Hacking Articles
24.5K subscribers
1.48K photos
165 files
1.08K links
House of Pentester
Download Telegram
MS-SQL Password Cracking

πŸ”₯ Telegram: https://t.me/hackinarticles
✴️ Twitter: https://x.com/hackinarticles

MS-SQL services often rely on weak or default credentials, making them an easy target for attackers to gain unauthorized database access.

⚑️ Tools
πŸ”₯ Hydra
πŸ›  Metasploit
⚑️ Medusa
πŸš€ NetExec
πŸ’£ BruteSpray
πŸ” Nmap NSE

πŸ“– Article: https://hackingarticles.in/password-crackingms-sql/
❀1
PostgreSQL Password Cracking

πŸ”₯ Telegram: https://t.me/hackinarticles
✴️ Twitter: https://x.com/hackinarticles

PostgreSQL services often rely on weak or default credentials, making them an easy target for attackers to gain unauthorized database access.

⚑️ Tools
πŸ”₯ Hydra
πŸ›  Metasploit
⚑️ Medusa
πŸš€ Ncrack
πŸ“‘ Patator
πŸ’£ BruteSpray
πŸ” Nmap NSE

πŸ“– Article: https://www.hackingarticles.in/postgresql-password-cracking/
❀1
SMB Password Cracking

πŸ”₯ Telegram: https://t.me/hackinarticles
✴️ Twitter: https://x.com/hackinarticles

Open SMB services can expose systems to credential attacks. Weak passwords allow attackers to gain initial access and pivot deeper into the network.

⚑️ Common Tools
πŸ›  Metasploit (smb_login)
⚑️ NetExec (CrackMapExec successor)
πŸ”₯ Hydra (fast brute-force tool)
πŸ“‘ Patator & BruteSpray (automation)

πŸ’‘ SMB authentication often relies on weak or reused credentials, making it a prime target for brute-force and dictionary attacks.

πŸ“– Article: https://www.hackingarticles.in/smb-password-cracking/
❀1
🚨 STOP WASTING MONTHS ON RANDOM OSCP TUTORIALS 🚨

Most OSCP students don't fail because they lack tools.

⚠️ LIMITED SEATS AVAILABLE

πŸ”— Register Now:
https://forms.gle/bowpX9TGEs41GDG99

πŸ’¬ WhatsApp:
https://wa.me/message/HIOPPNENLOX6F1

πŸ“§ info@ignitetechnologies.in

♻️ RT to help an OSCP aspirant.

They fail because they lack a METHODOLOGY. 🎯

What actually matters?

πŸ”Ž Enumeration
⚑️ Windows & Linux PrivEsc
🏰 Active Directory Attacks
🌐 Web Exploitation
🧠 Pivoting & Tunneling
πŸ”‘ Password Attacks
πŸ’£ Public Exploit Abuse
πŸ“‹ Professional Reporting

πŸ”₯ OSCP Training β€” ADMISSIONS OPEN

No endless theory.
No random tutorials.

βœ… Hands-on labs
βœ… Real-world attack scenarios
βœ… OSCP-focused methodology
βœ… Beginner β†’ Advanced guidance
πŸš€ AI Penetration Testing Training β€” Live Online Program

The cybersecurity landscape is changing rapidly.

πŸ”— Register Now:
https://forms.gle/bowpX9TGEs41GDG99

πŸ’¬ WhatsApp:
https://wa.me/message/HIOPPNENLOX6F1

πŸ“§ Email:
info@ignitetechnologies.in

Organizations are deploying AI applications, chatbots, RAG systems, AI agents, and LLM-powered platforms at scale.

Unfortunately, many of these systems are being deployed without proper security testing.

