Directory Traversal nedir?Continue reading on Medium » (https://mirabbasagalarov.medium.com/directory-traversal-nedir-nas%C4%B1l-bulunur-web-security-academyden-directory-traversal-lab-%C3%A7%C3%B6z%C3%BCm%C3%BC-f25244e562bb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
4-ZERO-3 - 403/401 Bypass Methods + Bash Automation

https://blogger.googleusercontent.com/img/a/AVvXsEgDvAlbr3MFwWUB0wVGBAuJPiR_cIhDn1a-FXzBhNR-RgYkvpkgsUl19bcNQ9_K6KcoWgJ-qM9cFMn3Ss9c3fZj0I83-Yqp6RxN9w7thB1WMtz0_m-QXlAvt-B7d9LFoNjVZQsqffiS7JPOR1kJtxTdeN-iyHOBKRr-6_a8EDOaJmjQpX0jRXb68brvkg=w640-h310
>_ Introduction

4-ZERO-3 Tool to bypass 403/401. This script contain all the possible techniques to do the same.

* NOTE : If you see multiple [200 Ok]/bypasses as output, you must check the Content-Length. If the content-length is same for multiple [200 Ok]/bypasses means false positive. Reason can be "301/302" or "../" [Payload] DON'T PANIC.
* Script will print cURLPAYLOAD if possible bypass found.
>_ Preview
https://blogger.googleusercontent.com/img/a/AVvXsEhoGba3T9vdnrum-WQkW5c_vF_d_26pES7w1AR-Xsn3rjBWXZIgIKGtQQqvC0SC2T693Rw4yqewJnCcU4S5M6oHOaeoD2w97yvKEx6jGeuGjRfeicF_6GdI7G4oSja0xmwacc4GybJZbOzbROjMe0WzRFzsVUxR5_o1ZPpY2eqqQ-joLIm6Zm8oVfDfpA=w640-h306
>_ Help

root@me_dheeraj:$ bash 403-bypass.sh -h
https://blogger.googleusercontent.com/img/a/AVvXsEgDvAlbr3MFwWUB0wVGBAuJPiR_cIhDn1a-FXzBhNR-RgYkvpkgsUl19bcNQ9_K6KcoWgJ-qM9cFMn3Ss9c3fZj0I83-Yqp6RxN9w7thB1WMtz0_m-QXlAvt-B7d9LFoNjVZQsqffiS7JPOR1kJtxTdeN-iyHOBKRr-6_a8EDOaJmjQpX0jRXb68brvkg=w640-h310
>_ Usage / Modes

* Scan with specific payloads:
* [ --header] Support HEADER based bypasses/payloads
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --header

* [ --protocol] Support PROTOCOL based bypasses/payloads
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --protocol

* [ --port] Support PORT based bypasses/payloads
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --port

* [ --HTTPmethod] Support HTTP Method based bypasses/payloads
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --HTTPmethod

* [ --encode] Support URL Encoded bypasses/payloads
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --encode

* [ --SQLi] Support MySQL mod_Security & libinjection bypasses/payloads [** New **]
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --SQLi
* Complete Scan {includes all exploits/payloads} for an endpoint [ --exploit ]

root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --exploit

Prerequisites

* apt install curl [Debian]
Download 4-ZERO-3

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Directory Traversal nedir?,Nasıl bulunur?,Web Security Academyden directory traversal lab çözümü.

https://cdn-images-1.medium.com/max/707/1*AoGwv1ij3XB1YRuNYB6fSw.png
Directory Traversal nedir?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A PROUD MOMENT IN COLLEGE

The Secretary of my college has provided me a Fees Concession of 10%. Do you know why???

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Phases of Social-Engineering in Cybercrime

https://cdn-images-1.medium.com/max/1920/1*PW_aeXUwlXUnyxkLp2edAg.gif
Investigation

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox: BountyHunter

https://cdn-images-1.medium.com/max/600/1*d9GkGKSDwcRUcP8vZTDYIA.png
ENUMERATION

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
IDE — TryHackMe

https://cdn-images-1.medium.com/max/2600/0*L_b5JO_7O0-VB48Q
An easy box to practice Enumeration

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Reporting a bug

As I've posted here before, i keep running into websites with xss and sql injection vulnerability and i wanted to ask is there a specific format for a report ? Btw I didn't find any of those websites listed on a bug bounty program so is it still worth reporting ?

submitted by /u/iiMoe
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
NMAP Scan

I’m somewhat new to hacking and just now getting my feet wet. I have a couple of questions; Is there a way to discover an internal network’s assets with NMAP? Also, is there a way to scan those assets and not be on the internal network with NMAP or would I need somethin more extensive like Metasploit?

submitted by /u/PowerCaddy14
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
From Software To Monster #1 | Sky-Net

https://cdn-images-1.medium.com/max/2298/1*7ZcWr1rRKoXgwIvLGyIFKw.jpeg
Back-Story & Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Katana: Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/834/0*RgYhSLEyS62TNyjW.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bypassing a dormitory wifi that has quota

Hi,

I'm living in a state dormitory. The only way to use the wi-fi is to log in with a login page, using school information. I saw some method that using someone else's mac address. But the thing is, wi-fi has a quota of 16 gb in here. So "someone else's" quota will be end, eventually.

When the quota ends, internet slow downs to 256 kb/s. I can still use it but it's slow as hell.

Anything helps, thanks..

submitted by /u/emir0723
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video