Ethical Hacking Exploits

If you find your computer MAC address in the list, it means your computer has been backdoored by the malicious update, and ASUS recommends you perform a factory reset to wipe up the entire system.

[To see content please register here]

Website hacking

METHODS OF HACKING WEBSITE:

1. SQL INJECTION

2. CROSS SITE SCRIPTING

3. REMOTE FILE INCLUSION

4. LOCAL FILE INCLUSION

5. DDOS ATTACK

6. EXPLOITING VULNERABILITY

Learn Website Hacking
Penetration Testing From Scratch

[To see content please register here]

How to Protect Yourself from Keylogger Attacks

And that's how easy it is for hackers to see and record every keystroke you press on your computer. When a hacker has an unnoticed backdoor on your computer, anything is possible, but there are a few things you can do to minimize the risk of having your keys captured:

Use antivirus software. While there's not a catch-all solution, and antivirus software won't protect against sophisticated and cutting-edge keyloggers, there's still no excuse for not using antivirus software which protects against most known keylogger software.

Use on-screen keyboards when entering passwords.One of the limitations of most keyloggers is that they only capture actual keystrokes being pressed on the keyboard. The Windows on-screen keyboard will provide a virtual keyboard that may help circumvent keyloggers.

Use a firewall. It's possible lazy attackers won't go through the effort of disguising their payloads to appear as being normal DNS (port 53) or HTTP (port 80) transmissions. A firewall might catch suspicious packets leaving your computer on port 35357.

Protect your computer against backdoors. While all of the above is helpful when you're already backdoored, the best thing to do is make sure you're not exploited in the first place.

----------------------------------------------------------------
YouPHPTube <= 7.7 (getChat.json.php) SQL Injection Vulnerability
----------------------------------------------------------------


[-] Software Link:

[To see content please register here]

[To see content please register here]

Tools need to be downloaded:-
Hcxdumptool
Hcxpcaptool
Hashcat

Steps:-
1] Request PMKID from the router

Unlike older techniques where you had to wait until a user connected to the access point so that you can capture the 4-way handshake that is of EAPOL.This new method for finding out the password credentials does not require that anymore. The attack works on the RSN-IE or Robust Security Network Information Element. It only uses one frame which it requests from the wireless router.

2] Install Hcxdumptool & Hcxpcaptool

This is a tool that will help you to capture the PMKID packet from the access point. After capturing the frame, it can also dump it into a file for you. Below are some features of Hcxdumptool:

Can easily capture identities and usernames from a WLAN.Can easily capture passwords, plain master keys, handshakes and PMKIDs from traffic on WLAN.

After installing this tool run the below command in the CLI.

$ ./hcxdumptool -o test.pcapng -i wlp39s0f3u4u5 –enable_status

The command displayed above will dump the frame to a file.

3] After doing the above step now you will need to extract some contents from the frame file. This will be in the pcapng format. You can easily convert this into a hash format which the popular program ‘Hashcat‘ can accept. Use the below command to extract the pcapng file.

$ ./hcxpcaptool -z test.16800 test.pcapng

4] Using Hashcat to Crack the Wifi Password (WPA PSK Pre-Shared Key Recovery)

Hashcat is a tool used a lot in the security and penetration testing field. It is used by both hackers and researchers for finding out passwords by cracking their hash. After finding out the hash of the password you can enter the password in hashcat and it will find it out for you. It will take some time depending on how complex the password is of the wireless network. Enter the cmd below and run hashcat.

$ ./hashcat -m 16800 test.16800 -a 3 -w 3 ‘?l?l?l?l?l?lt!’

Now you need some brain, basic knowledge and patience

This is very easy , and not something special method , but it can work often .

Step 1. Get their email + known usernames
Step 2. Find a service like "LeakCheck" that'll second a lot of databases to see any password leaks
Step 3. Once found test out the passwords.
Step 4. Now you have their password + account!

