Hack the Fristileaks VM (CTF Challenge)
Today we will walk through the FristiLeaks VM. There is nothing that we know about this VM except for the fact that security level is from beginner to intermediate. Also this VM only works on...
View ArticlePassword Cracking using Nmap
In previous practical I had used basic command to scan victim’s PC and found open ports like ftp, Ssh, telnet, snmp and etc. You can check from here. But now the question is if we found open ports...
View ArticleSMS Bombing on Mobile using Burpsuite
In this article we will learn about SMS bombing. It is used to prank your friends by sending those hundreds and thousands of SMS at once. There are many third party sites to do so but there are usually...
View ArticleHack the SickOS 1.1 VM (CTF Challenge)
This time we are going to crack SickOS 1.1 in the Boot2root challenges. This CTF gives a clear analogy how hacking strategies can be performed on a network to compromise it in a safe environment. The...
View ArticleHack any Android Phone using Spade APK Backdoor
In this article we will learn yet another method hack android authentically. This is the most uncontrived way of hacking an android user as you are binding your maligant file with the original one just...
View ArticleHack the VulOS 1.1 VM (CTF Challenge)
“Your assignment is to pentest a company website, get root of the system and read the final flag” is the only thing we know about this VM other than that is it a smaller one. Therefore without any...
View ArticleHack the SpyderSec VM (CTF Challenge)
You are looking for two flags. Using discovered pointers in various elements of the running web application you can deduce the first flag (a downloadable file) which is required to find the second flag...
View ArticleHack Remote Windows 10 PC using HTA Web Server
This module hosts an HTML Application (HTA) that when opened will run a payload via Powershell. When a user navigates to the HTA file they will be prompted by IE twice before the payload is executed...
View ArticleSearch Port Names and Numbers using whatportis
Whatportis is a utility command to search port numbers and/or names. It often happens that we need to find the default port number for a specific service, or what service is normally listening on a...
View ArticleCommand Injection Exploitation in DVWA using Metasploit (Bypass All Security)
Command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via a vulnerable application. Command injection attacks are possible when an application...
View ArticleExploiting Joomla Website using Account Creation and Privilege Escalation
In this article we will learn about hacking Joomla CMS. And to so we will be a pre-instaled module of metasploit which will further help us to create an autocratic account with administrative...
View ArticleHack Linux Kernel using Dirtycow Exploit (Privilege Escalation)
People say that “good things take time” but everyone knows that in today’s world everyone has everything but time especially in cyber security and hacking. But worry no more about time as we are going...
View ArticleHack the Kioptrix VM (CTF Challenge)
Today we going to solve Kioptrix: Level 1.3 (#4). It is Boot2Root series provided for practice. Hints we have from author are : It’s possible to remotely compromise the machine Stays within the target...
View ArticleHack the Acid VM (CTF Challenge)
The name of the Virtual machine is “Acid Server” that we are going to crack. It is an Boot2Root Vm that we are going to solve. This is a web-based VM. Our main goal is to escalate the privileges to...
View ArticleHack the Lord of the Root VM (CTF Challenge)
This is another Boot2Root challenge which has been prepared by KoocSec for hacking exercises. He prepared this through the inspiration of his OSCP exam. It is based on the concepts of great...
View ArticleHack the Breach 2.1 VM (CTF Challenge)
Breach 2.1 is the second VM in the multi-series Boot2Root CTF challenges. This is developed by mrb3n. It is high-level challenge and shows a lot of scenario including plenty of twists and trolls along...
View ArticleHack Acid Reloaded VM (CTF Challenge)
Acid reloaded is the 2nd VM of the Acid series of Boot2Root CTF exercise. It is created by Avinash Thappa. To capture the flag, first we have to gain the root access that means escalating administrator...
View ArticleCapture the Flag Challenges
Hack Acid Reloaded VM (CTF Challenge) Hack the Breach 2.1 VM (CTF Challenge) Hack the Lord of the Root VM (CTF Challenge) Hack the Acid VM (CTF Challenge) Hack the Kioptrix VM (CTF Challenge) Hack the...
View ArticlebWAPP Command Injection Exploitation using Commix (Bypass All Security)
Command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via a vulnerable application. Command injection attacks are possible when an application...
View ArticleHow to Secure SSH Port using Port Forwarding (Beginner Guide)
In this article I am going to perform how to use port forwarding in a system which is a process that redirects a communication request from a specific port to another port or host. It is basically...
View Article