hacking: security in practice
A small CTF and learning community

I've made a post recently about looking for a community that's small to join and learn with, and I decided on making my own.(Discord) We already have about 10 members, but I would like to expand the server a little, and meet cool new people.

My plan with this server is to create a small community where we can do CTFs and also learn possibly, so people interested in any Cyber Security topic are welcome from all skill levels! We can form multiple teams for different time zones, so that's not an issue either.

I don't want the server to get flooded with too many new members, so if you are interested, send me a DM with an introduction of yourself, and your achievements so far. It doesn't matter if all you did was setup your linux machine, or make a simple code, I would love to hear about it and welcome you in to our server.

Looking forward to meeting new people, so if you are interested just hmu with an introduction :)

submitted by /u/SodaWasTakennn
[link] [comments]

hacking: security in practice
Hacking Mentor

I am looking for someone who would be willing to be my mentor as I take my real dive into red team operations. I am going to study full-time and aim for 120-160 hours a month for my oscp. I have multiple cybersecurity certifications that iv gotten in 2 years so I am a well-adept student.

submitted by /u/ZombieSubstantial999
[link] [comments]

SQL injection (second order)

SQL injection vulnerabilities arise when user-controllable data is incorporated into database SQL queries in an unsafe manner. An attacker…Continue reading on Medium »
Read more...

OS Command Injection

In this section, we’ll explain what OS command injection is, describe how vulnerabilities can be detected and exploited, spell out some…Continue reading on Medium »
Read more...

Finding OS Command Injection

In this section, we’ll explain what OS command injection is, describe how vulnerabilities can be detected and exploited, spell out some…Continue reading on Medium »
Read more...

Reverse Shell Using Command Injection

Hello Internet! I was first introduced to the command injection vulnerability when I took pentester Club Ethical Hacking 101 class last…Continue reading on Medium »
Read more...

Bypassing File name Filters

One of the challenging factors to a Hacker in a web application attack is the file upload. The first step in every attack is to get some…Continue reading on Medium »
Read more...

Bypassing Filename Filters Demo

One of the challenging factors to a Hacker in a web application attack is the file upload. The first step in every attack is to get some…Continue reading on Medium »
Read more...

Bypassing Directory Structure Filters

Directory traversal (also known as file path traversal) is a web security vulnerability that allows an attacker to read arbitrary files on…Continue reading on Medium »
Read more...

Bypassing File Type Filters

Unrestricted File Upload — File Extension Filter BypassContinue reading on Medium »
Read more...

Code Injection

Code Injection is the general term for attack types which consist of injecting code that is then interpreted/executed by the application…Continue reading on Medium »
Read more...

File Inclusion Demo

This script is possibly vulnerable to file inclusion attacks.Continue reading on Medium »
Read more...

Unsafe use of Reflection

This vulnerability is caused by unsafe use of the reflection mechanisms in programming languages like Java or C#Continue reading on Medium »
Read more...

PHP Object Injection

A very common and critical vulnerability in PHP applications is PHP Object Injection. This blog post explains how they work and how they…Continue reading on Medium »
Read more...

Finding OS Command Injection
https://medium.com/@pentesterclubpvtltd/finding-os-command-injection-6998c4c46108?source=rss------bug_bounty-5

In this section, we’ll explain what OS command injection is, describe how vulnerabilities can be detected and exploited, spell out some…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/finding-os-command-injection-6998c4c46108?source=rss------bug_bounty-5)

Reverse Shell Using Command Injection
https://medium.com/@pentesterclubpvtltd/reverse-shell-using-command-injection-f121bb156afa?source=rss------bug_bounty-5

Hello Internet! I was first introduced to the command injection vulnerability when I took pentester Club Ethical Hacking 101 class last…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/reverse-shell-using-command-injection-f121bb156afa?source=rss------bug_bounty-5)

Bypassing File name Filters
https://medium.com/@pentesterclubpvtltd/bypassing-file-name-filters-3a4d87775bf5?source=rss------bug_bounty-5

