[Angel shanu]

Sure let me help you👍

Done thanks 🤝

VIDEO TUTORIAL




[align=center][b]Check these thread 👍



==>[Mega Tutorial Links]SQL-Injection all tutorials by Spirit<==

==>[Mega Tutorial Links]A huge Tutorial collection for hackers/Pentesters<==

==>An ultimate reference for all Beginners Hackers<==

thanks 🤝

---

Done ✌

thank you sir for the amazing demo

[spirited_wolf™]

thank you sir for the amazing demo

Hope you learned something new 👍

[Angel shanu]

Hope you learned something new 👍

yes i learned something new but can u plz give me some live website where i can practice?really appreciate your help sir

[spirited_wolf™]

yes i learned something new but can u plz give me some live website where i can practice?really appreciate your help sir

Check that video tutorial i have gave one website their 👍 you can practice their 🙂

Thanks 🤝

[Angel shanu]

Check that video tutorial i have gave one website their 👍 you can practice their 🙂

Thanks 🤝

ok sir i will check :) and sir why are you not making any new tutorial?

[spirited_wolf™]

ok sir i will check :) and sir why are you not making any new tutorial?

Actually i wants to make new tutorial for my channel but i can't due to my exams 😊

But i have made some written tutorial here on Hack Forums check them from here 👍

1.[Tutorial$:-1] GOLISMERO Framework-The Web Knife[/Noob Friendly]

2.[Tutorial]PHP CGI ARGUMENT INJECTION using Metasploit[/Noob-Friendly]

3.[Metasploit] Collect Email Addresses [/Tutorial on Information Gathering]

Thanks hope you will like it 👍

[Angel shanu]

Actually i wants to make new tutorial for my channel but i can't due to my exams 😊

But i have made some written tutorial here on Hack Forums check them from here 👍

1.[Tutorial$:-1] GOLISMERO Framework-The Web Knife[/Noob Friendly]

2.[Tutorial]PHP CGI ARGUMENT INJECTION using Metasploit[/Noob-Friendly]

3.[Metasploit] Collect Email Addresses [/Tutorial on Information Gathering]

Thanks hope you will like it 👍

thank you sir i'll check these threads || thank you for the help :)

[spirited_wolf™]

thank you sir i'll check these threads || thank you for the help :)

Sure check them and let me know if you have any doubt 🤝

[Z3r0C0d3]

i have question about canonicalization , the URL is encoded with Base64(GET parameter ex. myfile.php?id=OTgNCg==) , i used to test the website before it was vulnerable to SQLi and i reported it(not sure what type of SQLi , it was between Blind and Error based , it shows the information when i send a crafted SQLi query , but when i place ' there is no error ) is there any way i can bypass that Base64 into the GET parameter , i tried encode my query with Base64(dumb idea i know , but i had to try) is there any way to bypass that ?

[spirited_wolf™]

i have question about canonicalization , the URL is encoded with Base64(GET parameter ex. myfile.php?id=OTgNCg==) , i used to test the website before it was vulnerable to SQLi and i reported it(not sure what type of SQLi , it was between Blind and Error based , it shows the information when i send a crafted SQLi query , but when i place ' there is no error ) is there any way i can bypass that Base64 into the GET parameter , i tried encode my query with Base64(dumb idea i know , but i had to try) is there any way to bypass that ?

Actually as you are saying- I can say that it's Base64 string based Injection maybe:-
Type :- OTgn instead of OTgNCg==
Check this 👍





Else Paste vulnerable website here or pm me 👍 i will give it a hit

Thanks 🤝

[1111111111111sdasdasdasd]

What do i need to do to sniff traffic from an owned b0x and how can i start an mitm attack on it without tools/frameworks like Metasploit?

[spirited_wolf™]

What do i need to do to sniff traffic from an owned b0x and how can i start an mitm attack on it without tools/frameworks like Metasploit?

For sniffing :-
After getting the meterpreter session type:-

PHP Code


<?php 
sniffer_interfaces 


and check the interface name with its ID. and then type:-

PHP Code


<?php 
sniffer_start 1 


after sniffing just dump it and give a path to save it like

PHP Code


<?php 
sniffer_dump 1 /spirit/dump.cap 


now just decry-pt this .cap file 👍

and for MITM without Framework metasploit ,
we can use ettercap for it then its really one of the best tool for MITM.

Check this thread
==>Man in the Middle attack tutorial-by Spirit<==


Thanks 🤝

[1111111111111sdasdasdasd]

I am a bit confused with ettercap, lets say i have ratted someone and want to do a mitm on the slave how does the process work?

[Z3r0C0d3]

Actually as you are saying- I can say that it's Base64 string based Injection maybe:-
Type :- OTgn instead of OTgNCg==
Check this 👍





Else Paste vulnerable website here or pm me 👍 i will give it a hit

Thanks 🤝

Thanks , if i cant i will PM you the site , my point is not to dump the database , just to test it if its vulnerable and report it to the owner

[Ltyrosine]

does the Man In the Middle Attack still work on hacking emails