Ultimate reference for all beginners Programmers and hackers

Ultimate reference for all beginners Programmers and hackers

November 23, 2016   Anonymous, arp spoffing, backbox, backtrack, best hacking tools, best hacking tutorials, ethical hacking book, hackforum, hacking, hacking reference, hacking tutorial, how to hack wifi, programming reference,

Ultimate reference for all beginners Programmers and hackers

Hello Everyone,

 Check all these sites before starting Pentesting/Hacking and programming   ,

Our YouTube Channel link::

www.youtube.com/c/Pentestingwithspirit

Our Facebook page::

www.facebook.com/pentestingwithspirit

 so here is the list of website from where you can start your journey.

Websites to learn Hacking:-
www.cybrary.it/
www.hackthissite.org
http://breakthesecurity.cysecurity.org/
http://www.fromdev.com/2013/07/Hacking-Tutorials.html
http://www.guru99.com/
https://web.archive.org/web/20130927175556/
https://forum.intern0t.org/forum.php
www.securehacking.org
www.errorplanet.in
https://evilzone.org
http://www.hacking-tutorial.com/#sthash.VkA2Rqjt.dpbs
http://hackersonlineclub.com

And guys here is my some favourite sites to test your skills on SQL-Injection and xss

if your are newbie then first ask to google or you can watch our tutorial if you like then try these challenge's

SQL Injection Challenges For Practice:-

1)http://www.zixem.altervista.org/SQLi/

2)https://hack.me/t/SQLi

3)http://root0x00.altervista.org/sqli/

4)http://www.legendaryhatman.altervista.org/index.php…

5)http://leettime.net/sql-injection-time-chamber/

6)http://www.arjun.altervista.org/

7)http://zerocoolhf.altervista.org/

8)http://peternguyen.altervista.org/?task

9)http://sqlidemo.altervista.org/

10)http://nurfed.altervista.org/

This a list of challenges XSS and SQLi I known. It belongs to noobs like me.

:p (y)

XSS Challenges For Practice:-

http://xss-quiz.int21h.jp/

https://xss-game.appspot.com/

https://escape.alf.nu/

https://hack.me/t/XSS

http://leettime.net/xsslab1/

http://phizo.altervista.org/

Learn Programming:-

==>Websites To Learn Computer Programming Languages for free[updated]<==

Special thanks to:-CodeN/inja, Th3_uNique,Bd_InjeCtor,Zen,Alteras,Repetence,IndiGear,msfanurag,msfsri,

Kishan,

rootxploiter,Daniel,Rahul raz,Rahul mani and zayed sir.

                                                                        

Hope you will like the experience with us .

Thanks ✌ 

Continue Reading

PHP CGI ARGUMENT INJECTION using Metasploit

PHP CGI ARGUMENT INJECTION using Metasploit

November 11, 2016   backbox, backtrack, best hacking tools, best hacking tutorials, best rat, ethical hacking book, firefox addon exploit, freelancer programmers, hackers, hackforum, how to identify hash type,

Hello Everyone,

Today i would like to demonstrate How we can do PHP CGI ARGUMENT INJECTION using Metasploit.

REFERENCES

So, If have you Don't know about metasploit then check my then tutorials:-

     ==>Metasploit Playlists<==

So, If you already know about Metasploit then lets start.

The module that we are going to use is :-exploit/multi/http/php_cgi_arg_injection

About this vulnerablity-by Rapid7

So they say-"When run as a CGI, PHP up to version 5.3.12 and 5.4.2 is vulnerable to an argument injection vulnerability. This module takes advantage of the -d flag to set php.ini directives to achieve code execution. From the advisory: "if there is NO unescaped '=' in the query string, the string is split on '+' (encoded space) characters, urldecoded, passed to a function that escapes shell metacharacters (the "encoded in a system-defined manner" from the RFC) and then passes them to the CGI binary.""

This means that if we try to pass/add some parameter we can run some arbitrary code using it. 

So lets try to exploit it.

We are going to use Metasploitable 2.

1. Open Metasploit console.

2. Then just select php_cgi_arg_injection module.

Code:

msf> use exploit/multi/http/php_cgi_arg_injection 

3. Now just set the options and exploit.

Quote:

msf exploit(php_cgi_arg_injection) > set RHOST 172.16.18.134

RHOST => 172.16.18.134

msf exploit(php_cgi_arg_injection) > exploit

And done we got a meterpreter session.

