Who is Hacker ?



A Hacker is a person who loves to explore the Computer Technology and takes it to the next level. However, its people misthinking that they think hackers are criminal.

In true sense, People who break the Computer Systems or Networks are Crackers and not Hackers.

The main job role of Hackers are to find out the vulnerabilities of the Computer System only for the purpose of knowledge to fix the security issues and the whole process can be termed as Ethical Hacking.

Types of hacker

Three types of hackers:

1. Black Hat Hacker : With Good technical skills but involved in bad or malicious activities.
2. White Hat Hacker : Again comes up with good technical skills and uses his knowledge and skills for defensive purpose rather than offensive purpose.
3. Gray Hat Hacker : These types of hackers work for both sides - Ethical or Malicious.

Comments

Post a Comment

Popular posts from this blog

Explain DNS Tunneling

DNS Tunneling: An Overview DNS tunneling is a technique used to exploit the Domain Name System (DNS) protocol to transfer data in and out of a target network, typically bypassing traditional network security measures like firewalls or filters. It can be used for both legitimate purposes (such as remote access) and malicious activities (data exfiltration, command-and-control for malware). How DNS Works: Normally, DNS translates human-readable domain names (e.g., example.com ) into IP addresses (e.g., 192.0.2.1 ) so that computers can communicate with each other over the internet. DNS queries and responses are lightweight and often overlooked in network security because they’re essential to internet functioning. How DNS Tunneling Works: In DNS tunneling, the attacker uses DNS queries and responses to smuggle data (which is not usually allowed by the firewall) through the DNS protocol. DNS traffic is often allowed through firewalls, making it a potential channel for communication that by...
Read more

How to prevent from SQL Injection?

Image
To avoid SQL Injection (SQLi) attacks, you can implement a range of best practices that improve security when interacting with a database. Here are the most effective ways to prevent SQLi: 1. Use Prepared Statements (Parameterized Queries) Prepared statements separate the SQL logic from the data inputs, ensuring that user input is treated as data, not executable code. Example in PHP (using PDO): In this case, the input is safely parameterized and not directly embedded into the SQL string. 2. Use Stored Procedures Stored procedures execute predefined SQL queries with parameters, reducing the chance of executing arbitrary SQL commands. Example: This ensures that inputs are handled within the stored procedure. 3. Input Validation and Sanitization Validate and sanitize all user inputs to ensure they meet the expected format (e.g., checking for valid characters like alphanumerics for usernames). Use whitelisting (allow only expected input patterns). Avoid relying solely on blacklisting ...
Read more

What is SQL Injection?

SQL Injection is a security vulnerability that allows an attacker to manipulate the SQL queries used by an application. It occurs when user input is improperly handled and incorporated directly into SQL queries, allowing the attacker to execute arbitrary SQL commands. This can lead to various malicious activities, such as retrieving, modifying, or deleting data from the database, bypassing authentication, and even gaining administrative privileges. Example of SQL Injection: A vulnerable query might look like this: $query = "SELECT * FROM users WHERE username = ' $username ' AND password = ' $password '" ; If the attacker enters ' OR '1'='1' for both the username and password fields, the query becomes: SELECT * FROM users WHERE username = '' OR '1' = '1' AND password = '' OR '1' = '1' ; This will always return true, potentially allowing unauthorized access to the system. How to Pr...
Read more