Ⱥղօղվʍօմʂ Ꭰ€ѵìꝈ
Закритий канал
☆°°° @AnonymousDeviLSec °°°☆ - - - Contact :- @its_DeviLucaS - - -Discuss Group :- @Hackerss_Chat Kɴᴏᴡʟᴇᴅɢᴇ Iꜱ Mᴇᴀɴᴛ Fʀᴇᴇ Fᴏʀ Eᴠᴇʀyᴏɴᴇ Eᴠᴇʀyᴛɪɴɢ ꜱʜᴀʀᴇD HᴇʀE FoR EducationaL Purpose
Показати більше3 242
Підписники
Немає даних24 години
-117 днів
-3930 днів
Архів дописів
3 242
🔰INSTAGRAM MASTER GUIDE : INCREASE YOUR FOLLOWER🔰
Ⓜ️Here Are Some Pro Tips To Increase Your Instagram Pages Easily.
🔆Credits :MrXolo
⭕Download Link -https://tinyurl.com/yj5ej6e7
➖ @Hackers_Blackhat ➖
3 242
Continuation of the linux commands
➖➖➖➖➖➖➖➖➖➖➖➖➖➖
✳️ sudo command
🔹 Short for “SuperUser Do”, this command enables you to perform tasks that require administrative or root permissions. However, it is not advisable to use this command for daily use because it might be easy for an error to occur if you did something wrong.
✳️ chmod command
🔹 chmod is another Linux command, used to change the read, write, and execute permissions of files and directories.
🔹 We can use chmod to make a file executable and to change the permissions granted to it in Linux. Imagine you have a python code named hackerzhome.py in your computer. You'll need to run “python hackerzhome.py” every time you need to run it. Instead of that, when you make it executable, you'll just need to run “hackerzhome.py” in the terminal to run the file. To make a file executable, you can use the command
“chmod +x hackerzhome.py”
in this case. You can use “chmod 755 hackerzhome.py” to give it root permissions or “sudo chmod +x hackerzhome.py” for root executable
✳️ ping command
🔹 Use the ping command to check your connectivity status to a server. For example, by simply entering ping google.com, the command will check whether you’re able to connect to Google and also measure the response time.
✳️ apt-get command
🔹 Use apt to work with packages in the Linux command line. Use apt-get to install packages. This requires root privileges, so use the sudo command with it. For example, if you want to install the text editor jed, we can type in the command “sudo apt-get install jed”. Similarly, any packages can be installed like this. It is good to update your repository each time you try to install a new package. You can do that by typing “sudo apt-get update”. You can upgrade the system by typing “sudo apt-get upgrade”. We can also upgrade the distro by typing “sudo apt-get dist-upgrade”. The command “apt-cache search” is used to search for a package. If you want to search for one, you can type in “apt-cache search jed”(this doesn't require root).
➖➖➖➖➖➖➖➖➖➖➖➖➖➖
Keep supporting us❤️
@Hackers_Blackhat
3 242
Hacker'z home 2.o:
🔴 some of the Types of Injections
➖➖➖➖➖➖➖➖➖➖➖➖➖➖
✅ Depending on the type of database system, the programming language and other factors, there can be many different types of injections:
🔹 Code Injection
🔹 CRLF Injection
🔹 OS Command Injection
🔹 XSS
🔹 Email Header Injection
🔹 SQL Injection
Etc..
🔵 How do you prevent code injection vulnerabilities?
✅ Preventing code injection vulnerabilities really depends on the technology you are using on your website. For example, if you use WordPress, you could minimize code injection vulnerabilities by keeping it to a minimum of plugin and themes installed.
🔹 If you have a tailored web application and a dedicated team of developers, you need to make sure to have security requirements your developers can follow when designing and writing software. This will allow them to keep thinking about security during the lifecycle of the project.
⚠️ Here are OWASP’s technical recommendations to prevent SQL injections:
👉 Preventing SQL injections requires keeping data separate from commands and queries.
🔹The preferred option is to use a safe API, which avoids the use of the interpreter entirely or provides a parameterized interface or migrate to use Object Relational Mapping Tools (ORMs). Note: Even when parameterized, stored procedures can still introduce SQL injection if PL/SQL or T-SQL concatenates queries and data, or executes hostile data with EXECUTE IMMEDIATE or exec().
🔹 Use positive or “whitelist” server-side input validation. This is not a complete defense as many applications require special characters, such as text areas or APIs for mobile applications.
