Hacking Articles Tips Tricks Videos Tutorials
470 subscribers
66K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
SQLi: next level

you may have seen some SQL injections that exploiting them are not as straightforward as what you see in the ethical hacking courses. like…Continue reading on Medium »
Read more...
SQLi: next level

you may have seen some SQL injections that exploiting them are not as straightforward as what you see in the ethical hacking courses. like…Continue reading on Medium »
Read more...
hacking: security in practice
Lucidroid

Where is the lucidroid login page disappeared , pls help

submitted by /u/Electro2077
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Going reverse

I know people have asked how to find someone's IP address through their twitter ID. But is there a way to find someone Twitter ID through their IP address?

submitted by /u/adzz_ruhaan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
The most underrated tool in bug bounty. (and the filthiest one liner possible)

One liner tool chains for bug bounty, dependent on one vital tool.Continue reading on Medium »
Read more...
The most underrated tool in bug bounty. (and the filthiest one liner possible)

One liner tool chains for bug bounty, dependent on one vital tool.Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
SQLbit : Just Another Script For Automatize Boolean-Based Blind SQL Injectionsv

SQLbit is just another script for automatize boolean-based blind SQL injections.
Works with SQLite at least, supports using cookies.
It uses bitwise comparisons with multithreading to find cell values instead of binary search, which is more efficient.

It’s able to:

* Search cell values by columns in a table
* Search characters count in a cells by columns in a table
* Search rows count in a table

The search algorithm is shown below.
Knowing the name of its column (‘sqlite_master’ by default in sqlite, for example) and the column name of it (‘name’ in sqlite) you can find values ​​of every cell in every row. And the fastest algorithm for this is checking the binary values of every character in every cell, which can be perform using multiple threads. Considering this, we can send only 7 requests to get the standard 7-bit letter, and using 1000 threads, we get ~142 letters per moment (it’s also worth keeping in mind requests to get the length of a cell value).
https://blogger.googleusercontent.com/img/a/AVvXsEigVlnpcMhM_2IcExefz68MqELBHnOBdQyRb2el2QSt5_qMoNtrKdbPlQ6B8ECg1oRTrALaYnsEPuECQNx9cPip3-IMl0Rh3pSHO9D6EDfnAfjq-LR_8jUYXhcIk7XgQ2MBEI4e2V5iBtngn74x0v-qJvO-Ch27gLTg53tCIISwcMRxpbJ0DWqWL2c6=s1850
The number of bits need to compare (7 by default for ASCII) and the number of threads can be specified as input data.

Installing

git clone https://github.com/Sunlight-Rim/sqlbit.git
pip3 install -r requirements.txt

Usage

It does not accept command line arguments, so you can specify data in the config file or at runtime program.

python sqlbit.py
https://blogger.googleusercontent.com/img/a/AVvXsEiW4XlMIjKa4qcR2FbbvFxfQNAFg0O9FCaBR3tfoWYXlJuEcHtwPIxEJYA9iMNwrS8MOk0TaAmuKeyvHmAOt2DrNzTyewEfeln8iF76d1AwMii3mczdZDK4D7vl9nMgXoAb2RVHhjrzCc_xVi6XlP1cChUBDU5j3umUalepqfG5QPmXyru1eRVWT527=s1308

Download

___________________________
@hacking_Attack
@Hacking_Video