Spirit's Beginners Hacking Helpdesk[Ask Your Questions Here]

Spirit's Beginners Hacking Helpdesk[Ask Your Questions Here] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Spirit's Beginners Hacking Helpdesk[Ask Your Questions Here] (/showthread.php?tid=5387776)

Pages: Pages 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26

* - Angel shanu - Sep 3, 2016

(Aug 31, 2016 11:17 PM)spirited_wolf™ Wrote:
Sure actually this website is protected with waf so,here you go mate 👍

We can use this 🎉

PHP Code
<?php /*!12345t able_name*/ /*!12345c olumn_name*/ /*!12345information_schema*/ /*!12345form*/
Thanks 🤝

thanks sir for the solution 🙂

* - spirited_wolf™ - Sep 3, 2016

(Sep 3, 2016 08:33 AM)Angel shanu Wrote: thanks sir for the solution 🙂

No problem mate 👍

Hope you learned how to bypass WAF in SQL-Injection

Thanks 🤝

* - Angel shanu - Sep 3, 2016

i have one more question sir when i try to run vmware in my kali linux it show me-

vmware kernel module module updatr error and it is asking something to install can you plz help me sir

* - spirited_wolf™ - Sep 3, 2016

(Sep 3, 2016 09:48 AM)Angel shanu Wrote: i have one more question sir when i try to run vmware in my kali linux it show me-

vmware kernel module module updatr error and it is asking something to install can you plz help me sir

Easy maybe you should try this out 👍

1. Before installing VMware Workstation you need to install build-essential and Linux headers.

Open new terminal and type this command:-

PHP Code 


<?php 
sudo apt-get install build-essential linux-headers-$(uname -r) 

2. After completing this paste this command their to install/update your kernel header:-

PHP Code 


<?php 
sudo apt-get install linux-headers-$(uname -r) 

3. Then in last just type this command 👍

PHP Code 


<?php 
sudo ln -s /usr/src/linux-headers-$(uname -r)/include/generated/uapi/linux/version.h /usr/src/linux-headers-$(uname -r)/include/linux/version.h 

After it just install VMware again normally by first

chmod + <file_name>
./<file_name>

Done 👍

Hope this solution will help you 👍

Thanks 🤝

* - Astakhov - Sep 3, 2016

Where should I start to become a hacker?

* - roi1000 - Sep 3, 2016

how can I learn to find exploits ? i mean what should I start learning so that i'll be able to discover new exploits by myself?
at the moment I only know how to program C, am pretty good at logic but the only language I know is C

* - imghostin - Sep 3, 2016

Hello, big thanks to you for your contribution.
I have a question: I hacked by SQLi a site and got access to the admin page. It was pretty automated with sqlmap, but with the admin page i dont have full access as with FTP. Is there additional steps to gain the ftp access? Or the sqli hack just let you have the admin page ? I always was confused about this? Thanks in advance your help is a pleasure

* - Z3r0C0d3 - Sep 3, 2016

(Sep 3, 2016 01:57 PM)roi1000 Wrote: how can I learn to find exploits ? i mean what should I start learning so that i'll be able to discover new exploits by myself?
at the moment I only know how to program C, am pretty good at logic but the only language I know is C

To write exploit you need to know how the code works , because you must find vulnerabilities in the code that can be exploited(used to gain access that the devoleper doesn't wanted you to have) .You should be capable to do reverse engineering and low level programming , C and Python are good for writing exploits

* - roi1000 - Sep 3, 2016

and how am I supposed to find vulnerabilities in the code when the program isn't even opensource, sorry about my stupid questions am still a beginner...
and I'd like to know, those guys who finds vulnerabilities in big websites such us Facebook, where did they start, what are the knowledge i should aquire to be able one day to find new vulnerabilities and exploits

* - Z3r0C0d3 - Sep 3, 2016

(Sep 3, 2016 02:36 PM)roi1000 Wrote: and how am I supposed to find vulnerabilities in the code when the program isn't even opensource, sorry about my stupid questions am still a beginner...
and I'd like to know, those guys who finds vulnerabilities in big websites such us Facebook, where did they start, what are the knowledge i should aquire to be able one day to find new vulnerabilities and exploits

ohh ... about vulnerabilities of website ,well ... You need to know scripting languages like PHP , Javascript , HTML(its not really useful) and testing common vulnerabilities , like Broken Authentication , Broker Access Controls , etc. , You can read "The Web Application Hacker's Handbook , it has ton of useful information that will help you

* - roi1000 - Sep 3, 2016

yeah thats not actually what am talking about, am talking about discovering new things...for exemple when you're using metasploit for scanning for a vulnerabilities in the machine you're attacking or something, you're actually scanning for already known exploits but what I want to know is how can I possibly discover brand new exploit by myself...so I'd like to know what path should I take so I can be able to create my own exploits and discover new bugs whether for websites or for computer applications or even, why not, mobile applications.
and thank you for your help Z3r0C0d3, you and spirited are doing a great job on here helping others, i really apreciate that man

* - Poroshenko - Sep 3, 2016

So I'm trying to learn how to set up a botnet, I'll pay. PM me.

