Fading Coder

One Final Commit for the Last Sprint

Exploiting SQL Injection by Bypassing Client-Side Encryption

During a security assessment of a web application at http://aa.test.com:8088/Admin/Login, a SQL injection vulnerability was identified. The login request revealed that the username and password parameters were encrypted on the client side before transmission. Analysis of the page's JavaScript source...

Implementing AES-128 in C++: Key Schedule, Round Functions, and File I/O

AES (Advanced Encryption Standard, Rijndeal) is a symmetric block cipher standardized in FIPS-197. It operates on 128-bit blocks and supports key sizes of 128, 192, or 256 bits. This guide focuses on AES-128 and shows a clean C++ implementation of the key schedule (key expansion), block encryption/d...