1

Read With ePub reader
https://t.me/cHowTv/23

Hey guys ....$orry It 2k so long to post , I Have Been busy 😉....


So let’s see how we can get a website hacked

What you need:

*Knowledge on How to use the terminal of an operating system
* laptop or phone


That’s all

This method I want to teach you is called command Injection
Yh , some of you must have heard about that , it’s quite common( so only dumb websites/servers are susceptible. probably you would never come across any that is lol ....it’s still cool to know about it ( never say never )) .....

Sometimes hacking and controlling servers is that simple !!!

So, command injection is an exploit ( damn good one )
Here is how it Works
When submitting form we send just characters of malicious command along 😀
You will have access to the server !!!

Before ,
you might have been envisioning hackers as people with lots of softwares ....lots of computers and stuffs
But forget jo “my Guy “ sometimes an exploit can be just four characters command
So learn to look for loopholes

So let me tell you how this work .....just for knowing sake anyway....

Servers ! Are computers (like your laptop and mine , just with larger ram and memory space)
It also has operating system installed (windows or Linux Mac etc)

Now this server might host a site you can access through a particular socket(more on that later)

To access a website you have to send a request to its server for that website!

Let’s say you want to register for Facebook account
You click the url (that’s sending request to Facebook server for Facebook website )
and you are asked to input name or email address and stuffs .
Then you submit
Submitting will send the name email and number you want to register to Facebook server for it to store in case you want to log in later

Now command injection


How “command injection” work is sooooo and Simple lol

After writing maybe your email you just add some malicious command
Starting with &


Eg

Email
cHowTV@gmail.com&ls&
Password:
**

Using Terminals :

Ls (lists current directory on your Linux os )
Dir (does the same for windows )


So what this “&ls&” does is .....it bypass all the security (firewall and stuffs) since it is not seen as a threat
And executes as an OS command @cHowTv

“Ls” command on the server
Then returns the current path of the directory
Now you can go ahead and use $cd directory$ (to change the current directory and navigate around the server )

This way and hacker can move around the server ; create Blackdoor and even access the database stored on the server!


Bad News is :
When filling forms this sites does not allow you to put this & 😔
But that’s how they protect themselves

They didn’t allow the characters

Hey Guys !!

Lets talk about anonymity And Connection

Note when I mean ISP —> internet service provider ( i mean companies like glo, mtn , airtel)


VPN or PROXY or TOR

A VPN (virtual private Network) uses a special protocol to establish a virtual channel between two machines or two networks,

Now , don’t get scared , forget the grammars 😂

Those terms are just terms !!
What a VPN really does in layman’s term is
It encrypts your communication...
When you browse the Internet or visit a site

There are communications (in form of packets being sent and received with the use of protocols(usually TCP or UDP)

To really understand the details I’d set up a networking class later

When you visit sites you communicate data ....
These datas are exposed, anyone on the internet can easily grab then ( your ISP sees these data )

WHERE VPN COMES IN

The VPN uses tunneling to handle their encryption....

Envision your data (packets ) as something in a pipe or tunnel
To the outsider they don’t know what is inside the pipe ( might be water , petrol , oil )
Only you at both ends of the pipe can see what is flowing in and out of the pipe


So I hear people saying their phone IP has cast ( and they will use vPN to change their IPs )
Well sorry to break it to you
VPN DOESN’T CHANGE YOUR IP not in the literal sense anyway ....

What VPN does is put your Data inside a pipe/tunnel so no one else can see it
But you’d tell me but I checked my IP location now after connecting to VPN and it’s showing US as country ( or any country you chose)

Yes !! what you did was connect to this VPN and it helps you connect with where you are going (site)
What you see is the VPNs IP which is in US (or any country u chose)

But REALLY, your IP does not change ( the one your DNS assigned to you I mean)

Let’s see an example :

I want to connect to a dating site ( POF) ( know you all visit lol 😉)

POF does not allow Nigerians to use it’s site but allows country like US

Now
If Ola (I’m in Nigeria 😭) connects directly to POF to chat with my friend ( the firewall will filter and block my IP) and stop me from getting access to my friend

Now I begged a company , who stays in US( nord vpn) ;
Pls sir secure my connection, don’t let anyone see what and who I want to chat with ....
And help pass this information to my friend on POF
Now when my friend sends back a message ,it will be through sir Nord vpn ( remember Nord is in US and they are allowed to use POF) who will then pass it to me

PROXY

A proxy server also acts like a vpn ....
here we meet a company that gives us their servers ( computers remember?) to relay information from or to the site we are visiting

Let’s continue our example

Ola ( sadly , I’m Still in Nigeria 😀) wants to visit POF ( dating website which doesn’t allow Nigerians to visit their sites)

This time, Ola contacts a proxy company for help

They gave Ola one of their messenger who is in US ( @cHowTv server ) to help

Here Ola sends data to the proxy messenger who in turn sends it to POF ( note POF will allow the proxy messenger, coz the IP is in the US)


But note :
Ola’s communication with proxy is not secured or encrypted ( an hacker (or isp ) can see what Ola asked mr Proxy and what Ola’s friend sent Ola through mr proxy

Also, mr proxy only helps you reroute data at the application layer .... that is , it only helps with the browser you are using or the application you are using it with ....not all the traffic from your computer or phone


Here is a quick comparison between the two:
VPNs encrypt your communication while proxy sever does not . A VPN service protects you from ISP tracking, government surveillance, and hackers. Proxies don’t

VPNs work on the operating system level and reroute all your traffic while proxies work on the application level and only reroute the traffic of a specific app or browser
@cHowTv
VPNs can be slower than proxies as they need to encrypt your data