Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hacktivism — A growing threat
https://cdn-images-1.medium.com/max/600/1*r8-czTZQaShexU-8f5g5sg.png
Hacktivism is often associated with the term Cyberwar, and is sometimes associated with “Cyber Terror”. A DIR server is an Internet…
Continue reading on Medium »
Hacktivism — A growing threat
https://cdn-images-1.medium.com/max/600/1*r8-czTZQaShexU-8f5g5sg.png
Hacktivism is often associated with the term Cyberwar, and is sometimes associated with “Cyber Terror”. A DIR server is an Internet…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Belkasoft CTF4 (Kidnapping Case)
https://cdn-images-1.medium.com/max/640/0*1DZnje4tXpZUqA-c.png
In this article, we’ll look at how to solve the CTF (Capture The Flag) of a Kidnapping Case that happened somewhere of a school-going boy…
Continue reading on Medium »
Belkasoft CTF4 (Kidnapping Case)
https://cdn-images-1.medium.com/max/640/0*1DZnje4tXpZUqA-c.png
In this article, we’ll look at how to solve the CTF (Capture The Flag) of a Kidnapping Case that happened somewhere of a school-going boy…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
SBI Credit Card Customers on target of Cyber Thugs, know measures to save your money!
https://cdn-images-1.medium.com/max/640/0*BCGlp_i_bsmkUNnI.jpg
Customers using the SBI’s Credit Cards as well as Debit Cards in the National Capital Territory of Delhi need to be careful.
Continue reading on Medium »
SBI Credit Card Customers on target of Cyber Thugs, know measures to save your money!
https://cdn-images-1.medium.com/max/640/0*BCGlp_i_bsmkUNnI.jpg
Customers using the SBI’s Credit Cards as well as Debit Cards in the National Capital Territory of Delhi need to be careful.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Using Public Wi-Fi is Threat to Cater to Cyberattacks
https://cdn-images-1.medium.com/max/640/0*NLYVyC-tgd1m2Fvm.jpg
Using Public Wi-Fi is a threat to cater to Cyberattacks!
Continue reading on Medium »
Using Public Wi-Fi is Threat to Cater to Cyberattacks
https://cdn-images-1.medium.com/max/640/0*NLYVyC-tgd1m2Fvm.jpg
Using Public Wi-Fi is a threat to cater to Cyberattacks!
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Dina:1.0.1 vulnhub walkthrough
https://cdn-images-1.medium.com/max/640/0*RjAoQcuMhV1GuTra.jpg
Dina:1.0.1[vulnhub]→ walkthrough
We will be looking at how I can solved dina:1.0.1 machine. In this machine we find
flag.txt file and root…
Continue reading on Medium »
Dina:1.0.1 vulnhub walkthrough
https://cdn-images-1.medium.com/max/640/0*RjAoQcuMhV1GuTra.jpg
Dina:1.0.1[vulnhub]→ walkthrough
We will be looking at how I can solved dina:1.0.1 machine. In this machine we find
flag.txt file and root…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Squashed Image | Defend the Web
https://cdn-images-1.medium.com/max/700/0*ESG-hiC0AjZsxAgh.jpg
More stegosaurus shenanigans
Continue reading on Medium »
Squashed Image | Defend the Web
https://cdn-images-1.medium.com/max/700/0*ESG-hiC0AjZsxAgh.jpg
More stegosaurus shenanigans
Continue reading on Medium »
MSA Weekly 4 — “Cara Mendapatakn Subdomain Menggunakan Subfinder & Sudomy
https://medium.com/@cakraadi/msa-weekly-4-cara-mendapatakn-subdomain-menggunakan-subfinder-sudomy-26ecc517779f?source=rss------bug_bounty-5
https://medium.com/@cakraadi/msa-weekly-4-cara-mendapatakn-subdomain-menggunakan-subfinder-sudomy-26ecc517779f?source=rss------bug_bounty-5
Dalam proses penetration atau hacking ada beberapa step/workflow yang biasa dilakukan oleh para penetration tester atau hacker sebelum…Continue reading on Medium » (https://medium.com/@cakraadi/msa-weekly-4-cara-mendapatakn-subdomain-menggunakan-subfinder-sudomy-26ecc517779f?source=rss------bug_bounty-5)
MSA Weekly 4 — “Cara Mendapatakn Subdomain Menggunakan Subfinder & Sudomy
Dalam proses penetration atau hacking ada beberapa step/workflow yang biasa dilakukan oleh para penetration tester atau hacker sebelum…Continue reading on Medium »
Read more...
