Collaborate Disseminate
Through out my 3-4 months of looking for a hacker for hire service, I have been wiser and I think it best shared as knowledge is power . These are my findings so far:
Never hire a hacker that is either eager for upfront or full payment be… Continue reading How Not to Hire a HACKER
I am running Kali linux 2020.3 on VBox on Windows 10. I put my wireless card AWUS036ACH chipset Realtek RTL8812AU in monitor mode using airmon-ng start wlan0 X (by x i mean the number of channel AP is operating on). I am trying to crack WE… Continue reading How to obtain PRGA file using aireplay-ng chopchop or fragmentation attack
DAST is short for dynamic application security testing whereas SAST is static application security testing.
SAST is white-box testing while DAST is black-box testing, meaning SAST can (does?) use more information.
DAST tools are not langu… Continue reading How do DAST and penetration testing compare?
I was running a series of test attacks on my virtual test machine.
Here i had to set the RHOST option to the Ip-address of the target and LHOST to the Ip-address
of my local machine. I am certain that this works well locally because both m… Continue reading Do I need port forwarding for msfconsole remote target exploitation
I am supposed to do a test for AWS. But since AWS has limitations, probably also in the direction of DDoS and other points, what does a corresponding test scenario look like?
It is about a Magento instance that is integrated on AWS.
Do you… Continue reading OWASP ZAP: How to Test on AWS + Magento? Which guidelines must be observed?
I want to learn & want to move to the cybersecurity field as a penetration tester. Will data structures and algorithms help me to be a Penetration Tester? How it can be use full for a penetration tester?
Continue reading Will data structures and algorithms help me to be a the Penetration tester?
i have used Burpsuite and XSpear to find vulnerablities but when send send xss payloads to the website query(q=) they just dont’t pop up the xss payloads
and another thing i have seen in the website source code is that it is xss protected … Continue reading XSS does not echo up even i have found site is vulnerable to xss
I tried to download malware pcap on ubuntu VM in microsoft azure from the putty but it is not allowing me to do so .It gives following output:
2016-12-17-traffic-analysis-exercise.pcap.zip: Permission denied Cannot write to ‘2016-12-17-tra… Continue reading can someone please tell me how can we download malware pcap in ubuntu VM in microsoft azure? [closed]
I stumbled upon a web app which is accepting user input and putting it into a variable within script tag.
The script tag does have a nonce attribute.
As am working on bypassing the XSS filter, I had this thought that this practice of refl… Continue reading Is nonce useless when user input is reflected within an inline script?
i have downloaded bwapp from official site and windows 10 defender showing me that it contains a reverse shell ( i know these things are there for practice ) but in earlier days it is not showing that. Is it good to use it is safe to use
O… Continue reading windows 10 showing me that bWAPP contains a reverse shell