Collaborate Disseminate
I would like to learn and practice some basic attacks using Kali Linux VM. I don’t have my WIFI adapter yet(Monitor mode and injection capable).
Need suggestions on some basic attacks which will not require any external adaptors.
Note : I … Continue reading Need suggestions on learning basic attacks in Kali-Linux without using external adapters [closed]
ParrotOS has more tools compare to Kali Linux but why Kali Linux mostly use for penetration testing ?
Continue reading why Kali Linux mostly use for penetration testing? [closed]
Guys I go to the null byte website and log in and I can’t ask a question there, this appears when I try to make a post:
Sorry, you don’t have permission to submit.
Can anyone tell me how do I solve this? I want to ask a question there an… Continue reading How to ask question in the null byte forum [closed]
There are hundreds of articles if we search "how to exploit AD Environment?" but if you read them, you will find that every article focuses on the context of the domain user Account.
Now I am here to ask what can be the attack wa… Continue reading Ways to exploit AD in context of Domain Computer account not as Domain user account?
I’m testing a web app (for which I have permissions) and I found a stored XSS vulnerability.
It is a little bit tricky to exploit because the input:
is being capitalized
it has a length constraint of 61 characters (every char over the 61t… Continue reading Stored XSS Cookie Stealing – shortest payload
I have a BigIP target server and try to meassure the (average) rtt. Usually I do this with sudo hping3 -S -p 80 <target>.
hping3 works fine with the listed parameters for arbitrary hosts, but for this server – I know it’s a F5 BigI… Continue reading Hping3 not working on BigIP target server [migrated]
I’m currently scanning a network using OpenVAS / Greenbone Security Assistant installed on Kali Linux.
During the scan, multiple targets have crashed. This is obviously something I want to investigate. As I’m running the "Full and fas… Continue reading Identify crash-inducing NVT in OpenVAS
I need to pentest a Java application through webswing. webswing allows running a java application in a web browser but how to pentest this?
I didn’t find any documentation about this actually. With my HTTP proxy (burp), I can see that webs… Continue reading How to pentest a java application run through webswing?
I am working on the auto-routing functionality of Codeigniter 4 and I’d like to test it by sending some nasty exploit-type HTTPS requests to make sure it properly resists mischief. E.g., request a uri with .. in the path to see if we might… Continue reading How to create custom exploit https requests to test a PHP framework
I need to buy a laptop for creating a virtual machine and having Kali and/or Parrot OS on VM. My main OS will be Windows. This is for pentesting. So, are we good with buying a laptop with Ryzen processors rather Intel. I have read on lot o… Continue reading Installing Parrot/Kali virtual machines on Ryzen processor (with Windows as my main OS) [migrated]