[TR] Web Security Academy — 6.Information disclosure

Continue reading on Medium »
Read more...

GOOGLE HACKING FOR PENTESTER BY SR.SYST3M

1️⃣ The user name and password

"create table" insert into" "pass|passwd|password" (ext:sql | ext:dump | ext:txt)
"your password * is" (ext:csv | ext.doc | ext:txt)

2️⃣ Key

"index of" slave_datatrans OR from_master

3️⃣ Privacy Password

"Begin (DSA | RSA)" ext:key
"index of" "secring.gpg"

4️⃣ An encrypted message

-"public | pubring | pubkeysignature | pgp | and | or |release" ext:gpg
-intext:"and" (ext:enc | ext:axx)
"ciphervalue" ext:xml

5️⃣ Chat Logs

"session start" "session ident" thomas ext:txt

6️⃣ Personal letters / e-mail

"index of" inbox.dbx
"To parent directory" inurl:"Identities"

7️⃣ Confidential files and directories

"index of" (private | secure | geheim | gizli)
"robots.txt" "User-agent" ext:txt

"this document is private | confidential | secret" ext:doc | ext:pdf | ext:xls

intitle:"index of" "jpg | png | bmp" inurl"personal | inurl:private

8️⃣ Online Webcam

intitle:"live View/ -AXIS" | inurl:view/view.shtml

inurl:"ViewFrame?Mode="

inurl:"MultiCameraFrame?Mode="

inturl:"axis-cgi/mjpg"

intext:"MOBOTIX M1"

intext:"Open Menu"

inurl:"view/index.shtml"

9️⃣ Description Identification private information

allintext: name email phone address intext:"thomas fischer" ext:pdf

Twiki inurl:"View/Main" "thomas fischer"
intitle:CV OR intitle:Lebenslauf "thomas fischer"

intitle:CV OR intitle:Lebenslauf ext:pdf OR ext:doc

🔟 username

intitle:"usage Statistics for" intext:"Total Unique Usernames"

1️⃣1️⃣ Unreliable procedures to disclose information

"php version" intitle:phpinfo inurl:info.php

1️⃣2️⃣ SQL injection vulnerabilities and weak opening path

"advanced guestbook * powered" inurl:addentry.php
intitle:"View img" inurl:viewimg.php

1️⃣3️⃣ Security Scan Report

"Assessment report" "nessus" filetype:pdf

1️⃣4️⃣ Database program and error files

"Welcome to phpmyadmin ***" "running on * as root@*" intitle:phpmyadmin
"mysql error with query"

1️⃣5️⃣ find records of these sites robots.txt screening

"robots.txt" "disallow:" filetype:txt

1️⃣6️⃣ Use this search string, you can get a lot of passwords and login account, search for these files password and account have not had encrypted

inurl:_vti_pvt "service.pwd"

1️⃣7️⃣ VNC user info

"vnc desktop" inurl:5800

1️⃣8️⃣ View public network shared printer, you can check their status, set up, you can use some of them to print their own stuff

inurl:"port_255" -htm

1️⃣9️⃣ php admin access

intitle:phpMyAdmin "Welcome to phpMyAdmin ***" running on * as root@*"

hacking: security in practice
My official email is hacked

I got an email from my firms support email account address to itself today morning.

It has the usual, you watch a porn, we recorded the screen and webcam bullshit that asks to pay in Bitcoin.

But, this is an email configured on Redmine and Nextcloud to send out notification emails. The webcam in my laptop is physically closed. And I don’t watch pornography in work machines.

The interesting part is how they got access to my email and password to send it to myself.

The email is from godaddy. It has a reasonable password strength. If they got access to the email, they may have access to the sent items and thus have info of the recipients.

Any idea how I can secure further will be greatly appreciated.

submitted by /u/vijayrex
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Exploring the use of Iptables as an Application Layer Firewall

https://external-preview.redd.it/7l6QG0hCCUd0xVQ85P-mtlUGoeSit78TRlCMXcIYxSU.jpg?width=108&crop=smart&auto=webp&s=b5c85cb79623f266299b4c36c2d5653cb4471aed submitted by /u/trot-trot
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Android Malware Flubot using UPS themed Emails for Phishing

https://external-preview.redd.it/0sGtVJ3831i-R3GVf-oTMgqtj3NqDYGBZySC_CB26VU.jpg?width=640&crop=smart&auto=webp&s=158c58549136ee9e3dfec5b7c9121d4781fe71ce submitted by /u/ProjektDVD
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Can a .onion site be tracked back to its host?

