Skip to main content

Posts

Google SQL Dorks – 2021

"index of" "plugins/wp-rocket" intitle:"index of" secrets.yml intitle:"index of /" "*key.pem" intitle:"index of" "admin/sql/" intext:"index of /" "config.json" index of .svn/text-base/index.php.svn-base intitle:"index of" admin.tar inurl:/servicedesk/customer/user/login Dork: "Index of" "upload_image.php" Dork: "index of" "Production.json" index.of.?.frm inurl:wp-content/plugins/brizy "Index of" "customer.php" inurl:adminlogin.jsp inurl:/download_file/ intext:"index of /" index of /backend/prod/config intext:"index of /" "customer.php" "~Login" intext:"INTERNAL USE ONLY" ext:doc OR ext:pdf OR ext:xls OR ext:xlsx intext:"Welcome to Intranet" "login" "Index of" "/access" inurl:admin/data* intext:index of intext:powered by JoomSport - sport Wo...

What is Google Dork?

It is basically a search string that uses advanced search query to find information that are not easily available on the websites. It is also regarded as illegal google hacking activity which hackers often uses for purposes such as cyber terrorism and cyber theft. Google Dorking can also be called Google Hacking techniques mostly used by hackers to exploit web apps that are vulnerable and extract information. And to do this they make use of Google advanced search operators and SQL Dorks to locate the results with the strings. SQL Injection: This a method that is employed attackers in order to take non-authentication input vulnerabilities and inject SQL commands within the web application which runs at the database backend. Special google search operators Before starting with google dorks, you need to have basic understanding of few special google search operators and also how it functions. 1. intitle: This will ask google to show pages that have the term in their html title. 2. inurl: ...

How to Hack WPA/WPA2 WiFi Using Kali Linux?

  Note:   Use the below methods only for educational/testing purposes on your own wifi or with the permission of the owner. Don’t use this for malicious purposes. Step 1:   ifconfig (interface configuration) : To view or change the configuration of the network interfaces on your system. ifconfig Here, eth0  : First Ethernet interface l0  : Loopback interface wlan0  : First wireless network interface on the system. ( This is what we need. ) Step 2:   Stop the current processes which are using the  WiFi  interface. airmon-ng check kill Step 3:   To start the wlan0 in monitor mode . airmon-ng start wlan0 Step 4:   To view all the  Wifi  networks around you. airodump-ng wlan0mon Here, airodump-ng  : For packet capturing wlan0mon  : Name of the interface (This name can be different on the different devices) Press  Ctrl+C  to stop the process when you have found the target network. Step 5:   To view...

What is CTFs (Capture The Flag) ?

  A CTF stands for Capture the Flag, a game in which players put their skills to practice to solve problems or break into an opponent’s system. Below are different types of CTFs – Jeopardy style: In this variant, players solve certain problems to acquire “flags”(a specific string of text) to win. Attack-Defence: In this type, two teams are created- Red Team (which tries to breach the system) and Blue Team (which tries to defend the system). The best part about a CTF is that you can start with a basic knowledge base and advance your knowledge and skills as you progress further. Most players actively learn about new terminologies and technologies when they research online to understand the technology behind the problem or find a way to efficiently solve that kind of problem. Another reason to take part in a CTF is that you get to know more people as you compete against each other or collaborate to solve that one problem outside your area of expertise. This helps build your social s...

Common types of cyber attacks

  Malware Malware is a term used to describe malicious software, including spyware, ransomware, viruses, and worms. Malware breaches a network through a vulnerability, typically when a user clicks a dangerous link or email attachment that then installs risky software. Once inside the system, malware can do the following: Blocks access to key components of the network (ransomware) Installs malware or additional harmful software Covertly obtains information by transmitting data from the hard drive (spyware) Disrupts certain components and renders the system inoperable Phishing Phishing is the practice of sending fraudulent communications that appear to come from a reputable source, usually through email. The goal is to steal sensitive data like credit card and login information or to install malware on the victim’s machine. Phishing is an increasingly common cyberthreat. Man-in-the-middle attack Man-in-the-middle (MitM) attacks, also known as eavesdropping attacks, occur when attacke...

13 BEST Operating System for Hacking in 2021

  1) Kali Linux     Kali Linux is a Security Distribution of Linux specifically designed for digital forensics and penetration testing. It has over 600 preinstalled penetration-testing applications (cyber-attack performs against computer vulnerability). This OS can be run on Windows as well as Mac OS. Features: It can be used for penetration testing. This platform is available in 32 bits as well as 64 bits. Kali Linux can be updated without the need to download a new version. This OS can encrypt the full disk. You can easily automate and customize the Kali Linux installation on the network. Support for USB live installs. It has a forensics mode that can be used for forensic work. Link:   https://www.kali.org/ 2) Parrot OS Parrot OS is a platform for hacking. It has an easy to use editor for software development. This platform enables you to surf the web privately and securely. Hackers can use Parrot OS to perform vulnerability assessment, penetration testing, co...

How to speed up Kali upgrade and update?

     This article is intended to demonstrate, how to fix the slow internet speed while updating and upgrading the Kali Linux. So there are many ways to fix this and I’ll put all of them here in this post; Why so? Because I don’t know which version of Kali you are running on your machine. Usually slow speed on update & upgrade is due to these several issues: Mirrors issue Name Servers issue Repositories issue Unknown issues :-( So in this post, it’ll try to cover all possible scenarios if I missed some please do report this post by commenting below. Method 1 -Fixing Name Server’s issue Check if you have the right repositories is your /etc/apt/sources.list Remove unwanted or unsupported repositories. Clean apt-get cache. Choose a fast DNS server. Step 1: Clean apt-get cache apt-get clean Step 2: Edit DNS Name Server Edit resolv.conf file: leafpad /etc/resolv.conf Step 3: Replace with Google DNS Name Server Following two are Google DNS, let’s face it if Google is...