Ramesh Kumar

SQL injection is a code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). SQL injection must exploit a security vulnerability in an application's software, for example, when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly executed. SQL injection is mostly known as an attack vector for websites but can be used to attack any type of SQL database. (Wikipedia). It is used in database technologies. There have been creating basic.  Demo Video clip on demonstration:  https://youtu.be/KH_4s2WVDK0 Prerequisites You must have the following programs/packages in order to run this project. Apache: 2.4.46 PHP: 7.2.33 MariaDB: 10.4.14 phpMyAdmin: 5.0.2 Note: the XAMPP server includes all above mentioned technologies.  https://www.apachefriends

  Cross-site Scripting (XSS) is a client-side code injection attack. The attacker aims to execute malicious scripts in a web browser of the victim by including malicious code in a legitimate web page or web application. The actual attack occurs when the victim visits the web page or web application that executes the malicious code. The web page or web application becomes a vehicle to deliver the malicious script to the user’s browser. Vulnerable vehicles that are commonly used for Cross-site Scripting attacks are forums, message boards, and web pages that allow comments. A web page or web application is vulnerable to XSS if it uses unsanitized user input in the output that it generates. This user input must then be parsed by the victim’s browser. XSS attacks are possible in VBScript, ActiveX, Flash, and even CSS. However, they are most common in JavaScript, primarily because JavaScript is fundamental to most browsing experiences. What Can the Attacker Do with JavaScript? XSS vulnerabil