Not explicitly hacking, but hiding your trail with a VPN is part of the process, I’d argue.

So what do the naysayers think about Surfshark’s proud new claim about being approved by Deloitte regarding their no-log policy?

Is it legit? Is it bull? Something else?

Article: https://surfshark.com/blog/deloitte-audit-nologs

Been using a tool to pentest on a website I set up with intentional vulnerabilities on my local network and I’m lost here.

A tool I used for scanning detected a blind SQL injection point, and gave me this link:

https://www.mywebsite.com/?℅22℅09or%09sleep%287%29%231

On the point https://www.mywebsite.com/

Not part of any indexes or other pages

What does the URL fully mean? What kind of request is being done and can I get anything out of it, if at all?

It looks like its tested for a time based blind SQL response but I’d want to know how else I can modify that request to give me other information about the site with no further context

I’d like to scare some of my friends, sending them an e-mail with their e-mail as the sender.

I did this with PHP but the problem is that it gets sent in their spam folder.

Is there a way to avoid this?