Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Kali Linux Tutorials Ropr : A Blazing Fast Multithreaded ROP Gadget Finder. Ropper / Ropgadget Alternative ROP (Return Oriented Programming) Gadgets are small snippets of a few assembly instructions typically ending in a retinstruction which already exist…
h a value from another register I may choose to filter by the regex ^mov eax, ...;:

ropr /usr/lib/libc.so.6 -R “^mov eax, …;” > /dev/null
Found 197 gadgets in 0.118 seconds

Now I can add some filters to the command line for the highest quality results:

ropr /usr/lib/libc.so.6 -m 2 -j -s -R “^mov eax, …;”
0x000353e7: mov eax, eax; ret;
0x000788c8: mov eax, ecx; ret;
0x00052252: mov eax, edi; ret;
0x0003ae43: mov eax, edx; ret;
0x000353e6: mov eax, r8d; ret;
0x000788c7: mov eax, r9d; ret;
Found 6 gadgets in 0.046 seconds

Now I have a good movgadget candidate at address 0x00052252Download

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Erlik - Vulnerable Soap Service

https://blogger.googleusercontent.com/img/a/AVvXsEgJyVALIqobBePJ7AF6fxOgL7yeZOyJL8kZ-iqIitRH1Z8gfvWaScphMwWMiGXzoUf5_diBAv4jCVxUNfsIpy17goIRR-tZbKbjHjdYefVVoum9KEgk9lZua3Sor3QFDprpajX2IZOmQa1mzxGdwVF6NHcZ4Nw3sBIedOB8px5xslG-zzgRt38piMRGXw=w640-h364 Erlik - Vulnerable Soap Service

Tested - Kali 2022.1 DescriptionIt is a vulnerable SOAP web service. It is a lab environment created for people who want to improve themselves in the field of web penetration testing. FeaturesIt contains the following vulnerabilities.
* LFI
* SQL Injection
* Informaion Disclosure
* Command Inejction
* Brute Force
* Deserialization Installationgit clone https://github.com/anil-yelken/Vulnerable-Soap-Service

cd Vulnerable-Soap-Service

sudo pip3 install requirements.txt Usagesudo python3 vulnerable_soap.py https://blogger.googleusercontent.com/img/a/AVvXsEgyUO5_ung-EYlgmf8WqrpIs0PC7UemYh0hQSxApmF3tevnmNyAsZHo_4cgYukdmuOs8IpnNe5e0LcBXsA5KSXqfIjyNX0DeKo2TJBYXiFkU-cE3E55cphgFWryCyld-cxIurHe4WNo3FmU9CNDTJuppKFgVcYttX-7MfsrJ2hX984WPlixSgQPYqFhJw=w640-h76 Exploiting VulnerabilitiesLFICode:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/lfi.py https://blogger.googleusercontent.com/img/a/AVvXsEgKL8hCFisc1ZwbNcAbD5Y9wboODPcldw2TT0iyBf43Az7C6JXEwmzmHq_fVhb-hzytN09w5rLm5ckpOLXSnsaS1V4QEnVWe0tjMu85CE-z41UryG6BVz8Vtk-4UjVATijW0N1gKCYkF6TQVwxt4hWuV8Mn_q0EBI_OuRcTKMGFH68pgw1Nv0E1NkLZZw=w474-h640 SQL InjectionCode:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/sqli.py https://blogger.googleusercontent.com/img/a/AVvXsEgJyVALIqobBePJ7AF6fxOgL7yeZOyJL8kZ-iqIitRH1Z8gfvWaScphMwWMiGXzoUf5_diBAv4jCVxUNfsIpy17goIRR-tZbKbjHjdYefVVoum9KEgk9lZua3Sor3QFDprpajX2IZOmQa1mzxGdwVF6NHcZ4Nw3sBIedOB8px5xslG-zzgRt38piMRGXw=w640-h364 Informaion DisclosureCode:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/get_logs_information_disclosure.py https://blogger.googleusercontent.com/img/a/AVvXsEh-YShSqrr06u7v2t5HH8d3RRto9WLeMsa_rvpJF_Yqo3qyrPSJCXijD7Khg08p3j-i60nMawalzqPa7R23n7KadSh2BDHT39lX4EEWlWqjSQ4GzWVJGKlY85fyu3Cwq0aWG_D6mglHFbs_31dHh3PxQpw8yzR2n9StGeMS-SDoS2HqmOYHZfmm3sL6fA=w640-h512 Code:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/get_data_information_disclosure.py https://blogger.googleusercontent.com/img/a/AVvXsEjSjRw97e5KoDjCF-rpKxVrKmpP4opcfgJBCEtD_m-pWUQ1bzmrP8pRnZVbQFV2uFVRMT6k7eEmc8iub8m0tElVM_9MdGxAQ0_iR41KtmZw417OoGo1nYIRptyPRNwhsJ-x3u-se5rx5k8SCxAYjPHE2-I30AQe1eDXVMzXbAEQseCU_3LWgtRmLsztQg=w490-h640 Command InjectionCode:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/commandi.py https://blogger.googleusercontent.com/img/a/AVvXsEhSP3zmLmVx_CZKlnIhkKhCVMx4QZsjH5faXJeTRNvl75ku2N2-8KIeDCTQhkvTODX9l58__ebyCbYq5CUlLEyGlgFAWH1YD4qEZmemeor0vfLJN23IMx4Dz5i77b19XfeS9nH-ybVQ1heJztyFMbumdIavkQIVUsxxTkDzIKpQhcOH7MpzFxx6Aq45rg=w640-h360 Brute ForceCode:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/brute.py https://blogger.googleusercontent.com/img/a/AVvXsEj92OEMWRoNNqAq2to6WPSrkVlZ8JHaARKxi0cCh2ug7wKU-g0zRWvOjrV0xxOPjlo0j1Zb98D0QbU8aq2ZlxznLdg4MmFsmdGM1Hi0ewA6Ji6kAFSTbJwWqVry1P1Xpo4PEK44N1Uyxetz1qsD255_jlfshZccz71zlJQ6OlD9as3f2kQ6SMlZUq2O-w=w540-h640 DeserializationCode: https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/deserialization_socket.py https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/deserialization_requests.py https://blogger.googleusercontent.com/img/a/AVvXsEjvlghHB3f4eyknZfHEtdzoFfZa866Yh_juVFuBrGX4W7oKAftXb_BpCHtCHgJT2kMX-VXgjrZ-eBGVZsadZ0t2sz1IZpti40u1BsYBioHSIJA30UnMJWAEOLPoHRpkv3AnAkz3DNcjD73xlXYSyv1T2IF3YBC1c1m6WCQF0qEQPvpspRMINEFP4F31vQ=w640-h378 Download Vulnerable-Soap-Service

___________________________
@hacking_Attack
@Hacking_Video
Erlik - Vulnerable (https://www.kitploit.com/search/label/Vulnerable) Soap Service Tested - Kali (https://www.kitploit.com/search/label/Kali) 2022.1 Description It is a vulnerable SOAP web service. It is a lab environment (https://www.kitploit.com/search/label/Lab%20Environment) created for people who want to improve themselves in the field of web penetration testing.
Features It contains the following vulnerabilities. LFISQL InjectionInformaion DisclosureCommand InejctionBrute ForceDeserialization Installation git clone https://github.com/anil-yelken/Vulnerable-Soap-Service cd Vulnerable-Soap-Service sudo pip3 install requirements.txt Usage sudo python3 vulnerable_soap.py

___________________________
@hacking_Attack
@Hacking_Video