Search Results for "jsql-injection"

How It Works [Android Device] │ │ OpenVPN TCP/UDP ▼ [SNI Tunnel Client] ← Wraps traffic in SSL + injects fake SNI │ │ Looks like: HTTPS → microsoft.com ✓ ▼ [ISP Firewall] ← Passes through — sees only valid HTTPS │ ▼ [VPS Server] ← Decrypts TLS, recovers OpenVPN traffic │ ▼ [OpenVPN Server] ← Receives native OpenVPN traffic │ ▼ Internet The core trick is SNI injection: the tunnel client inserts a trusted domain name (e.g. microsoft.com) into the TLS handshake. The ISP sees what appears to be a standard HTTPS connection and allows it through. The VPS server on the other end strips the SSL wrapper and forwards the real OpenVPN packets to the OpenVPN server.

How It Works [Android Device] │ │ WireGuard UDP ▼ [SNI Tunnel Client] ← Wraps UDP in TLS/ssl + injects fake SNI │ │ Looks like: HTTPS → microsoft.com ✓ ▼ [ISP Firewall] ← Passes through — sees only valid HTTPS │ ▼ [VPS Server] ← Decrypts TLS, recovers WireGuard UDP │ ▼ [Cloudflare Warp] ← Receives native WireGuard traffic │ ▼ Internet The core trick is SNI injection: the tunnel client inserts a trusted domain name (e.g. microsoft.com) into the TLS handshake. The ISP sees what appears to be a standard HTTPS connection and allows it through. The VPS server on the other end strips the TLS wrapper and forwards the real WireGuard packets to Cloudflare.

mod_spamhaus_new is an Apache module that uses DNSBL in order to block spam relay via web forms, preventing URL injection, block HTTP DDoS attacks from bots and generally protecting your web service denying access to a known bad IP address. This module is based on mod_spamhaus but has been updated for actual web server configurations and to support a list of domains, which are NOT spam blocked so customers can reach you even if they got a dynamic IP which is on a spam list. ...

...It's fast and runs great on Lighttpd! Supports application/x-www-form-urlencoded and multipart/form-data! Highly configurable! Very fast templating! Designed to be secure, with SQL injection protection, XSS attack protection, and more! Responsive project admin!

IPv6 CARE, "IPv6 Compliant Automatic Runtime Environment", provides an environment where applications instantly become IPv6-compliant ('patch' mode, see RFC6535). It can also generate a diagnosis about the IPv6 compliance of an application ('check' mode). It uses an LD_PRELOAD-based library injection technique.

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers.

mod_dnsblacklist is a Lighttpd module that use DNSBL in order to block spam relay via web forms, preventing URL injection, block http DDoS attacks from bots and generally protecting your web service denying access to a known bad IP address.

mod_spamhaus is an Apache module that use DNSBL in order to block spam relay via web forms, preventing URL injection, block http DDoS attacks from bots and generally protecting your web service denying access to a known bad IP address.

DSP stands for Data Server Pages, the APACHE HTTP server module, that provides PL/SQL Server scripting with variable injection preprocessor and features an efficient authorization and authentication framework on the Oracle database backend.

...The code in the repository needs some fixing in order to be usable. Also, it needs a security review, especially in the query building part: as it is, %h, %R and %e placeholders could lead to SQL injection. If anyone wishes to maintain the project, just let me know.