Dalam proses penetration atau hacking ada beberapa step/workflow yang biasa dilakukan oleh para penetration tester atau hacker sebelum…Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
CRLFsuite : Fast CRLF Injection Scanning Tool
CRLFsuite is a fast tool specially designed to scan
Installation
$ git clone https://github.com/Nefcore/CRLFsuite.git
$ cd CRLFsuite
$ sudo python3 setup.py install
$ crlfsuite -h
Features
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Single URL scanning
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Multiple URL scanning
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png WAF detection
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png XSS through CRLF injection
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Stdin supported
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png GET & POST method supported
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Concurrency
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Powerful payloads (WAF evasion payloads are also included)
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Fast and efficient scanning with negligible false-positive
Arguments
ArgumentDiscription-u/–urltarget URL-i/–import-urlsImport targets from the file-s/–stdinScan URLs from stdin-o/–outputPath for output file-m/–methodRequest method (GET/POST)-d/–dataPOST data-uA/–user-agentSpecify User-Agent-To/–timeoutConnection timeout-c/–cookiesSpecify cookies-v/–verifyVerify SSL cert.-t/–threadsNumber of concurrent threads-sB/–skip-bannerSkip banner and args info-sP/–show-payloadsShow all the available CRLF payloads
Usage
Single URL scanning:
$ crlfsuite -u “http://testphp.vulnweb.com”
Multiple URLs scanning:
$ crlfsuite -i targets.txt
from stdin:
$ subfinder -d google.com -silent | httpx -silent | crlfsuite -s
Specifying cookies :
$ crlfsuite -u “http://testphp.vulnweb.com” –cookies “key=val; newkey=newval”
Using POST method:
$ crlfsuite -i targets.txt -m POST -d “key=val&newkey=newval”
Download
CRLFsuite : Fast CRLF Injection Scanning Tool
CRLFsuite is a fast tool specially designed to scan
CRLF injection.Installation
$ git clone https://github.com/Nefcore/CRLFsuite.git
$ cd CRLFsuite
$ sudo python3 setup.py install
$ crlfsuite -h
Features
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Single URL scanning
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Multiple URL scanning
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png WAF detection
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png XSS through CRLF injection
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Stdin supported
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png GET & POST method supported
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Concurrency
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Powerful payloads (WAF evasion payloads are also included)
https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Fast and efficient scanning with negligible false-positive
Arguments
ArgumentDiscription-u/–urltarget URL-i/–import-urlsImport targets from the file-s/–stdinScan URLs from stdin-o/–outputPath for output file-m/–methodRequest method (GET/POST)-d/–dataPOST data-uA/–user-agentSpecify User-Agent-To/–timeoutConnection timeout-c/–cookiesSpecify cookies-v/–verifyVerify SSL cert.-t/–threadsNumber of concurrent threads-sB/–skip-bannerSkip banner and args info-sP/–show-payloadsShow all the available CRLF payloads
Usage
Single URL scanning:
$ crlfsuite -u “http://testphp.vulnweb.com”
Multiple URLs scanning:
$ crlfsuite -i targets.txt
from stdin:
$ subfinder -d google.com -silent | httpx -silent | crlfsuite -s
Specifying cookies :
$ crlfsuite -u “http://testphp.vulnweb.com” –cookies “key=val; newkey=newval”
Using POST method:
$ crlfsuite -i targets.txt -m POST -d “key=val&newkey=newval”
Download
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
COM-Hunter : COM Hijacking VOODOO
COM-hunter is a COM Hijacking persistence tool written in C#.
Features
* Finds out entry valid CLSIDs in the victim’s machine.
* Finds out valid CLSIDs via Task Scheduler in the victim’s machine.
* Finds out if someone already used any of those valid CLSIDs in order to do COM persistence (LocalServer32/InprocServer32).
* Finds out if someone already used any of valid CLSID via Task Scheduler in order to do COM persistence (LocalServer32/InprocServer32).
* Tries to do automatically COM Hijacking Persistence with general valid CLSIDs (LocalServer32/InprocServer32).
* Tries to do automatically COM Hijacking Persistence via Task Scheduler.
* Tries to use “TreatAs” key in order to refere to a different component.
Usage
[+] Usage:
.\COM-Hunter.exe
-> General Options:
-h, –help Shows help and exits.