I was wondering if a .onion site in anyway can be tracked back to its host

submitted by /u/Different_Addition_2
[link] [comments]

Hacking on Medium
HEROCTF WALKTHROUGH part-2

https://cdn-images-1.medium.com/max/1413/1*Uk2zHVSip4F2lnxUb1fing.png
After completing of our first forensic challenge we go to the part two .In this second part our challenge is to find the plaintext format…

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Free Ethical Hacking Course 2021 | Best Hacking Course in 2021 | Lear Free

https://cdn-images-1.medium.com/max/1200/1*J_Thr7SDN0x9ikzt39IzWA.jpeg
Free Ethical Hacking Course 2021 | Best Hacking Course in 2021 | Lear Free

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is The Art of Exploitation still relevant?

I'm thinking if gifting the book to a friend that wants to start learning. Is the book outdated or is there a better book similar to it?

submitted by /u/TwoConditions
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

PenTesting
BlackBox Penetrating Exercise

Hi everyone, I am a sophomore studying cyber security and currently enrolled in an ethical hacking class. My professor assigned the class a homework assignment to hack into the virtual machine he set up. From a little reconnaissance, the open ports and services running on the IP Address are:

22/tcp open ssh OpenSSH 6.7p1 Debian 5+deb8u3 (protocol 2.0)

80/tcp open http Apache httpd 2.4.10 ((Debian))

11/tcp open rpcbind 2-4 (RPC #100000)

| rpcinfo:

| program version port/proto service

| 100000 2,3,4 111/tcp rpcbind

| 100000 2,3,4 111/udp rpcbind

| 100000 3,4 111/tcp6 rpcbind

| 100000 3,4 111/udp6 rpcbind

| 100024 1 33861/udp status

| 100024 1 43053/tcp6 status

| 100024 1 47080/udp6 status

|_ 100024 1 57764/tcp status

57764/tcp open status 1 (RPC #100024)

As a student that is still just a beginner in ethical hacking I am not sure what my next steps should be from this information. Any help in the right direction would be much appreciated.

submitted by /u/sneezyyyy
[link] [comments]

Hacking on Medium
10 Must -Know hacking Terminologies To guard Your Online Business From Hackers

https://cdn-images-1.medium.com/max/640/0*Ci2s-Ku5bKhHG-wF.jpg
10 Must -Know hacking Terminologies To guard Your Online Business From Hackers

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Download Free Courses
Elementor for WordPress – Getting Started

https://s3.eu-central-1.wasabisys.com/courseupload/2021/04/12x312312312312.jpg Elementor for WordPress – Getting Started — SkillShare — Free download
Elementor is an effective tool for building anything in WordPress – from entire websites to specific landing pages.
Elementor is an effective tool for building anything in WordPress – from entire websites to specific landing pages. This WordPress plugin is an all-in-one solution that can be used with your existing theme or even on its own. This makes Elementor a must-use tool for building amazing WordPress Websites.
In this course, I walk through how to use Elementor from installing it to building your first page. Learn how to build complete websites without knowing any code. Elementor makes it easy to add dynamic elements to your website using its drag and drop page builder. You will learn how to customize sections, columns, and individual elements within Elementor.

I am a website designer with over 20 years of experience. I have been designing websites with WordPress for over 15 years. I have deployed hundreds of customized WordPress websites for Small Businesses and Organizations nationwide. I have been using Elementor to build WordPress websites because it makes it easier to create dynamic websites and cuts down on overhead.
DOWNLOAD
Filename: Elementor-for-WordPress-Getting-Started.zip (download) Filesize: 1.86 GB
Course Content: https://www.skillshare.com/classes/Elementor-for-WordPress-Getting-Started/443066455

Download Free Courses
Python Exercises for Beginners: Solve 100+ Coding Challenges

https://s3.eu-central-1.wasabisys.com/courseupload/2021/04/Screen-Shot-2021-04-23-at-9.16.56-AM.png Python Exercises for Beginners: Solve 100+ Coding Challenges — Udemy — Published 4/2021 — Free download
Practice your Python Skills with 100+ Python Exercises and Check your Solutions with Step-by-Step Video Explanations. What you’ll learn*

Practice your coding and problem-solving skills with 100+ Python Coding Challenges designed for Beginners.
*

Check your solutions with detailed step-by-step video lectures that explain how to solve each challenge.
*

