Collaborate Disseminate
This question already has an answer here:
DNS zone transfer attack
2 answers
I am using python for doing this all stuff. … Continue reading When do I know there is a zone transfer vulnerability? [duplicate]
I saw a video about the hacking of CCTV cameras:
He downloads the latest firmware from the internet.
He uses some reverse engineering on it.
He retrieves the password from etc/passwd file. And he logged in with root.
I found a challenge which was vulnerable to SQL injection and it was very very pretty hard to find So, How this unique SQL works?
I found this on login form where when I send user=\&pass=||1# as a payload I got successf… Continue reading How this Unique SQL injection works?
For example, You are attacking an application that employs two different servers: an application server and a database server. You have discovered a vulnerability that allows you to execute arbitrary operating system commands… Continue reading Is it possible to get data from database server if you are on the application server?
I was playing a CTF and got stuck. When seeing the source code through web browser reveals nothing but when we send the request through curl it reveals out HIDDEN directory. How is it even possible? Does that mean we should n… Continue reading How curl provided source code that the browser did not?
I want to do an MTIM in my home LAN just for fun. And I am using arpspoofing which is preinstalled in Linux. But the problem is I can see the traffic to the server to Client. But can’t see the traffic of Client to Server.
He… Continue reading In MITM where is the traffic of Client to server?
Metasploit question:-
I know what these shells are but am a little confused on the execution.
Assuming that you successfully get a meterpreter shell and want to upload a backdoor, what should you use as a payload in the bac… Continue reading When to use a Bind shell vs. a Reverse shell?
I am trying to learn how JPG and PNG files can be used to get RCE. Below is my code for uploading files. It will check if the file content type is correct.
<?php
$test = array(‘image/jpeg’, ‘image/png’, ‘image/jpg’);
… Continue reading How exploiting RCE in jpg file actually works?
-sn: It tells the nmap not to do any Port Scan.
-Pn: It tells the nmap not to do any Ping Scan.
Now when I use both together like this, nmap -sn -Pn host.com.
What I saw in the terminal is Nmap is only showing that the … Continue reading What -sn -Pn does in Nmap?
Suppose you have a website http://example.com
Now, you also have an SSL certificate, which means users can access the site securely using https://example.com
But if I just write http://example.com in the address bar, how can the client g… Continue reading How is HTTP converted to HTTPS when no HSTS is present?