This AI Penetration Testing curriculum covers the critical areas security professionals need to understand, including:

🧠 LLM Architecture & Security Principles
πŸ” Data Security in AI Systems
πŸ›‘ Model Security
🌐 Infrastructure Security
πŸ“‹ OWASP Top 10 for LLMs
βš™οΈ Secure LLM Installation & Deployment
πŸ”„ Model Context Protocol (MCP)
πŸš€ Publishing Models with Ollama
πŸ“š Retrieval-Augmented Generation (RAG)
🌍 Making AI Applications Public
πŸ” AI-Powered Enumeration Techniques
πŸ’₯ Prompt Injection Attacks
⚑️ LLM API Exploitation
πŸ”“ Password Leakage via AI Models
🎭 Indirect Prompt Injection
⚠️ LLM Misconfigurations
πŸ”‘ Excessive Privilege Abuse in LLM APIs
πŸ“ Content Manipulation Attacks
πŸ“€ Data Extraction Attacks
πŸ›‘ Securing AI Systems
πŸ“– System Prompt Security
πŸ€– Automated Penetration Testing with AI

The program focuses on both offensive and defensive AI security concepts, covering model, data, infrastructure, deployment, and API attack surfaces.
Topics include RAG security, prompt injection, LLM API exploitation, password leakage risks, indirect prompt injection, excessive privilege abuse, data extraction attacks, and automated AI-powered security assessments.
πŸ”₯ Join our cybersecurity community:

πŸ”₯ Telegram: https://t.me/hackinarticles
✴️ Twitter: https://x.com/hackinarticles

AI Security is no longer a niche skill.

It is quickly becoming a core competency for pentesters, red teamers, security researchers, and defenders. πŸš€
❀4πŸ‘1
🚨 STOP WASTING MONTHS ON RANDOM OSCP TUTORIALS 🚨

Most OSCP students don't fail because they lack tools.

⚠️ LIMITED SEATS AVAILABLE

πŸ”— Register Now:
https://forms.gle/bowpX9TGEs41GDG99

πŸ’¬ WhatsApp:
https://wa.me/message/HIOPPNENLOX6F1

πŸ“§ info@ignitetechnologies.in

♻️ RT to help an OSCP aspirant.

They fail because they lack a METHODOLOGY. 🎯

What actually matters?

πŸ”Ž Enumeration
⚑️ Windows & Linux PrivEsc
🏰 Active Directory Attacks
🌐 Web Exploitation
🧠 Pivoting & Tunneling
πŸ”‘ Password Attacks
πŸ’£ Public Exploit Abuse
πŸ“‹ Professional Reporting

πŸ”₯ OSCP Training β€” ADMISSIONS OPEN

No endless theory.
No random tutorials.

βœ… Hands-on labs
βœ… Real-world attack scenarios
βœ… OSCP-focused methodology
βœ… Beginner β†’ Advanced guidance
πŸš€ AI Penetration Testing Training β€” Live Online Program

The cybersecurity landscape is changing rapidly.

πŸ”— Register Now:
https://forms.gle/bowpX9TGEs41GDG99

πŸ’¬ WhatsApp:
https://wa.me/message/HIOPPNENLOX6F1

πŸ“§ Email:
info@ignitetechnologies.in

Organizations are deploying AI applications, chatbots, RAG systems, AI agents, and LLM-powered platforms at scale.

Unfortunately, many of these systems are being deployed without proper security testing.

This AI Penetration Testing curriculum covers the critical areas security professionals need to understand, including:

🧠 LLM Architecture & Security Principles
πŸ” Data Security in AI Systems
πŸ›‘ Model Security
🌐 Infrastructure Security
πŸ“‹ OWASP Top 10 for LLMs
βš™οΈ Secure LLM Installation & Deployment
πŸ”„ Model Context Protocol (MCP)
πŸš€ Publishing Models with Ollama
πŸ“š Retrieval-Augmented Generation (RAG)
🌍 Making AI Applications Public
πŸ” AI-Powered Enumeration Techniques
πŸ’₯ Prompt Injection Attacks
⚑️ LLM API Exploitation
πŸ”“ Password Leakage via AI Models
🎭 Indirect Prompt Injection
⚠️ LLM Misconfigurations
πŸ”‘ Excessive Privilege Abuse in LLM APIs
πŸ“ Content Manipulation Attacks
πŸ“€ Data Extraction Attacks
πŸ›‘ Securing AI Systems
πŸ“– System Prompt Security
πŸ€– Automated Penetration Testing with AI

The program focuses on both offensive and defensive AI security concepts, covering model, data, infrastructure, deployment, and API attack surfaces.
Topics include RAG security, prompt injection, LLM API exploitation, password leakage risks, indirect prompt injection, excessive privilege abuse, data extraction attacks, and automated AI-powered security assessments.
πŸ”₯ Join our cybersecurity community:

πŸ”₯ Telegram: https://t.me/hackinarticles
✴️ Twitter: https://x.com/hackinarticles

AI Security is no longer a niche skill.

