Hacking Articles Tips Tricks Videos Tutorials

Bug Bounty Tips — Part 1

Here are some tips and annotations that i’ve made based on articles and writeups that i’ve readContinue reading on Medium »
Read more...

7 views16:25

Need help NMAP Shows all ports are open
https://www.reddit.com/r/Pentesting/comments/yv2x4r/need_help_nmap_shows_all_ports_are_open/

Hello, I am currently using NMAP to scan my sonicwalls just for fun and noticed that all sonicwalls show a few ports open (standard ports that makes sense to me). But one location show all ports are open. The only thing different is that at that location we have the famous "999" vlan where the internet goes into my Dell switch and then into two different routers (or buildings). This is because they are two different companeis running off the same internet. Is it the Dell switch that is giving me all these ports open? Has anyone ever encountered this? I showed this to my boss and I am not sure why it is happening or a way to proove it isn't the sonicwall... Thanks! submitted by /u/Alternative-Phone946 (https://www.reddit.com/user/Alternative-Phone946)
[link] (https://www.reddit.com/r/Pentesting/comments/yv2x4r/need_help_nmap_shows_all_ports_are_open/) [comments] (https://www.reddit.com/r/Pentesting/comments/yv2x4r/need_help_nmap_shows_all_ports_are_open/)

___________________________
@hacking_Attack
@Hacking_Video

Need help NMAP Shows all ports are open

Hello, I am currently using NMAP to scan my sonicwalls just for fun and noticed that all sonicwalls show a few ports open (standard...

6 viewsedited 16:33

Hacking Articles Tips Tricks Videos Tutorials

Strange discovery
https://www.reddit.com/r/Pentesting/comments/yv4118/strange_discovery/

I'm sorry if this isn't the right sub or if this isn't relevant, I just don't know where to post this. Alright so I'm new into pentesting and I basically don't know much, recently I started focusing a bit more on learning by doing simple CTFs on various websites. One day I was looking for a real life example of LFI or RFI vulnerabilities (without any malicious intentions, it was just for education purposes), I found some random Google dorks and I started looking, like I said I'm a newbie so I really don't know much about how it works. I just wanted to see how it worked, so I kept looking, the results weren't really relevant but I just kept stumbling upon what seemed to be randomly generated blogs with very weird URLs, they seem randomly generated and suggest that they are vulnerable, some of them can load google pages (nothing else seems to work), but they generally are just abusing indexation. These blogs are all very similar: a login form, a randomly generated text which seems to be taken from the book Pride and Prejudice mixed with some random cybersecurity jargon (it's the same type of text for all of them), and a functional comment section with random comments on them. The page updates it's content every time you refresh it. They seem to have no purpose, no ads, no external links (except in the comments, probably just automated bots external to the site), no invitations and no information about the owners. I only listed a few (54) and got tired that day, but there's thousands of them, I tried to look it up and search about it but I found nothing. Here's the few ones I listed. (https://github.com/angelichours/splogs/blob/main/list.txt) But like I said there's thousands of them. Does anyone know what this is? submitted by /u/civilflower7164 (https://www.reddit.com/user/civilflower7164)
[link] (https://www.reddit.com/r/Pentesting/comments/yv4118/strange_discovery/) [comments] (https://www.reddit.com/r/Pentesting/comments/yv4118/strange_discovery/)

___________________________
@hacking_Attack
@Hacking_Video