Collaborate Disseminate
I was on a phone call with my father and, while we were on the phone, my phone started calling another person. I never called anyone while we were on the phone and he never called anyone else while we’re on the phone, but somehow another i… Continue reading During a phone call, my phone started calling another person. How is this possible?
I’ve been reading about PWK-Example-Report-v1.pdf on pages 7-14 and found that KikChat apps were used in the example.
https://www.exploit-db.com/exploits/30235
Copy of the vulnerable app is available at exploit-db.
However, the actual expl… Continue reading KikChat LFI/RFI exploit code?
I found this question and tried the solution given (accepted)
Can nmap take a list of ports to scan from a file?
However, it didn’t really work as expected.
$ cat ports.list
21
22
23
25
$
Instead of scanning the ports in the file, nmap a… Continue reading nmap to read ports from a file
I noticed that Recon-ng is part of PWK/OSCP syllabus.
I decided to give it a try. However, the module google_site_web doesn’t seems to work anymore.
[recon-ng][default] > modules load recon/domains-hosts/google_site_web
[recon-ng][defau… Continue reading Is Recon-ng still relevant?
I noticed that certain software does not provide hash anymore nowadays.
E.g.
Zoom
https://zoom.us/download
wolf@linux:~$ ls -lh zoom_amd64.deb
-rw-rw-r– 1 wolf wolf 44M Jan 1 00:00 zoom_amd64.deb
wolf@linux:~$
I’ve googled both md5… Continue reading How to verify integrity of software when the download provider doesn’t publish hashes?
This tutorial shows how to find a JMP ESP in nttdll.dll
http://sh3llc0d3r.com/vulnserver-trun-command-buffer-overflow-exploit/
Find address for EIP
In this step we have to check the registers and the stack. We have to
find a way to jump… Continue reading vulnserver – Can’t find JMP ESP in ntdll.dll
Vulnserver is a multithreaded Windows based TCP server that listens
for client connections on port 9999 (by default) and allows the user
to run a number of different commands that are vulnerable to various
types of exploitable buffer over… Continue reading buffer overflow exploit: vulnserver with additional 20 bytes of data?
AutoRecon is a multi-threaded network reconnaissance tool which
performs automated enumeration of services. It is intended as a
time-saving tool for use in CTFs and other penetration testing
environments (e.g. OSCP).
https://github.com/T… Continue reading AutoRecon is taking too long to complete
This is DVWA database. There are only 2 tables in it.
mysql> show tables;
+—————-+
| Tables_in_dvwa |
+—————-+
| guestbook |
| users |
+—————-+
2 rows in set (0.00 sec)
mysql>
I’ve … Continue reading DVWA SQL Injection: How to get column names from table "users" only? [closed]
In Hydra, default number of connects in parallel per target is 16 and it can be changed with -t flag.
E.g. -t 100 for 100 connection in parallel per target.
wolf@linux:~$ hydra -h | grep parallel
-t TASKS run TASKS number of connects … Continue reading wfuzz default number of connects in parallel per target?