Sql Injection for Beginners using Sqlmap

Hello Learners, so let’s start with my first blog it is just based on a topic you already knew SQL injection before that let me just…Continue reading on Medium »
Read more...

OverTheWire : Natas (Level 0–10)

This is a fairly interesting collection of challenges that helps to get an idea of Web Security.Continue reading on System Weakness »
Read more...

EvilnoVNC - Ready To Go Phishing Platform
http://www.kitploit.com/2022/10/evilnovnc-ready-to-go-phishing-platform.html

___________________________
@hacking_Attack
@Hacking_Video

EvilnoVNC is a Ready to go Phishing (https://www.kitploit.com/search/label/Phishing) Platform. Unlike other phishing techniques, EvilnoVNC allows 2FA bypassing (https://www.kitploit.com/search/label/Bypassing) by using a real browser over a noVNC connection. In addition, this tool allows us to see in real time (https://www.kitploit.com/search/label/Real%20Time) all of the victim's actions, access to their downloaded files and the entire browser profile, including cookies, saved passwords, browsing history and much more.
Requirements Docker Chromium Download It's recommended to clone the complete repository or download the zip file.
Additionally, it's necessary to build Docker manually. You can do this by running the following commands: git clone https://github.com/JoelGMSec/EvilnoVNC
cd EvilnoVNC ; sudo chown -R 103 Downloads
sudo docker build -t joelgmsec/evilnovnc .
Usage ./start.sh -h

_____ _ _ __ ___ _ ____
| ____|_ _(_) |_ __ __\ \ / / \ | |/ ___|
| _| \ \ / / | | '_ \ / _ \ \ / /| \| | |
| |___ \ V /| | | | | | (_) \ V / | |\ | |___
|_____| \_/ |_|_|_| |_|\___/ \_/ |_| \_|\____|

---------------- by @JoelGMSec --------------

Usage: ./start.sh $resolution $url

Examples:
1280x720 16bits: ./start.sh 1280x720x16 http://example.com
1280x720 24bits: ./start.sh 1280x720x24 http://example.com
1920x1080 16bits: ./start.sh 1920x1080x16 http://example.com
1920x1080 24bits: ./start.sh 1920x1080x24 http://example.com

The detailed guide of use can be found at the following link: https://darkbyte.net/robando-sesiones-y-bypasseando-2fa-con-evilnovnc Features & To Do Export Evil-Chromium profile to host Save download files on host Disable parameters in URL (like password) Disable key combinations (like Alt+1 or Ctrl+S) Disable access to Thunar Decrypt cookies (https://www.kitploit.com/search/label/Cookies) in real time Expand cookie life to 99999999999999999 Dynamic (https://www.kitploit.com/search/label/Dynamic) title from original website Dynamic resolution from preload page Replicate real user-agent and other stuff Basic keylogger License This project is licensed under the GNU 3.0 license - see the LICENSE file for more details. Credits and Acknowledgments Original idea by @mrd0x (https://twitter.com/mrd0x): https://mrd0x.com/bypass-2fa-using-novnc
This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec Contact This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it. For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).

Download EvilnoVNC (https://github.com/JoelGMSec/EvilnoVNC)

___________________________
@hacking_Attack
@Hacking_Video

EXPLOITING OS COMMAND INJECTION VULNERABILITIES
https://infosecwriteups.com/exploiting-os-command-injection-vulnerabilities-14195c9a410b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi! My name is Hashar Mujahid. And today we are going to learn what OS command injections are and how we can exploit them.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/exploiting-os-command-injection-vulnerabilities-14195c9a410b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

EXPLOITING OS COMMAND INJECTION VULNERABILITIES

Hi! My name is Hashar Mujahid. And today we are going to learn what OS command injections are and how we can exploit them.Continue reading on InfoSec Write-ups »
Read more...

hacking: security in practice
Hack the box

How much of their resources are accesible for free? Is their free version even practical to learn anything useful, or one has to paid to get anything from there?

submitted by /u/Liiberto
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible creating an exploit for PIE x86_64 programs?

