Moin Khan's Blog

Search This Blog

Information Gathering

Get link
Facebook
X
Pinterest
Email
Other Apps

Nmap: Getting Started Guide

theharvester: Email Harvesting throughout year

Get link
Facebook
X
Pinterest
Email
Other Apps

Comments

XXE in docx files and LFI to RCE

In this article we are going to talk about XXE injection and we will also look at LFI in a little more advanced perspective. I will be performing both of these attacks on a HackTheBox machine called Patents which was a really hard machine. I am not going to show you how to solve the Patents machine rather I will show you how to perform the above mentioned attacks on the box. XML External Entity Attack Lets start with what an XXE injection means. OWASP has put XXE on number 4 of OWASP Top Ten 2017 and describes XXE in the following words: "An XML External Entity attack is a type of attack against an application that parses XML input. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service, server side request forgery, port scanning from the perspective of the machine where the parser is located, and other system impacts." What th...

Social Engineering Toolkit - Kali Linux - Simple Tutorial

In this tutorial i'll show you how to Simply use Social Engineering toolkit on Kali Linux Requirements: 1. An Active Internet Connect. 2. Kali Linux ( Download Kali Linux ) Steps: 1--> First of all open terminal and then type se-toolkit and hit enter. If you are not logged in as root then type sudo se-toolkit and hit enter it will ask you administrative password enter the password then it will ask you to accept licence agreement press ' y ' (without quotes) and hit enter you'll be given a list 2--> from the menu enter 1 it will take you to another menu 3--> from above menu select "Website Attack Vectors" i,e press 2 and hit enter 4--> from above menu select "Credential Harvester Attack Method" i,e press 3 and hit enter 5--> from menu below select "Site Cloner" i,e press 2 and hit enter 6--> if it asks you your IP address then open another terminal and type ifconfig (if not logged as...

Learning Web Pentesting With DVWA Part 3: Blind SQL Injection

In this article we are going to do the SQL Injection (Blind) challenge of DVWA. OWASP describes Blind SQL Injection as: "Blind SQL (Structured Query Language) injection is a type of attack that asks the database true or false questions and determines the answer based on the applications response. This attack is often used when the web application is configured to show generic error messages, but has not mitigated the code that is vulnerable to SQL injection. When an attacker exploits SQL injection, sometimes the web application displays error messages from the database complaining that the SQL Query’s syntax is incorrect. Blind SQL injection is nearly identical to normal , the only difference being the way the data is retrieved from the database. When the database does not output data to the web page, an attacker is forced to steal data by asking the database a series of true or false questions. This makes exploiting the SQL Injection vulnerability more difficult, but not im...

Powered by Blogger

Information Gathering

Nmap: Getting Started Guide theharvester: Email Harvesting throughout year

Comments

Post a Comment

Nmap: Getting Started Guide

theharvester: Email Harvesting throughout year