Ethical Hacking Tutorials

Android security checklist: WebView https://blog.oversecured.com/Android-security-checklist-webview/ Know more Hacking at @EthicalhackxCom

Free Resource Cyber Security Study 1 https://lnkd.in/eYEK8UT https://lnkd.in/emGNfz7 https://lnkd.in/erQp9cq https://lnkd.in/eNTFEEC https://lnkd.in/eJFz5ra https://ctf.hacker101.com/ https://lnkd.in/eMsrpxQ https://lnkd.in/ef4kFQX https://www.hackthebox.eu/ https://tryhackme.com/ http://vulnhub.com/ https://lnkd.in/e-qhWRZ https://lnkd.in/eFXvmDj https://lnkd.in/e9YUSC7 https://lnkd.in/ejVpGGt https://lnkd.in/esPgayX https://lnkd.in/e32fMwS https://lnkd.in/eX4-mK4 https://lnkd.in/e-8YKX5 https://lnkd.in/egim_iq https://lnkd.in/eW776r2 https://lnkd.in/erhJpks https://lnkd.in/eEvqcJT https://lnkd.in/e83EfXP https://lnkd.in/eZD-SFR

XSS Game | https://xss.pwnfunction.com/ - Interactive XSS Challenges 🧩 Solve and Learn More at @EthicalHackxCom

HackTheBox - Blue Gearing up for Rooting Machines ? Well HTB Blue is an old Retired Machine , and as the name suggests - Its related to EternalBlue Vulnerability ┌──(abhinav㉿ETHICALHACKX)-[~/htb/blue] └─$ nmap blue.htb ┌──(abhinav㉿ETHICALHACKX)-[~/htb/blue] └─$ sudo nmap -sC -sV -A -p135,139,445,49152,49153,49154,49155,49156,49157 blue.htb -oA blueHackTheBox As clear from name , lets scan for SMB Vulnerabilities from nmap ┌──(abhinav㉿ETHICALHACKX)-[~/htb/blue] └─$ sudo nmap -p139,445 --script=smb-vuln-cve2009-3103.nse,smb-vuln-cve-2017-7494.nse,smb-vuln-ms06-025.nse,smb-vuln-ms07-029.nse,smb-vuln-ms08-067.nse,smb-vuln-ms10-054.nse,smb-vuln-ms10-061.nse,smb-vuln-ms17-010.nse blue.htb Host script results: | smb-vuln-ms17-010: | VULNERABLE: | Remote Code Execution vulnerability in Microsoft SMBv1 servers (ms17-010) | State: VULNERABLE | IDs: CVE:CVE-2017-0143 | Risk factor: HIGH | A critical remote code execution vulnerability exists in Microsoft SMBv1 | servers (ms17-010). In Metasploit - msf6 > search ms17-010 We set the right hosts in msf by show options and run/exploit A reverse shell we got, whoami reveals we are SYSTEM user , get the flags from user and admin desktop Learn More Hacking at @EthicalHackxCom

I am randomly giving Tryhackme 2 vouchers for student to support their education for this holidays and Christmas and new year eve. Will be updating on this soon.

27k+ members and counting. We help you learning Hacking and get into Security Jobs. Join @EthicalHackx and @EthicalHackxCom

CompTIA PenTest+ (PT0-001) ITProTV - https://www.itpro.tv/courses/comptia/comptia-pentest/ Penetration testing and vulnerability management -34 H 16 M Official CompTIA online IT training. This course goes over exam objectives, pen testing tools, and reporting for CompTIA's PenTest+ certification exam. Learn Hacking at @EthicalHackxCom Password- ethicalhackx How to Extract - https://t.me/ethicalhackx/430 How to Extract Video - https://t.me/ethicalhackx/343 File1- https://t.me/ethicalhackx/1124 File2- https://t.me/ethicalhackx/1125 File3- https://t.me/ethicalhackx/1126 File4- https://t.me/ethicalhackx/1127 File5- https://t.me/ethicalhackx/1128 File6- https://t.me/ethicalhackx/1129 Keep Learning at @EthicalHackxCom