I think is possible only having memory leaks and knowing the address of libc..., then you can create a ROP/JOP but without leaks with PIE and the stack protector in x86_64 practically is impossible to exploit it.

What you guys think?

submitted by /u/0xhaku
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
EvilnoVNC - Ready To Go Phishing Platform

https://blogger.googleusercontent.com/img/a/AVvXsEjS0YsH-959lRu1uWmj0ocq3aNQJGwOsU8S6La4QVtlPoatkSdx6E6RtAMauwx-jcdmtDV3GD7u1YuHNMHeAElabczWZXHyWz9-_0caNDYjUIfvcysktOnr1HQiHoqDHXVrIBsXmqx4aPh4u7D6qEACAflv0Z1-T8VcfJ2Jfb_nfDRhAkc2il42Dk2nDw=w640-h320
EvilnoVNC is a Ready to go Phishing Platform.

Unlike other phishing techniques, EvilnoVNC allows 2FA bypassing by using a real browser over a noVNC connection.

In addition, this tool allows us to see in real time all of the victim's actions, access to their downloaded files and the entire browser profile, including cookies, saved passwords, browsing history and much more.
Requirements

* Docker
* Chromium

Download

It's recommended to clone the complete repository or download the zip file.
Additionally, it's necessary to build Docker manually. You can do this by running the following commands:

git clone https://github.com/JoelGMSec/EvilnoVNC
cd EvilnoVNC ; sudo chown -R 103 Downloads
sudo docker build -t joelgmsec/evilnovnc .


Usage

./start.sh -h

_____ _ _ __ ___ _ ____
| ____|_ _(_) |_ __ __\ \ / / \ | |/ ___|
| _| \ \ / / | | '_ \ / _ \ \ / /| \| | |
| |___ \ V /| | | | | | (_) \ V / | |\ | |___
|_____| \_/ |_|_|_| |_|\___/ \_/ |_| \_|\____|

---------------- by @JoelGMSec --------------

Usage: ./start.sh $resolution $url

Examples:
1280x720 16bits: ./start.sh 1280x720x16 http://example.com
1280x720 24bits: ./start.sh 1280x720x24 http://example.com
1920x1080 16bits: ./start.sh 1920x1080x16 http://example.com
1920x1080 24bits: ./start.sh 1920x1080x24 http://example.com



The detailed guide of use can be found at the following link:

https://darkbyte.net/robando-sesiones-y-bypasseando-2fa-con-evilnovnc

Features & To Do

* Export Evil-Chromium profile to host
* Save download files on host
* Disable parameters in URL (like password)
* Disable key combinations (like Alt+1 or Ctrl+S)
* Disable access to Thunar
* Decrypt cookies in real time
* Expand cookie life to 99999999999999999
* Dynamic title from original website
* Dynamic resolution from preload page
* Replicate real user-agent and other stuff
* Basic keylogger

License

This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.

Credits and Acknowledgments

Original idea by @mrd0x: https://mrd0x.com/bypass-2fa-using-novnc
This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec

Contact

This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.

For more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.
Download EvilnoVNC

___________________________
@hacking_Attack
@Hacking_Video

Everything About Path Traversal Vulnerability

IntroductionContinue reading on InfoSec Write-ups »
Read more...

Hacking on Medium
EXPLOITING OS COMMAND INJECTION VULNERABILITIES

https://cdn-images-1.medium.com/max/1200/0*fsDcLw9CU5hxtTs-.png
Hi! My name is Hashar Mujahid. And today we are going to learn what OS command injections are and how we can exploit them.

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HACKTHEBOX (HTB) WRITEUP: AMBASSADOR [MEDIUM]

https://cdn-images-1.medium.com/max/1080/0*JAHBNwd1Su7t9a6_
SCANNING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Everything About Path Traversal Vulnerability

IntroductionContinue reading on InfoSec Write-ups »
Read more...

Everything About Path Traversal Vulnerability
https://infosecwriteups.com/everything-about-path-traversal-vulnerability-c40ba5465bc4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video