQL injection is the placement of malicious code in SQL statements, via web page input. We can inject SQL in many ways like manual way, using sqlmap, using Havij, but…

Crunch is a wordlist generating tool that comes pre-installed with Kali Linux. It is used to generate custom keywords based on wordlists. It generates a wordlist with permutation and combination. We could use some specific patterns and symbols to generate a wordlist.when an attacker wants to make a brute force…

Burp Suite is a set of tools used for penetration testing of web applications. It is the most popular tool among professional web app security researchers and bug bounty hunters. We can do a login brute force using this tool. It is a pre-installed tool in kali Linux. There is…

Xss-Sniper is a web penetration testing tools used for test XSS attack on the website. It is an open-source tool and it is not pre-install on Kali Linux, So If we want to use this tool in kali first we need to install it. The installation process is very simple. Go to the root directory in kali and can be downloaded from its GitHub repository: git clone https://github.com/gbrindisi/xsssniper.git Then goto xsssniper directory and run a basic scan over a GET request, use only the -u parameter followed by the full URL including a test value:

DIRB is a Web Content Scanner. It mainly used for a dictionary-based attack against a web server. If we want to brute force to get a directory/Page from web server then this tools is very helpful.DIRB main purpose is to help in professional web application auditing, especially in security-related testing. It is a pre-define tool on Kali Linux. In the dirb folder( /usr/share/wordlists/dirb ) we also get some wordlist and we can also use our own wordlist.

Nmap is a powerful network security tool used for network mapping and port scanning.Although Nmap used for port scanning, Nmap offers many additional features: host discovery. operating system detection. service version detection. network information about targets, such as DNS names, device types, and MAC addresses. You can find the Nmap…

We mainly use ​error base SQL injection​ when we do not access any website admin by manual SQL injection or WAF Bypass. I recommend using Firefox Hackebar extension for Error base SQL injection, There is a part in ​hackbar ​like ERROR/DOUBLE .it …