Learn how to use Python tools to solve exercises using strings, lists, tuples, dictionaries, conditionals, loops, recursion, files, and more.
*

Solve challenging problems that combine your knowledge of the fundamentals of programming in Python.
*

Ask questions to your instructor if you need any assistance or guidance.
*

Download the sample solutions as Python files to run, test, and experiment with the code. Requirements*

Basic knowledge of programming fundamentals and Python.
*

Enthusiasm and dedication to improve your coding and problem-solving skills.
*

You will need to have access to a Python IDE to solve the exercises. We will use PyCharm during the course, but you can use any IDE of your choice to write, test, and run your code.
*

The exercises are divided into two levels of difficulty per topic, so you can choose which ones you would like to solve first based on your level of experience.
Description
If you are learning Python and you want to take your Python skills to the next level with intensive practice, then this course is for you. Apply your knowledge to solve more than 100 Python exercises and check your solutions with step-by-step video lectures with visual effects and diagrams.

Solve 100+ Exercises to Take Your Python Skills to the Next Level.

* Solve more than 100 exercises and improve your problem-solving and coding skills.
* Learn new Python tools such as built-in functions and modules.
* Apply your knowledge of Python to solve practical coding challenges.
* Understand how the code works line by line behind the scenes.
* Identify different ways to solve a problem and which one is more concise and efficient.
* Test your code with different values and inputs to verify its correctness.
* Gain practical and valuable coding skills.

Improve your Python Skills and Gain Valuable Practical Experience

Python is currently one of the most popular programming languages and its popularity continues to rise every year. It is used for real-world applications in diverse areas such as Web Development, Data Science, Machine Learning, Artificial Intelligence and many more. Learning Python is your next step into the powerful world of computer science. Through practice, you can improve your coding and problem-solving skills. You will also learn new tools that you can use in Python.

Your knowledge of Python will be extremely helpful in any field, including:

* Web Development
* Machine Learning
* Data Science
* Artificial Intelligence
* Game Development
* Mobile App Development
* Bioinformatics
* Medical Software
* Computer Vision
* and… many more!

Coding skills are essential to succeed in the world of the future. Therefore, if you are thinking about entering any of these fields or if you are planning to expand your computer science skills, then this course is for you.

The concepts and techniques that you will learn in this course are easily transferable to other programming languages like Java, JavaScript, and many more because you will practice how to analyze and solve problems using code.

Goals

By the end of this course, you will be able to:

* Analyze a problem step by step[...]

Download Free Courses
Learn Coding from Scratch using Python

https://s3.eu-central-1.wasabisys.com/courseupload/2021/04/Screen-Shot-2021-04-23-at-9.07.08-AM.png Learn Coding from Scratch using Python — SkillShare — Free download
Hello Everyone and welcome to this class. In this class, we are going to start our coding journey from scratch with Python, a technology that is trending worldwide and is the most popular choice of programmers all over the globe.

Python is among the most popular programming languages out there and is very easy to learn. Together, we will learn coding using Python from the scratch and solve 25 coding challenges throughout this class. I will be posting all the coding challenges in the class project section so that you can practice what you will be learning in this class.
Why Python ?

Python is one of the top 10 most popular programming languages and is a general purpose and high level programming language. You can use Python for developing desktop GUI applications, websites and web applications. Also, Python, as a high level programming language, allows you to focus on core functionality of the application by taking care of common programming tasks. The simple syntax rules of the programming language further makes it easier for you to keep the code base readable and application maintainable.

Here are some of the fields where Python is used :

* Web Development
* Machine Learning and Artificial Intelligence
* Data Science
* Web Scrapping
* Game Development
* and many more……..

These are the list of things we are going to cover in this class:

* Introduction to programming
* Python Installation
* Variables
* Data Types
* Operators
* Conditional Statements
* Loops
* Data Structure in Python
* OOPS
* 25+ Coding Challenges
* and many more ……..

It doesn’t matter if you have some programming experience or not. The Class is designed by focusing on absolute newbies to the coding world. You will gain a lot of knowledge from this class and will be able to code any project using Python.
DOWNLOAD
Filename: learn.coding.from.scratch.using.python.zip (download) Filesize: 576.48 MB
Course Content: https://www.skillshare.com/classes/Learn-Coding-from-Scratch-using-Python/1614297405

Black Hat Ethical Hacking
Google Chrome V8 Bug Allows Remote Code-Execution

___________________________
@hacking_Attack
@Hacking_Video