M0N73 CRIS70

R ecently I found another website that have more advanced hacking challenges...I know I need to cover other websites which i have promised you but something in this website is interesting.For registering in this website,you need to hack and get an invite code.So, I thought to deviate from our regular topic and talk about it. The WEBSITE is HACK THE BOX They are asking invite code for registering.As usual i checked source-code of the page.Since I found nothing suspicious,I started looking at JavaScript and found one that seems can help me. <script defer src="/js/inviteapi.min.js"></script> I visited the js..There is a script and i found some keywords from that like "log","invite","verifyInviteCode","makeInviteCode" I went back to our registration page now right clicked and selected inspect. SELECT CONSOLE  Try typing in each keyword and check if function exist. I got output when i checked  veri...

As you all know(even if you dont know let me tell you) I am not any elite hacker. I am learning like all of you.May be it is because I haven't found vulnerability in any sites other than these challenge sites (myself),my confidence is very low. But something occurred today that lifted my confidence a little higher. what was it?? Well..first of all let me ask you, have you seen the game menu in this blog? which has hangman game for you to play? Well I was playing in it today and got wrong guess always..then i thought ,why on earth i can't win even this small game!!   Then an Idea struck me!! what if like all this challenge site, there is vulnerability in this game which is a simple code i have copied from another website without even reading it! I right clicked on the "Guess" button and  selected inspect!  There i saw  <input name="ratebutton" type="button" value="Guess" onclick="pruefeZeichen()"> now I know...

Have you ever wished if you where able to make your files and website accessible to public without uploading it to any servers? Well it is now possible so easily. WHAT YOU NEED? * Ngrok * Local server (like Wamp) Ngrok Ngrok is a multiplatform tunnelling, reverse proxy software that establishes secure tunnels from a public endpoint such as internet to a locally running network service while capturing all traffic for detailed inspection and replay. WHERE TO GET IT? https://ngrok.com/ WAMP Acronym for  W indows/ A pache/ M ySQL/ P HP,  P ython, (and/or)  P ERL The WAMP stack provides developers with the four key elements of a Web server: an operating system, database, Web server and Web scripting software. The combined usage of these programs is called a server stack. In this stack, Microsoft Windows is the operating system (OS), Apache is the Web server, MySQL handles the database components, while P...