White hat hacker O:)?

Question

Hey guys please help me out with this question.
Does EVERY website have an FTP server? (I tried ftp://www.facebook.com and it didn't load why?)
How is a website vulnerable to SQL injection?
I know website like www.ussc.gov doesn't have an ftp server neither do they're vulnerable to SQL injection but how did anonymous (hackers) defaced the website?
Only asking for educational purpose. If you don't have the answer please be quiet instead of writing "Its illegal even if I had the answer I wouldn't tell you"

Answer 1

No, not every website has an FTP service. HTTP and FTP are separate and different services. HTTP, by virtue ot being exposed to the internet, is susceptible to flaws that allow someone to overwrite some parts of memory or whatever if there is not some mechanism in place to defend against such attacks.

Answer 2

White Hats hack for reliable motives, as an occasion to enable human beings understand their equipment is susceptible so they'd fix it till now a black hat hacker comes alongside and does harm to their computer.

Answer 3

I don't know the answer to the third question you asked.But here's the rest.



FTP is massively important. Without it, you cannot do much with your website. You won't be able to post pictures, videos, broadcasts, etc... or anything else that is going to make your website work. Platforms like wordpress remove the need for FTP, but this also gives you far fewer options. Once you're comfortable with FTP you can transfer large files without worrying about email limits. For example, if you have a 1GB file to send to a friend, you can upload it via ftp to your website, create a download link and send the link to your friend. Otherwise, it would be impossible to send them the file.



SQL injection is a code injection technique that exploits a security vulnerability in an application's software. The vulnerability happens when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly executed. SQL commands are thus injected from an application form into the database of an application (like queries) to change the database content or dump the database information like credit card or passwords to the attacker. SQL injection is mostly known as an attack vector for websites but can be used to attack any type of SQL database.