One of the challenging factors to a Hacker in a web application attack is the file upload. The first step in every attack is to get some…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/bypassing-file-name-filters-3a4d87775bf5?source=rss------bug_bounty-5)

Bypassing Filename Filters Demo
https://medium.com/@pentesterclubpvtltd/bypassing-filename-filters-demo-643f1493d96a?source=rss------bug_bounty-5

One of the challenging factors to a Hacker in a web application attack is the file upload. The first step in every attack is to get some…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/bypassing-filename-filters-demo-643f1493d96a?source=rss------bug_bounty-5)

Bypassing Directory Structure Filters
https://medium.com/@pentesterclubpvtltd/bypassing-directory-structure-filters-bf8dd7fe7682?source=rss------bug_bounty-5

Directory traversal (also known as file path traversal) is a web security vulnerability that allows an attacker to read arbitrary files on…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/bypassing-directory-structure-filters-bf8dd7fe7682?source=rss------bug_bounty-5)

KitPloit - PenTest Tools!
Pict - Post-Infection Collection Toolkit

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3txCImqBk57nXLdMhu4Fo1bF6nO4bZgpVYfo_oBSkYNkBE4P1fs49QXABxp0TWZLoTdgnouZD8lQkgV0judtibrJ2QR_DAh3EeI_XaB1VZc06OYGwSHcbuqmbqQLzQZRaYtPsP7katlLOAvIr7cT94rs-aZSQ20XXVcLqIBbaPJ9KOsvbeSJDMVWD/w640-h428/Pict.png This set of scripts is designed to collect a variety of data from an endpoint thought to be infected, to facilitate the incident response process. This data should not be considered to be a full forensic data collection, but does capture a lot of useful forensic information.

If you want true forensic data, you should really capture a full memory dump and image the entire drive. That is not within the scope of this toolkit. How to useThe script must be run on a live system, not on an image or other forensic data store. It does not strictly require root permissions to run, but it will be unable to collect much of the intended data without.

Data will be collected in two forms. First is in the form of summary files, containing output of shell commands, data extracted from databases, and the like. For example, the browsermodule will output a browser_extensions.txtfile with a summary of all the browser extensions installed for Safari, Chrome, and Firefox.

The second are complete files collected from the filesystem. These are stored in an artifactssubfolder inside the collection folder. SyntaxThe script is very simple to run. It takes only one parameter, which is required, to pass in a configuration script in JSON format: ./pict.py -c /path/to/config.jsonThe configuration script describes what the script will collect, and how. It should look something like this:

collection_dest
This specifies the path to store the collected data in. It can be an absolute path or a path relative to the user's home folder (by starting with a tilde). The default path, if not specified, is /Users/Shared.

Data will be collected in a folder created in this location. That folder will have a name in the form PICT-computername-YYYY-MM-DD, where the computer name is the name of the machine specified in System Preferences > Sharing and date is the date of collection. all_usersIf true, collects data from all users on the machine whenever possible. If false, collects data only for the user running the script. If not specified, this value defaults to true. collectorsPICT is modular, and can easily be expanded or reduced in scope, simply by changing what Collector modules are used.

The collectorsdata is a dictionary where the key is the name of a module to load (the name of the Python file without the .pyextension) and the value is the name of the Collector subclass found in that module. You can add additional entries for custom modules (see Writing your own modules), or can remove entries to prevent those modules from running. One easy way to remove modules, without having to look up the exact names later if you want to add them again, is to move them into a top-level dictionary named unused. settingsThis dictionary provides global settings. keepLSDataspecifies whether the lsregister.txtfile - which can be quite large - should be kept. (This file is generated automatically and is used to build output by some other modules. It contains a wealth of useful information, but can be well over 100 MB in size. If you don't need all that data, or don't want to deal with that much data, set this to false and it will be deleted when collection is finished.) zipItspecifies whether to automatically generate a zip file with the contents of the collection folder. Note that the process of zipping and unzipping the data will change some attributes, such as file ownership. moduleSettingsThis [...]