It is quickly becoming a core competency for pentesters, red teamers, security researchers, and defenders. πŸš€
πŸ”΄ Linux Privilege Escalation Using SUID Binaries

πŸ”₯ Telegram: https://t.me/hackinarticles
✴️ Twitter: https://x.com/hackinarticles

One misconfigured SUID binary = instant root access ⚠️

⚑️ Attack Highlights
πŸ” Enumerate SUID binaries (find / -perm -4000)
πŸ›  Abuse vulnerable binaries (vim, find, bash, nano)
πŸ” Execute commands with elevated privileges
πŸ“‚ Read restricted files & modify system configs
πŸš€ Escalate from low user β†’ root access

πŸ’‘ SUID allows binaries to run with owner privileges, and dangerous misconfigurations can let attackers execute commands as root

⚠️ A single unsafe SUID binary can fully compromise the Linux system

πŸ“– Article: https://www.hackingarticles.in/linux-privilege-escalation-using-suid-binaries/
❀2
πŸ”΄ Linux Privilege Escalation by Exploiting Cron Jobs

πŸ”₯ Telegram: https://t.me/hackinarticles
✴️ Twitter: https://x.com/hackinarticles

Misconfigured cron jobs = easy path to root ⚠️

⚑️ Attack Highlights
πŸ” Enumerate scheduled tasks (/etc/crontab, /etc/cron.*)
πŸ›  Find writable scripts executed by root
πŸ“‚ Abuse wildcard injection in tar commands
πŸ§ͺ Exploit PATH hijacking in cron execution
πŸš€ Gain root shell through automated task execution

πŸ’‘ Cron jobs run with the privileges of their owner, so writable scripts or unsafe command paths can lead directly to privilege escalation ()

⚠️ One insecure scheduled task = full Linux compromise

πŸ“– Article: https://www.hackingarticles.in/linux-privilege-escalation-by-exploiting-cron-jobs/
πŸ”΄ Linux Privilege Escalation: Python Library Hijacking

πŸ”₯ Telegram: https://t.me/hackinarticles
✴️ Twitter: https://x.com/hackinarticles

One insecure Python import = instant root shell ⚠️

⚑️ Attack Highlights
πŸ” Enumerate sudo Python scripts (sudo -l)
πŸ“¦ Identify imported libraries/modules
πŸ›  Abuse writable Python modules
πŸ§ͺ Hijack PYTHONPATH execution order
🎯 Load malicious library before legit one
πŸš€ Execute code as root

πŸ’‘ Python loads modules based on search order (sys.path) β€” attackers abuse writable paths, unsafe imports, or environment variables to inject malicious code ()

⚠️ Misconfigured Python environments can lead directly to privilege escalation

πŸ“– Article: https://www.hackingarticles.in/linux-privilege-escalation-python-library-hijacking/
❀1
Linux Privilege Escalation Using Exploiting SUDO Rights

πŸ”₯ Telegram: https://t.me/hackinarticles
✴️ Twitter: https://x.com/hackinarticles

Misconfigured SUDO permissions are one of the most common paths to root access on Linux systems ⚠️

πŸ“š What You'll Learn in This Guide

πŸ” Understanding SUDO & Privilege Delegation
πŸ“‹ Enumerating SUDO Permissions with sudo -l
βš™οΈ Identifying Dangerous SUDO Configurations
🐚 Exploiting SUDO Rights for Privilege Escalation
πŸ“‚ Abusing Common Linux Binaries via SUDO
πŸ›  GTFOBins-Based SUDO Exploitation Techniques
πŸš€ Escalating to Root Shell Access
πŸ”‘ SUDO Misconfiguration Case Studies
🧠 Enumeration & Post-Exploitation Tips
πŸ›‘ Hardening SUDO Configurations
⚠️ Detection & Mitigation Strategies

πŸ’‘ SUDO misconfigurations are a well-known source of Linux privilege escalation, and improper delegation of commands can allow users to execute actions with elevated privileges.