NordVPN, TorGuard Hit by Hacks Involving Insecure Servers


NordVPN has suffered a breach that may have allowed a hacker to view the customer traffic flowing through a Finland-based VPN server. However, no login credentials were intercepted, the company says.
The same hacker also hit rival VPN providers TorGuard and VikingVPN ; TorGuard is downplaying the severity of the breach.
The hacks, which went unnoticed for at least a year, are stirring up security doubts about the affected VPN services, which can prevent internet service providers from collecting details on your website lookups

Read more here ...

Exploits & Bugs


Exploit ; from the English verb to exploit, meaning "to use something to one’s own advantage"

What are exploits?

Is a piece of software, a chunk of data, or a sequence of commands that takes advantage of a bug or vulnerability to cause unintended or unanticipated behavior to occur on computer software, hardware, or something electronic "usually computerized" Such behavior frequently includes things like gaining control of a computer system
Exploits are ultimately errors in the software development process that leave holes in the software’s built-in security that cybercriminals can then use to access the software and, by extension, your entire computer. Exploits are commonly classified according to the type of vulnerability
Exploits are commonly classified according to the type of vulnerability they exploit, such as zero-day, DoS or related DDoS , spoofing and xxs
Since exploits take advantage of security holes in software, a user has no way of knowing if they’ve been affected until it’s too late
There are several methods of classifying exploits. The most common is by how the exploit communicates to the vulnerable software
remote exploit works over a network and exploits the security vulnerability without any prior access to the vulnerable system or local exploit requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit past those granted by the system administrator .

Exploits vs Vulnerability
a vulnerability is a weakness in a software system. And an exploit is an attack that leverages that vulnerability. So while vulnerable means there is theoretically a way to exploit something ( a vulnerability exists) exploitable means that there is a definite path to doing so in the wild. Naturally, attackers want to find weaknesses that are actually exploitable. As a defender, being vulnerable isn’t great, but you should be especially worried about being exploitable
This alone can go a long way towards reducing your exposure to known and unknown vulnerabilities and make it that much harder for attackers to be successful when vulnerabilities become exploits.

Bug

A bug is any defect in a product. A vulnerability is bug that manifests as an opportunity for malicious use of the product , A security bug or security defect is a software bug that can be exploited to gain unauthorized access or privileges on a computer system. Security bugs introduce security vulnerabilities by compromising one or more of
Authentication of users and other entities
Authorization of access rights and privileges
Data confidentiality
Data integrity
Security bugs need not be identified nor exploited to qualify as such.

Security bugs generally fall into a fairly small number of broad categories that include:
Memory safety ( Buffer Overflow and dangling pointer bugs)
Race condition
Secure input and output handling
Faulty use of an API
Improper use case handling
Improper exception handling
...

A software bug is an error, flaw, failure or fault in a computer program or system that causes it to produce an incorrect or unexpected result, or to behave in unintended ways. The process of finding and fixing bugs is termed "debugging" and often uses formal techniques or tools to pinpoint bugs, Most bugs arise from mistakes and errors made in either a program's source code or its design, or in components and operating systems used by such programs. A few are caused by compilers producing incorrect code. A program that contains many bugs, and/or bugs that seriously interfere with its functionality, is said to be buggy (defective). Bugs can trigger errors that may have ripple effects. Bugs may have subtle effects or cause the program to crash or freeze the computer. Other bugs qualify as security bugs and might, for example, enable a malicious user to bypass access controls in order to obtain unauthorized privileges .

You can find a lot exploits from this Exploits Database

In this post I will teach you a way of Wi-Fi hacking WITHOUT using brute force techniques!
There is a lot of required pre-requisites with the terminology, and please, remember, this won't work as not all people are dumb enough to fall for this. However, it will most likely work so please don't get yourself in trouble, and I am not responsible for anything you do! Take this post as Knowledge



Firstly, you will need a Virtual Machine or computer running any type of Linux, preferably Kali Linux:

[To see content please register here]

[To see content please register here]

[To see content please register here]

[To see content please register here]

[To see content please register here]

[To see content please register here]

[To see content please register here]

[To see content please register here]

[To see content please register here]

[To see content please register here]

[To see content please register here]

[To see content please register here]

[To see content please register here]

[To see content please register here]

[To see content please register here]