hacking vidhya
Open in Telegram
No data
Subscribers
-824 hours
-137 days
+3730 days
Posts Archive
xmlrpc-attack
Exploiting the xmlrpc.php
Dorks for finding potential targets
inurl:"/xmlrpc.php?rsd"
intitle:"WordPress" inurl:"readme.html"
allinurl:"wp-content/plugins/"
Searching for XML-RPC servers on WordPress :
POST /xmlrpc.php HTTP/1.1
Host: example.com
Content-Length: 135
<?xml version="1.0" encoding="utf-8"?>
<methodCall>
<methodName>system.listMethods</methodName>
<params></params>
</methodCall>
The normal response should be :
HTTP/1.1 200 OK
Date: Mon, 01 Jul 2019 17:13:30 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
Connection: close
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Content-Length: 4272
Content-Type: text/xml; charset=UTF-8
<?xml version="1.0" encoding="UTF-8"?>
<methodResponse>
<params>
<param>
<value>
<array><data>
<value><string>system.multicall</string></value>
<value><string>system.listMethods</string></value>
<value><string>system.getCapabilities</string></value>
<value><string>demo.addTwoNumbers</string></value>
<value><string>demo.sayHello</string></value>
<value><string>pingback.extensions.getPingbacks</string></value>
<value><string>pingback.ping</string></value>
<value><string>mt.publishPost</string></value>
...
<value><string>wp.getUsersBlogs</string></value>
</data></array>
</value>
</param>
</params>
</methodResponse>
Github
https://github.com/rm-onata/xmlrpc-attack
@hacking_vidhya
Top 10 web hacking techniques of 2024
https://portswigger.net/research/top-10-web-hacking-techniques-of-2024
🪳@hacking_vidhya
🎉 Get Ready for the OSINTcon, free Virtual Conference 2025! 🎉
register now :- www.osintconference.com
Mark your calendars because May 23-25, 2025 is going to be one wild ride into the world of Open-Source Intelligence! 🌐💡
We’re bringing together the coolest OSINT experts, geeks, and enthusiasts from all over the globe for THREE days of learning, networking, and a whole lot of fun. Whether you're just starting out or you're a seasoned OSINT pro, this event is packed with something for everyone. Here's what you can expect:
Expert Talks – Get the lowdown from industry pros who’ll share mind-blowing tips, tricks, and secrets you won't find anywhere else.
Hands-On Workshops – Ready to roll up your sleeves? Learn how to use the latest OSINT tools in real time!
Networking – Meet new people, make connections, and expand your OSINT network.
Panel Discussions – Let’s talk about the good, the bad, and the downright funky side of OSINT (ethics, security, privacy, and more)!
It's not just a conference – it's an OSINT Party! 🎊 So, grab your virtual seat, join the fun, and prepare for a game-changing experience.
Stay tuned for more details on speakers, schedule, and how to get in on the action. We can't wait to see you there!
#OSINTAmbition #OSINTcon #OpenSourceIntelligence #OSINTCommunity #CyberSecurity #OSINTAmbition #LetsGetOSINT
A platform that provides intentionally vulnerable applications for learning source code review. Currently, 25 challenges are available.
It looks very interesting and promising
https://vulnerable.codes/