-v, –version Shows current version and exits.
-a, –about Shows info, credits about the tool and exits.
-> Modes:
Search Search Mode
Persist Persist Mode
-> Search Mode:
Get-Entry Searches for valid CLSIDs entries.
Get-Tasksch Searches for valid CLSIDs entries via Task Scheduler.
Find-Persist Searches if someone already used a valid CLSID (Defence).
Find-Tasksch Searches if someone already used a valid CLSID via Task Scheduler (Defence).
-> Persist Mode:
General Uses General method to apply COM Hijacking Persistence in Registry.
Tasksch Try to do COM Hijacking Persistence via Task Scheduler.
TreatAs Uses TreatAs Registry key to apply COM Hijacking Persistence in Registry.
-> General Usage:
.\COM-Hunter.exe Persist General
-> Tasksch Usage:
.\COM-Hunter.exe Persist Tasksch
-> TreatAs Usage:
.\COM-Hunter.exe Persist TreatAs
Example Usages
* Get-Entry (Search Mode):
.\COM-Hunter.exe Search Get-Entry
Find-Persist (Search Mode):
.\COM-Hunter.exe Search Find-Persist
General (Persist Mode):
.\COM-Hunter.exe Persist General ‘HKCU:Software\Classes\CLSID…’ C:\Users\nickvourd\Desktop\beacon.dll
Example Format Valid CLSIDs
Software\Classes\CLSID...
HKCU:Software\Classes\CLSID…
HKCU:\Software\Classes\CLSID…
HKCU\Software\Classes\CLSID…
HKEY_CURRENT_USER:Software\Classes\CLSID…
HKEY_CURRENT_USER:\Software\Classes\CLSID…
HKEY_CURRENT_USER\Software\Classes\CLSID…
Download
COM-Hunter : COM Hijacking VOODOO
COM-hunter is a COM Hijacking persistence tool written in C#.
Features
* Finds out entry valid CLSIDs in the victim’s machine.
* Finds out valid CLSIDs via Task Scheduler in the victim’s machine.
* Finds out if someone already used any of those valid CLSIDs in order to do COM persistence (LocalServer32/InprocServer32).
* Finds out if someone already used any of valid CLSID via Task Scheduler in order to do COM persistence (LocalServer32/InprocServer32).
* Tries to do automatically COM Hijacking Persistence with general valid CLSIDs (LocalServer32/InprocServer32).
* Tries to do automatically COM Hijacking Persistence via Task Scheduler.
* Tries to use “TreatAs” key in order to refere to a different component.
Usage
[+] Usage:
.\COM-Hunter.exe
-> General Options:
-h, –help Shows help and exits.
-v, –version Shows current version and exits.
-a, –about Shows info, credits about the tool and exits.
-> Modes:
Search Search Mode
Persist Persist Mode
-> Search Mode:
Get-Entry Searches for valid CLSIDs entries.
Get-Tasksch Searches for valid CLSIDs entries via Task Scheduler.
Find-Persist Searches if someone already used a valid CLSID (Defence).
Find-Tasksch Searches if someone already used a valid CLSID via Task Scheduler (Defence).
-> Persist Mode:
General Uses General method to apply COM Hijacking Persistence in Registry.
Tasksch Try to do COM Hijacking Persistence via Task Scheduler.
TreatAs Uses TreatAs Registry key to apply COM Hijacking Persistence in Registry.
-> General Usage:
.\COM-Hunter.exe Persist General
-> Tasksch Usage:
.\COM-Hunter.exe Persist Tasksch
-> TreatAs Usage:
.\COM-Hunter.exe Persist TreatAs
Example Usages
* Get-Entry (Search Mode):
.\COM-Hunter.exe Search Get-Entry
Find-Persist (Search Mode):
.\COM-Hunter.exe Search Find-Persist
General (Persist Mode):
.\COM-Hunter.exe Persist General ‘HKCU:Software\Classes\CLSID…’ C:\Users\nickvourd\Desktop\beacon.dll
Example Format Valid CLSIDs
Software\Classes\CLSID...
HKCU:Software\Classes\CLSID…
HKCU:\Software\Classes\CLSID…
HKCU\Software\Classes\CLSID…
HKEY_CURRENT_USER:Software\Classes\CLSID…
HKEY_CURRENT_USER:\Software\Classes\CLSID…
HKEY_CURRENT_USER\Software\Classes\CLSID…
Download