πŸ“– Article:
https://www.hackingarticles.in/linux-privilege-escalation-using-exploiting-sudo-rights/
🚨 STOP WASTING MONTHS ON RANDOM OSCP TUTORIALS 🚨

Most OSCP students don't fail because they lack tools.

⚠️ LIMITED SEATS AVAILABLE

πŸ”— Register Now:
https://forms.gle/bowpX9TGEs41GDG99

πŸ’¬ WhatsApp:
https://wa.me/message/HIOPPNENLOX6F1

πŸ“§ info@ignitetechnologies.in

♻️ RT to help an OSCP aspirant.

They fail because they lack a METHODOLOGY. 🎯

What actually matters?

πŸ”Ž Enumeration
⚑️ Windows & Linux PrivEsc
🏰 Active Directory Attacks
🌐 Web Exploitation
🧠 Pivoting & Tunneling
πŸ”‘ Password Attacks
πŸ’£ Public Exploit Abuse
πŸ“‹ Professional Reporting

πŸ”₯ OSCP Training β€” ADMISSIONS OPEN

No endless theory.
No random tutorials.

βœ… Hands-on labs
βœ… Real-world attack scenarios
βœ… OSCP-focused methodology
βœ… Beginner β†’ Advanced guidance
OSEP Exam Practice Training (Online) – Registration Open! πŸš€

Ready to level up your offensive security skills and prepare for advanced red team operations?

Join Ignite Technologies’ Exclusive β€œCapture The Flag” (CTF) Based OSEP Practice Program and train in a real-world, attack-driven environment designed for serious cybersecurity professionals.

πŸ”— Register Now:
https://forms.gle/bowpX9TGEs41GDG99

πŸ’¬ WhatsApp:
https://wa.me/message/HIOPPNENLOX6F1

πŸ“§ Email:
info@ignitetechnologies.in

πŸ“š Training Modules Include:

πŸš€ Introduction
πŸ” Advanced Information Gathering
🎯 Initial Access & Client-Side Attacks
πŸ›‘ Bypassing Security Controls
πŸͺŸ Windows Privilege Escalation
🐧 Linux Privilege Escalation
🧭 Active Directory Enumeration
πŸ” Lateral Movement
🏰 Active Directory Attacks
🌐 Web Application Attacks
πŸ•³ Tunneling & Pivoting
🧬 Post-Exploitation & Persistence
πŸ₯· Defense Evasion & OPSEC
πŸ§ͺ Custom Malware & Tool Development
πŸ’₯ Advanced Exploitation
πŸ“ Reporting & Documentation

This program is ideal for professionals preparing for advanced offensive security certifications and those aiming to strengthen their red teaming capabilities.

Seats are limited. Secure yours today. πŸš€
❀4
🚨 STOP WASTING MONTHS ON RANDOM OSCP TUTORIALS 🚨

Most OSCP students don't fail because they lack tools.

⚠️ LIMITED SEATS AVAILABLE

πŸ”— Register Now:
https://forms.gle/bowpX9TGEs41GDG99

πŸ’¬ WhatsApp:
https://wa.me/message/HIOPPNENLOX6F1

πŸ“§ info@ignitetechnologies.in

♻️ RT to help an OSCP aspirant.

They fail because they lack a METHODOLOGY. 🎯

What actually matters?

πŸ”Ž Enumeration
⚑️ Windows & Linux PrivEsc
🏰 Active Directory Attacks
🌐 Web Exploitation
🧠 Pivoting & Tunneling
πŸ”‘ Password Attacks
πŸ’£ Public Exploit Abuse
πŸ“‹ Professional Reporting

πŸ”₯ OSCP Training β€” ADMISSIONS OPEN

No endless theory.
No random tutorials.

βœ… Hands-on labs
βœ… Real-world attack scenarios
βœ… OSCP-focused methodology
βœ… Beginner β†’ Advanced guidance
❀2