* - imghostin - Sep 3, 2016

(Sep 3, 2016 03:30 PM)AnonLoyalty Wrote: So I'm trying to learn how to set up a botnet, I'll pay. PM me.

Bruh, it is written everwhere there is tons of post you dont need to pay !

* - spirited_wolf™ - Sep 3, 2016

(Sep 3, 2016 11:43 AM)Astakhov Wrote: Where should I start to become a hacker?

Sure let me try to help you 🙂

1. If you need to ask anything regarding anything you can ask here:-

==>Beginners Hacking Helpdesk<-Ask Your Questions Here<==

2. Check my this thread here you will get some more reference for an absolute beginners.

==>An ultimate reference for all Beginners Hackers<==

3. Here, On this thread you will find alot of tutorials regarding :- Webapp + Remote hacking

==>[Mega Tutorial Links]A huge Tutorial collection for hackers/Pentesters<==

Check these threads out then let me know 🎉
Don't hesitate to pm me.

Thanks 🤝

(Sep 3, 2016 01:57 PM)roi1000 Wrote: how can I learn to find exploits ? i mean what should I start learning so that i'll be able to discover new exploits by myself?
at the moment I only know how to program C, am pretty good at logic but the only language I know is C

I will say you should first start learning different languages , learn assembly programming also.

Then take a look on these two books:-
1. Hacking: The Art of Exploitation
2. Reversing: Secrets of Reverse Engineering

and some courses are here which will help you 👍
==>Sharing My Giveaway collection with everyone<==

Best of luck brother 👍
Thanks 🤝

(Sep 3, 2016 02:25 PM)imghostin Wrote: Hello, big thanks to you for your contribution.
I have a question: I hacked by SQLi a site and got access to the admin page. It was pretty automated with sqlmap, but with the admin page i dont have full access as with FTP. Is there additional steps to gain the ftp access? Or the sqli hack just let you have the admin page ? I always was confused about this? Thanks in advance your help is a pleasure

SQL-Injection will only give you the info about the database. So, sure it will only provide you the details of admin page not of the ftp account 👍 In addiction you can shell that website and then you can only get the FTP access[Hope so]

Here you will find tutorials on shelling:-
==>[Mega Tutorial Links]A huge Tutorial collection for hackers/Pentesters<==

Thanks 🤝

(Sep 3, 2016 02:36 PM)roi1000 Wrote: and how am I supposed to find vulnerabilities in the code when the program isn't even opensource, sorry about my stupid questions am still a beginner...
and I'd like to know, those guys who finds vulnerabilities in big websites such us Facebook, where did they start, what are the knowledge i should aquire to be able one day to find new vulnerabilities and exploits

I know some of my friends who are bughunters and found exploits/vulnerablities in Facebook,Google,Microsoft etc. websites. Actually they always intercept their request and see all the intercepted request and when ever they will see sometime juicy they start working how this function/algorithm works, and in last they have the bug.

Best tool for interception:- Burp suite

(Sep 3, 2016 03:30 PM)AnonLoyalty Wrote: So I'm trying to learn how to set up a botnet, I'll pay. PM me.

You should go here:-Botnets, IRC Bots, and Zombies Section

Thanks 🤝

(Sep 3, 2016 03:24 PM)roi1000 Wrote: yeah thats not actually what am talking about, am talking about discovering new things...for exemple when you're using metasploit for scanning for a vulnerabilities in the machine you're attacking or something, you're actually scanning for already known exploits but what I want to know is how can I possibly discover brand new exploit by myself...so I'd like to know what path should I take so I can be able to create my own exploits and discover new bugs whether for websites or for computer applications or even, why not, mobile applications.
and thank you for your help Z3r0C0d3, you and spirited are doing a great job on here helping others, i really apreciate that man

The best answer of your question is exploit development.
You should check this:-Metasploit Exploit Development

If you wants to make some new exploit modules in metasploit then also learn Ruby language👍
Thanks 🤝

(Sep 3, 2016 03:40 PM)imghostin Wrote: Bruh, it is written everwhere there is tons of post you dont need to pay !

Yeah right brother 👍

* - Gachi - Sep 3, 2016

Hey Spirited_Wolf, I'm following your tutorial on how to setup pentesting labs in Kali Linux but I'm facing a problem. I've extracted all files and followed every step up to the point where you instruct us to go to 127.0.0.1/sqli or localhost/sqli but I keep getting this error: imgur dot com/a/O9LVH Thanks