Done :D we got meterpreter session


If you will like this,

Continue Reading

DLL Injection(trigger.bat+creating SFX archive) Tutorial-By Spirit

DLL Injection(trigger.bat+creating SFX archive) Tutorial-By Spirit

July 25, 2016   best hacking tutorials, hacking, hacking tutorial, hacking tutorials, how to hack windows using metasploit, metasploit, metasploit tutorial, pentesting, pentesting with spirit,

So, Hello guys

I'm Spirit as you all know and today i am gonna demonstrate a tutorial on how you can exploit windows using DLL Injection.

VIDEO TUTORIAL

So in this tutorial

Attacker machine::Ubuntu (which is using Metasploit)

Victim::Windows 10 

Framework that we will use::Metasploit

so what i'm just gonna do is i'll just simply generate a payload using the Metasploit framework && then we will also create our trigger file in .bat extension so in that trigger.bat file we will just simply give two commands their to run 1)rundll32.exe  and 2)our generated payload file && then we will create a SFX archive of both files (trigger.bat,your generated payload[.dll]). So, when he/she will open my new SFX archived (.exe) file  and run it we'll get a reverse meterpreter session. ;)

----------------------------------------------------------------------------------------------------------

This tutorial is for education purpose only. I'll not be responsible for any harm.

------------------------------------------------------------------------------------------------------------

Please Subscribe My Channel If you like it::

www.youtube.com/c/Pentestingwithspirit

Please Like My Facebook Page::

www.facebook.com/Pentestingwithspirit

Follow me on Twitter::

@spirit3113

Continue Reading

CTF Challenge solution-by Spirited wolf

CTF Challenge solution-by Spirited wolf

June 21, 2016   all software license key, Anonymous, arp, backbox, backtrack, best hacking tutorials, Broken Authentication and Session Management Flaws, ctf challenge, darkcomet tutorial, hackers, spoffing,

CTF Challenge solution-by Spirited wolf

So, hello guys

today i'm gonna show you the solution my my CTF-Challenge

------------------------------

#################Tutorial#################

-------------------------------

link::https://github.com/spiritedwolf/CTF-challenge

----------------------------------------------------------------------------------------------------------

This tutorial is for education purpose only. I'll not be responsible for any harm.

------------------------------------------------------------------------------------------------------------

Please Subscribe My Channel If you like it::

www.youtube.com/c/Pentestingwithspirit

Please Like My Facebook Page::

www.facebook.com/Pentestingwithspirit

Follow me on Twitter::

@spirit3113

  

Continue Reading

Netool toolkit 4.6 - Android payload module-By Spirit

Netool toolkit 4.6 - Android payload module-By Spirit

June 11, 2016   best hacking tutorials, hacking, how to hack mobile using kali linux, how to hack mobile using metasploit, how to hack windows using metasploit, metasploit, metasploit tutorial, mobile hacking, nettol kit,

Netool toolkit 4.6 - Android payload module-By Spirit 

So, Hello guys

I'm Spirit as you all know and today i am gonna demonstrate a tutorial on how you can exploit an Android mobile using the Net-Toolkit 

It's a toolkit generally made for MITM Pentesting ;) 

===================================

Tutorial

===================================

So in this tutorial

Attacker machine::Ubuntu (which is using NetTool MITM Pentesting toolkit)

Victim::Yu Yuphoria

Framework that we will use::Metasploit

so what i'm just gonna do is i'll just simply generate a shellcode using the Nettool kit and send my generated (.apk) shellcode to my victims mobile using the apache2 url vector. So, when he/she will click on my URL link it'll ask them to download my(.apk) shellcode so after they will click on download-> install and run i'll get a reverse meterpreter session. ;)

----------------------------------------------------------------------------------------------------------

This tutorial is for education purpose only. I'll not be responsible for any harm.

------------------------------------------------------------------------------------------------------------

Please Subscribe My Channel If you like it::

www.youtube.com/c/Pentestingwithspirit

Please Like My Facebook Page::

www.facebook.com/Pentestingwithspirit

Follow me on Twitter::

@spirit3113

Continue Reading