Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.7K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles|Raj Chandel's Blog
Chronos Vulnhub Walkthrrough

Chronos is an easy/medium machine from Vulnhub by AL1ENUM. This machine is also tested in VirtualBox. This lab is suitable for novices because it has significant bugs such as Remote Command Execution for reverse connection and a privilege escalation approach. So, let's get started and learn how to break things down into manageable pieces. Methodology * netdiscoverEnumeration* Abusing HTTPExploitation* Inject Netcat reverse shellPrivilege Escalation* Exploiting file express uploadLevel: Easy-MediumFirstly, we have to scan the network to find the Victim machine IP using netdiscover command.netdiscover The IP address we get is192.168.1.174 https://blogger.googleusercontent.com/img/a/AVvXsEgH0cQc1k0ymb9JXhjkJRUt6zmocFHgeD8UzMjIJOBVsoG33zuyiU3k5NwLf6LAkhpbh-ofZi4u3UaQGJsz2yiwp44m-Bwt3XISMPc73DoWinM-Y-QUracQ4TMCEpD-GNV3joBxyn9lAapChmPrbQB1II0WZys5yJQpPhFcw3ma0R3GPRQllRAC3M7izw=s16000 Nmap Further, we ran an aggressive scan (-A) for open port enumeration where we found the following port details:nmap -A 192.168.1.174According to the Nmap output, we get https://blogger.googleusercontent.com/img/a/AVvXsEjhSZhh_nCWo87Smf_gjIgH2nb80AGZaGnaVaBviRQajpKXN9S1H7FP3EoeuWXf2zGAoqwY_Cvk_ulHhVU6gDZej1iqlcnRekWvYpouB6BdRERDDftU5vGhkbHmkHMmLXoZOWL45IRlRSVrkikYAVRYW6c4Fe5hIjEMsSOuTcBbnvsRdXRozqVK6OQE8w=s16000 EnumerationLet’s check port 80 to see if we get anything interesting. We can verify it immediately in the browser because the Apache Server is running on port 80. https://blogger.googleusercontent.com/img/a/AVvXsEhia3BpSfvJs8DlLedC_qi1-JmtXS6nHnKM46Qn95EUITQPPZpkSrD5-KfhNqPE1ChvMaX3zBg05G5bxgAxar2aoTJ-s68R2LdiJ5yMKCg2K7vWbemctpBUze1JSb15l3qqkCz0yEb_oUr-nNOkmMqD2vmQ_u1tWwi2GRci9FJR_0bIG5c0S5tSvSQUOA=s16000 hostnames and URL. Since the hostname has not been included in our /etc/hosts configuration file, we cannot route. https://blogger.googleusercontent.com/img/a/AVvXsEio8_49lglGnu192hcOGrtvABCStbkoAV3hGWLZSdR00LCCi7VQTm_8rbAIQIW4DravfM0QaNUZ4Hx1_7bWGkUZoGF7CZ41r1YEYS0-8Qc0GsLaUtRra7-8eFoFBGRG9keYSL9KDSRxy0A1podRUCAISy1X0-my_ldoAX6Iljjq0y_57n8lsWQuAyY72g=s16000 192.168.1.174 chronos.localhttps://blogger.googleusercontent.com/img/a/AVvXsEibwQfRzgG56YC0EE-ydVdUZ-wXp8ze2WvE0qz-UlPG64LeJA9jc8cRK4szwEAVm3vX2vx1XMPl6s0GH6agb94sOBCE8OsUtejYLIFRpTgknQP37xXhy0WhtBSAZfYa19SsdUjtgxugEZI-brxiTHp_YkkCEgJvIONpsAK9DeROOzdeb7ad5JGYDM7P7Q=s16000 ___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Is it possible to get into a password locked windows laptop

Sorry if this question is not allowed but my uncle has recently passed on and my dad has his laptop. My dad would like to a access it but it’s locked behind a windows password, any way to get into it without a password.

submitted by /u/MrTem08
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
How to open (download or view mode) a pdf file from a website that is protected with a log in

I don't know if this is the right subreddit to post in so correct me if Im wrong.

Im trying to open a pdf file that is meant for teachers only. On the website there is an option to login as a teacher or a student, teachers gettings access to more files. I can only login as a student (for obvious reasons). Logged in as a student or not logged in at all, I can open the files that students are aloud to open, but not the ones for teachers.

The website is in Latvian so sorry about that one, but this is the link I'd go to, to download multiple of these files.

https://mape.skola2030.lv/materials/MeGMYNk9bapHhN9bRTQWAX

From the link above, I'm trying to download the 2nd option called "Dabas resursi un to ilgtspējīga izmantošana", but its only for teachers and after clicking the link it redirects me to the login page.

Though I can easily open the 3rd option which is meant for students. That opens this link:

https://mape.skola2030.lv/resources/7200

My deductional reasoning I've concluded that the 2nd option (the link only for teachers and what Im trying to get into) is this link: https://mape.skola2030.lv/resources/7199 as the number would go down by one which is the exact link right before 7200. Also opening the link redirects me to the login page.

So is there any way to open this link while bypassing the login page?

submitted by /u/Niiphox
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Log4Shell: RCE 0-day exploit CVE-2021–44228

hello i am Ahmed Salah Abdalhfaz (Elsfa7-110)Continue reading on Medium »
Read more...
Google Dork Series — Part 3 !!!

Check this out :)Continue reading on Medium »
Read more...
BLIND SSRF

Hello Everyone, this is my first write-up. This blog post is about a vulnerability that I found in a private program.Let’s call this…Continue reading on Medium »
Read more...
Sensitive Data Exposure via 403 Forbidden Bypass

Hello everyone! My name is Sagar Sajeev. I’m a high school student from India.Continue reading on Medium »
Read more...
hacking: security in practice
History of Hacking (Most important hackers,Biggest hacks etc.)

So as the title say,please suggest me some good books/documentaries or even movies,about history of hacking. I would like to know about how all started,some of the most known hackers and hacks.

There was a documentary series i watched,about guy traveling world and talking about hacks that happened around the world,but cant remember the name. There was also season two i think?



Cheers.

submitted by /u/RevMarC2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Is it true that virtually all criminal hackers eventually get caught provided they do something seriously wrong? The best way t not get caught is not do criminal hacking in the first place. As the saying goes, "can't do the time then don't do the crime".

The title basically says/asks it all.

Is true that most criminal hackers that do something that can be deemed criminal enough do eventually end up getting caught by the feds/authorities? I am just curious. I am not a criminal hacker, nor do I want to become one by the way.

Edit: Sorry for the typo in the title. Reddit does not allow editing the titles. What I meant was "The best way to" not "t".

submitted by /u/geardrivetrain
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video