CompTIA Pentest+ (Ethical Hacking) Course & Practice Exam Udemy - https://www.udemy.com/course/pentestplus/ Learn More, Join @EthicalHackxCom Password- ethicalhackx How to Extract - https://t.me/ethicalhackx/430 How to Extract Video - https://t.me/ethicalhackx/343 File 1- https://t.me/ethicalhackx/1117 File 2- https://t.me/ethicalhackx/1118 File 3- https://t.me/ethicalhackx/1119 File 4- https://t.me/ethicalhackx/1120 File 5- https://t.me/ethicalhackx/1121 Learn More, Join @EthicalHackxCom

All I have been posting recently is shit. We will be sharing knowledge very soon, starting from a garage. Join the Garage at @EthicalHackxCom

"NSO Zero-Click Malware Pwns Your iPhone With A Virtual CPU Encoded In Y2K Image Tech | HotHardware" https://amp.hothardware.com/news/zero-click-malware-pwns-iphone-virtual-cpu-y2k-image-tech

Collection of WAF evasion payloads https://gist.github.com/ZephrFish/32249cae56693c1e5484888267d07d39 @infoseczone | The Geeks

What is TTY in Linux? - It's FOSS https://itsfoss.com/what-is-tty-in-linux/

Are you one of those ? Well we help with all, , we got you covered. Learn more at @EthicalHackxCom

OSCP Preparation Day-6 ( Koptrix Level 1 - VulnHub ) Get the machine FREE from VulnHub First initial nmap scan ┌──(abhinav㉿ETHICALHACKX)-[~/vulnhub/koptrix1] └─$ nmap koptrix_1.vulnhub PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 111/tcp open rpcbind 139/tcp open netbios-ssn 443/tcp open https 32768/tcp open filenet-tms and full nmap scan ┌──(abhinav㉿ETHICALHACKX)-[~/vulnhub/koptrix1] └─$ sudo nmap -sV -sC -A -O -T5 -p- koptrix_1.vulnhub -oA koptrix1 -vv We can get SMB version and apache version running on the machine Metasploit module - auxiliary/scanner/smb/smb_version says (Samba 2.2.1a) Get an exploit msf6> auxiliary(scanner/smb/smb_version) > search trans2open , use the right exploit and payload for exploiting (payload/linux/x86/shell_reverse_tcp ) set the options right via show/set options Upon running we get the shell and whoami says we are root Things I learnt : -Getting the network modes right on VM/OpenVPN -namp initial and full scan -reading the scan report of nmap nicely to get some information -searchsploit and exploit-db help for exploits -linux basic commands like whoami and others for navigating around -SMB is really important , one should learn more about it when in CTFs. #OSCP #Day-6 Learn more at @EthicalHackxCom

nmap default scan ( common ports ) Some1 already cleared this sometime back. I had a wrong idea what happens when we fire nmap scan, which ports are scanned. I ran a wireshark capture, and found no it's NOT port 0-1023, Instead the well known common ports are scanned which maybe beyond 1023 Apologies for transmitting wrong information here, possibility this error would also be present on post regarding OSCP Day - 0/1

OSCP Preparation Day-6 ( Koptrix Level 1 - VulnHub ) Solving Vulnhub Machine As requested by all for something that every1 can afford Koptrix Level 1 today - https://download.vulnhub.com/kioptrix/Kioptrix_Level_1.rar , you can download this for free and run in vmware player/workstation The machine has already been beaten to death but we will do it yet again. for the machine to get network IP over nat - edit the VMX file after extracting in any notepad , find Bridged on line near 42 ethernet0.networkName = "bridged" Change it to nat - ethernet0.networkName = "nat" Save and run. Solve the machine and tell us what you learnt We would be posting this machine today More OSCP Preparation at @EthicalHackxCom , join and ask