Collaborate Disseminate
I am practicing initial access & privilege escalation using legacy vulnerabilities, particularly the RCE vulnerability on the Tomcat Manager.
I have been trying to use Nikto to first scan the Tomcat instance for default credentials, bu… Continue reading Using Nikto to scan for default credentials on Tomcat
How do I exploit vulnerable headers that Nmap fingerprints and nikto shows in their scan results? Which Kali Linux tool I must use to check if one of them has a possible vulnerability to exploit? How do I exploit or test them?
I have a virtual attack server that I’ve thrown 10 nics on so I can run multiple scans in tandem without interfering with each other. I haven’t been able to find it, but does Nikto have a way to choose a specific interface to scan from? nm… Continue reading Scan with Nikto using specific interface
After running nikto it shows the following message
OSVDB-68127: Server may be vulnerable to MS10-070 (based on numeric calculation), thus allowing a cryptographic padding oracle. This vulnerabilty must be manually validated. See http://blo… Continue reading Which test nikto do to test oracle padding attack?
Thousand of people graduate from colleges and universities each year with cybersecurity or computer science degrees only to find employers are less than thrilled about their hands-on, foundational skills. Here’s a look at a recent survey that identified some of the bigger skills gaps, and some thoughts about how those seeking a career in these fields can better stand out from the crowd. Continue reading Thinking of a Cybersecurity Career? Read This
I run nikto on a server, let’s say www.example.com and it says the following:
OSVDB-630: The web server may reveal its internal or real IP in the Location header via a request to / over HTTP/1.0. The value is “A.B.C.D”.
I have nginx … Continue reading Private ip address revealed by nginx, should I worry?
I found an option
-nocache : Disable response cache
in here
https://cirt.net/nikto2-docs/options.html
But when I tried it, I always get this error
Unknown option: nocache
See FOSS Tools for WebApp Pentests!
Video and Slide Deck from EH-Net Live! December 2019
Web Application Penetration Testing, or webapp pentesting, to put it simply is poking at the code behind a web site to see if there are any holes. If there are, ho… Continue reading Video: Burp-less Hacking – Learning Web Application Pentesting on a Budget
Register Now to See a Full WebApp Pentest w/ FOSS!
If there is one tool that a professional performing a web application penetration test or bug bounty hunting should buy, it’s Burp Suite Pro. But what if you’re just starting and have no bu… Continue reading Webinar: Burp-less Hacking – Learning Web Application Pentesting on a Budget
Typically during penetration tests, scanners are used to detect vulnerabilities. Sometimes security professionals may want to go undetected to test the response of the blue team (aka defensive security) and the security controls of an organization. How… Continue reading Manual Vulnerability Detection