Skip to main content

Posts

Showing posts from 2018

Some Topic For Self Learning In Cyber Security

Some topic for self Learning?? [+] Sql Injection Attack [+] Hibernate Query Language Injection [+] Direct OS Code Injection [+] XML Entity Injection [+] Broken Authentication and Session Management [+] Cross-Site Scripting (XSS) [+] Insecure Direct Object References [+] Security Misconfiguration [+] Sensitive Data Exposure [+] Missing Function Level Access Control [+] Cross-Site Request Forgery (CSRF) [+] Using Components with Known Vulnerabilities [+] Unvalidated Redirects and Forwards [+] Cross Site Scripting Attacks [+] Click Jacking Attacks [+] DNS Cache Poisoning [+] Symlinking – An Insider Attack [+] Cross Site Request Forgery Attacks [+] Remote Code Execution Attacks [+] Remote File inclusion [+] Local file inclusion [+] EverCookie [+] Denial oF Service Attack [+] Cookie Eviction [+] PHPwn [+] NAT Pinning [+] XSHM [+] MitM DNS Rebinding SSL/TLS Wildcards and XSS [+] Quick Proxy Detection [+] Improving HTTPS Side Channel Attacks [+] Side Chan
Post a Comment
Read more

Basics You Should Know to Analyze a Website

I recently realized that,giving walk through wont help half of the beginners..even i have struggled initially to make my own moves without knowing how other analysts are thinking.. So, Lets dive into some basic web tags which will help you know what the site is doing and analyzing.  Every website should have this basic structure... <html> <head> <title></title> </head> <body></body> </html> Every web design is  structured using Hyper Text Markup Language. the code of HTML is written between <html> and </html> [opening and closing html tags] <head> tag is where we import important things such as CSS or JS files ..we also define CSS and JS within the head tag.Within head opening and close tags there is title tag which defines the title of the page.Then we have body tag,this is where the content of web-page is written.This is were we have to make a close look for analyzing. <div>  tag is
Post a Comment
Read more

Hack Invite Code To Register - Hack The Box

R ecently I found another website that have more advanced hacking challenges...I know I need to cover other websites which i have promised you but something in this website is interesting.For registering in this website,you need to hack and get an invite code.So, I thought to deviate from our regular topic and talk about it. The WEBSITE is HACK THE BOX They are asking invite code for registering.As usual i checked source-code of the page.Since I found nothing suspicious,I started looking at JavaScript and found one that seems can help me. <script defer src="/js/inviteapi.min.js"></script> I visited the js..There is a script and i found some keywords from that like "log","invite","verifyInviteCode","makeInviteCode" I went back to our registration page now right clicked and selected inspect. SELECT CONSOLE  Try typing in each keyword and check if function exist. I got output when i checked  veri
Post a Comment
Read more

HackThisSite Realistic Mission 2

Chicago American Nazi Party Racist pigs are organizing an 'anti-immigrant' rally in Chicago. Help anti-racist activists take over their website!   ================================================ From: DestroyFascism  Message : I have been informed that you have quite admirable hacking skills. Well, this racist hate group is using their website to organize a mass gathering of ignorant racist bastards. We cannot allow such bigoted aggression to happen. If you can gain access to their administrator page and post messages to their main page, we would be eternally grateful.  ================================================ So a guy named  DestroyFascism  is asking for our help.Lets visit the website and check the steps we did in previous missions to find vulnerability. Right click and select view source.There is only 52 lines of code. Check the code for suspicious data.I found something! CODE ------------------------------------------------------------- &
Post a Comment
Read more

Vulnerability Is Almost Everywhere!

As you all know(even if you dont know let me tell you) I am not any elite hacker. I am learning like all of you.May be it is because I haven't found vulnerability in any sites other than these challenge sites (myself),my confidence is very low. But something occurred today that lifted my confidence a little higher. what was it?? Well..first of all let me ask you, have you seen the game menu in this blog? which has hangman game for you to play? Well I was playing in it today and got wrong guess always..then i thought ,why on earth i can't win even this small game!!   Then an Idea struck me!! what if like all this challenge site, there is vulnerability in this game which is a simple code i have copied from another website without even reading it! I right clicked on the "Guess" button and  selected inspect!  There i saw  <input name="ratebutton" type="button" value="Guess" onclick="pruefeZeichen()"> now I know
Post a Comment
Read more