🔹 For any residual dynamic queries, escape special characters using the specific escape syntax for that interpreter. Note: SQL structure such as table names, column names, and so on cannot be escaped, and thus user-supplied structure names are dangerous. This is a common issue in report-writing software.
🔹 Use LIMIT and other SQL controls within queries to prevent mass disclosure of records in case of SQL injection.
=== @Hackers_Blackhat ===
3 242
🔵 Injection Attack
➖➖➖➖➖➖➖➖➖➖➖➖➖➖
✳️ A code injection happens when an attacker sends invalid data to the web application with the intention to make it do something that the application was not designed/programmed to do.
✳️ In simple words, an injection attack is one in which databases and other systems are vulnerable to such an extent that an attacker can inject malicious or untrusted data into the system. This occurs when untrusted data is sent to an interpreter as part of a command or query. Basically, the attacker's data tricks the interpreter into executing commands without adequate authorization.
✳️ the most common example around this security vulnerability is the **SQL query** consuming untrusted data. You can see one of OWASP’s examples below:
String query = “SELECT * FROM accounts WHERE custID = ‘” + request.getParameter(“id”) + “‘”;
✳️ This query can be exploited by calling up the web page executing it with the following URL: http://example.com/app/accountView?id=’ or ‘1’=’1 causing the return of all the rows stored on the database table.
(I will explain more about this queries and working of sql injection later)
✳️ The core of a code injection vulnerability is the lack of validation and sanitization of the data used by the web application, which means that this vulnerability can be present on almost any type of technology.
✳️ Anything that accepts parameters as input can potentially be vulnerable to a code injection attack.
3 242
How To Share Files between Windows and Linux Over Network | Samba
INTRO ..
#technicalnavigator 🔗 https://technicalnavigator.in/how-to-share-files-between-windows-and-linux-over-network-samba/
✦🇨 🇭 🇦 🇳 🇳 🇪 🇱
3 242
How To Edit a Text file in Windows Powershell
INTRO No matter how good you are at CTF ..
#technicalnavigator 🔗 https://technicalnavigator.in/how-to-edit-a-text-file-in-windows-powershell/
✦🇨 🇭 🇦 🇳 🇳 🇪 🇱
3 242
🔰Pentester Academy Courses🔰
✨Could Have Sold This For Thousands But It's My Job To Bring This All Free For You All AndDownload Before Mega Removes The File.
🔗 Link - https://mega.nz/folder/jAxnEQzT#tg88N3mG4F2C2appZAnVDg
➖ @Hackers_Blackhat ➖
3 242
❤️ STEALING FACEBOOK LOGIN VIA SS7 ❤️
FOR FULL @ATTACKERARMY
DOWNLOAD LINK :-
https://mega.nz/file/gllzwI4L#ct5KHlSkF77PjSr8-DeNBiMaXMfTOm5cjieivG3ss8o
MADE BY @attackerarmy
➖ @Hackers_Blackhat ➖
3 242
🔰ADVANCE Meterpreter FULL GUIDE🔰
HEY guys welcome to this page i will tell you very intersting thing all of you payload but nowdays pepole are very smart they dnt click any server or install and apk but we are hackers we have found solution of it that is meterpeter payload it works like payload is a virus but victim doesnt open it now if we send victim a pdf file it will open bcoz that is not an exe file not only pdf file image word file ppt file .mp4 and more extension our victim will open it he will see see that file but in background the virus will run and get hacked i hope our 8588 members lets hit 10 k we will make a forum ok so now y understanded what is advance meterpeter payload ok now let see steps <
▪️1- open kali linux
▪️2- go to tools social enginering and seelct set tool wait it till then it open
▪️3- Now a menu will appaer type 1 and press enter
▪️4- Agian many options will come selct 3 enter
▪️5- Now agian will two option come just selct option 1 and press enter named file format exploits
▪️6- Give your reverse ip connection if you are doing in internet just simply use no-ip
▪️7- Now many options are coming select your format you want to i will use 13 for pdf use as your wish
▪️8- Now it will ask that you want your pdf to bind virus or a blank pdf it depends on your wish i select blank pdf by pressing 2 button and press enter
▪️9- No some confusing options will come just select any depends on your situation
▪️10- Now enter your lhost for listing the payload type and enter
▪️11- Now enter your port and press enter make sure the port is open
▪️12- Press enter it will take some time and genrate
▪️13-Now it will ask for listen port type yes and enter
▪️14- It wil take some time just wait if y wait y will get your exploit
▪️15- Done send your victim and make sure to download her by your mind
Credit- @pardeepdhawan9870 & @aboutpardeep
@Hackers_Blackhat
