Spirit's Beginners Hacking Helpdesk[Ask Your Questions Here]

Spirit's Beginners Hacking Helpdesk[Ask Your Questions Here] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Spirit's Beginners Hacking Helpdesk[Ask Your Questions Here] (/showthread.php?tid=5387776)

Pages: Pages 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26

* - Angel shanu - Sep 13, 2016

(Sep 13, 2016 07:52 AM)spirited_wolf™ Wrote:

Sure let me help you👍

Done thanks 🤝

VIDEO TUTORIAL

[align=center][b]Check these thread 👍

==>[Mega Tutorial Links]SQL-Injection all tutorials by Spirit<==

==>[Mega Tutorial Links]A huge Tutorial collection for hackers/Pentesters<==

==>An ultimate reference for all Beginners Hackers<==

thanks 🤝

Done ✌

thank you sir for the amazing demo

* - spirited_wolf™ - Sep 13, 2016

(Sep 13, 2016 07:57 AM)Angel shanu Wrote: thank you sir for the amazing demo

Hope you learned something new 👍

* - Angel shanu - Sep 13, 2016

(Sep 13, 2016 07:59 AM)spirited_wolf™ Wrote:
Hope you learned something new 👍

yes i learned something new but can u plz give me some live website where i can practice?really appreciate your help sir

* - spirited_wolf™ - Sep 13, 2016

(Sep 13, 2016 09:05 AM)Angel shanu Wrote: yes i learned something new but can u plz give me some live website where i can practice?really appreciate your help sir

Check that video tutorial i have gave one website their 👍 you can practice their 🙂

Thanks 🤝

* - Angel shanu - Sep 13, 2016

(Sep 13, 2016 09:06 AM)spirited_wolf™ Wrote:
Check that video tutorial i have gave one website their 👍 you can practice their 🙂

Thanks 🤝

ok sir i will check :) and sir why are you not making any new tutorial?

* - spirited_wolf™ - Sep 13, 2016

(Sep 13, 2016 09:08 AM)Angel shanu Wrote: ok sir i will check :) and sir why are you not making any new tutorial?

Actually i wants to make new tutorial for my channel but i can't due to my exams 😊

But i have made some written tutorial here on Hack Forums check them from here 👍

1.[Tutorial$:-1] GOLISMERO Framework-The Web Knife[/Noob Friendly]

2.[Tutorial]PHP CGI ARGUMENT INJECTION using Metasploit[/Noob-Friendly]

3.[Metasploit] Collect Email Addresses [/Tutorial on Information Gathering]

Thanks hope you will like it 👍

* - Angel shanu - Sep 13, 2016

(Sep 13, 2016 09:12 AM)spirited_wolf™ Wrote:
Actually i wants to make new tutorial for my channel but i can't due to my exams 😊

But i have made some written tutorial here on Hack Forums check them from here 👍

1.[Tutorial$:-1] GOLISMERO Framework-The Web Knife[/Noob Friendly]

2.[Tutorial]PHP CGI ARGUMENT INJECTION using Metasploit[/Noob-Friendly]

3.[Metasploit] Collect Email Addresses [/Tutorial on Information Gathering]

Thanks hope you will like it 👍

thank you sir i'll check these threads || thank you for the help :)

* - spirited_wolf™ - Sep 13, 2016

(Sep 13, 2016 09:13 AM)Angel shanu Wrote: thank you sir i'll check these threads || thank you for the help :)

Sure check them and let me know if you have any doubt 🤝

* - Z3r0C0d3 - Sep 13, 2016

i have question about canonicalization , the URL is encoded with Base64(GET parameter ex. myfile.php?id=OTgNCg==) , i used to test the website before it was vulnerable to SQLi and i reported it(not sure what type of SQLi , it was between Blind and Error based , it shows the information when i send a crafted SQLi query , but when i place ' there is no error ) is there any way i can bypass that Base64 into the GET parameter , i tried encode my query with Base64(dumb idea i know , but i had to try) is there any way to bypass that ?

* - spirited_wolf™ - Sep 13, 2016

(Sep 13, 2016 10:35 AM)Z3r0C0d3 Wrote: i have question about canonicalization , the URL is encoded with Base64(GET parameter ex. myfile.php?id=OTgNCg==) , i used to test the website before it was vulnerable to SQLi and i reported it(not sure what type of SQLi , it was between Blind and Error based , it shows the information when i send a crafted SQLi query , but when i place ' there is no error ) is there any way i can bypass that Base64 into the GET parameter , i tried encode my query with Base64(dumb idea i know , but i had to try) is there any way to bypass that ?

Actually as you are saying- I can say that it's Base64 string based Injection maybe:-
Type :- OTgn instead of OTgNCg==
Check this 👍

Else Paste vulnerable website here or pm me 👍 i will give it a hit

Thanks 🤝

* - 1111111111111sdasdasdasd - Sep 13, 2016

What do i need to do to sniff traffic from an owned b0x and how can i start an mitm attack on it without tools/frameworks like Metasploit?

* - spirited_wolf™ - Sep 13, 2016

(Sep 13, 2016 11:00 AM)1111111111111sdasdasdasd Wrote: What do i need to do to sniff traffic from an owned b0x and how can i start an mitm attack on it without tools/frameworks like Metasploit?

For sniffing :-
After getting the meterpreter session type:-

PHP Code 


<?php 
sniffer_interfaces 

and check the interface name with its ID. and then type:-

PHP Code 


<?php 
sniffer_start 1 

after sniffing just dump it and give a path to save it like

PHP Code 


<?php 
sniffer_dump 1 /spirit/dump.cap 

now just decry-pt this .cap file 👍

and for MITM without Framework metasploit ,
we can use ettercap for it then its really one of the best tool for MITM.

Check this thread
==>Man in the Middle attack tutorial-by Spirit<==

Thanks 🤝

* - 1111111111111sdasdasdasd - Sep 13, 2016

I am a bit confused with ettercap, lets say i have ratted someone and want to do a mitm on the slave how does the process work?

* - Z3r0C0d3 - Sep 13, 2016

(Sep 13, 2016 10:49 AM)spirited_wolf™ Wrote:
Actually as you are saying- I can say that it's Base64 string based Injection maybe:-
Type :- OTgn instead of OTgNCg==
Check this 👍

Else Paste vulnerable website here or pm me 👍 i will give it a hit

Thanks 🤝

Thanks , if i cant i will PM you the site , my point is not to dump the database , just to test it if its vulnerable and report it to the owner

* - Ltyrosine - Sep 13, 2016

does the Man In the Middle Attack still work on hacking emails