THM: Set to have all their apps secured, the elves turned towards the one Santa uses to manage the present deliveries for Christmas. Elf McSkidy asked Elf Exploit and Elf Admin to assist you in clearing the application from SQL injections. When presented with the app's code, both elves looked a bit shocked, as none of them knew how to make any sense of it, let alone fix it. "We used to have an Elf McCode, but he founded a startup and helps us no more", said Admin.
After a bit of talk, it was decided. The elves returned carrying a pointy hat and appointed you as the new Elf McCode. Congratulations on your promotion!
Me: Damn! I got promotion 😳.
After a bit of talk, it was decided. The elves returned carrying a pointy hat and appointed you as the new Elf McCode. Congratulations on your promotion!
Me: Damn! I got promotion 😳.
#notes Change username from old to new
make sure no program is running under old username
run these under tty in root for best
//rename username
#hacktuts
make sure no program is running under old username
run these under tty in root for best
//rename username
#usermod –l newname oldname//for changing directory name too
#usermod –d /home/newname –m newname//changing finger information
#chfn –f newname newname
//now reboot or relogin and check $whoami
$pwd
#hacktuts
https://bees.substack.com/p/making-hacking-accessible
Exploring how Hacking Tools and SEO can improve their UX further.
Exploring how Hacking Tools and SEO can improve their UX further.
Eine Bien 🐝
Making Hacking Accessible
The guide on how to make hacking accessible
Alternatives of bloatware.
https://github.com/mayfrost/guides/blob/master/ALTERNATIVES.md
https://github.com/mayfrost/guides/blob/master/ALTERNATIVES.md
GitHub
guides/ALTERNATIVES.md at master · mayfrost/guides
Looking for a guide? You came to the right place. Here you can find documentation for a variety of topics I research to make complex computing easier. For comments go to the IRC channel #nfo at the...
Free Cybersecurity Certifications - [Part 1]
1. NSE 1,2 & 3
[https://training.fortinet.com]
2. Introduction to Cybersecurity
[https://netacad.com/courses/cybersecurity/introduction-cybersecurity]
3. Cybersecurity Essentials
[https://netacad.com/courses/cybersecurity/cybersecurity-essentials]
4. Networking Essentials
[https://netacad.com/courses/networking/networking-essentials]
5. Android Bug Bounty Hunting: Hunt Like a Rat
[https://codered.eccouncil.org/course/android-bug-bounty-hunting-hunt-like-a-rat]
6. Ethical Hacking Essentials (EHE)
[https://codered.eccouncil.org/course/ethical-hacking-essentials]
1. NSE 1,2 & 3
[https://training.fortinet.com]
2. Introduction to Cybersecurity
[https://netacad.com/courses/cybersecurity/introduction-cybersecurity]
3. Cybersecurity Essentials
[https://netacad.com/courses/cybersecurity/cybersecurity-essentials]
4. Networking Essentials
[https://netacad.com/courses/networking/networking-essentials]
5. Android Bug Bounty Hunting: Hunt Like a Rat
[https://codered.eccouncil.org/course/android-bug-bounty-hunting-hunt-like-a-rat]
6. Ethical Hacking Essentials (EHE)
[https://codered.eccouncil.org/course/ethical-hacking-essentials]
Netacad
Introduction to Cybersecurity
Learn cybersecurity basics to protect your personal digital life and the biggest security challenges companies face today.
🔥Complete Bug Bounty Cheat Sheet
XSS
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xss.md
https://github.com/ismailtasdelen/xss-payload-list
SQLi
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/sqli.md
SSRF
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/ssrf.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Request%20Forgery
CRLF
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crlf.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CRLF%20Injection
CSV-Injection
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/csv-injection.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSV%20Injection
Command Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Command%20Injection
Directory Traversal
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Directory%20Traversal
LFI
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/lfi.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/File%20Inclusion
XXE
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xxe.md
Open-Redirect
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/open-redirect.md
RCE
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/rce.md
Crypto
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crypto.md
Template Injection
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/template-injection.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Template%20Injection
XSLT
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xslt.md
Content Injection
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/content-injection.md
LDAP Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LDAP%20Injection
NoSQL Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/NoSQL%20Injection
CSRF Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSRF%20Injection
GraphQL Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/GraphQL%20Injection
IDOR
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Direct%20Object%20References
ISCM
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Source%20Code%20Management
LaTex Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LaTeX%20Injection
OAuth
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/OAuth
XPATH Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/XPATH%20Injection
Bypass Upload Tricky
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Upload%20Insecure%20Files
XSS
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xss.md
https://github.com/ismailtasdelen/xss-payload-list
SQLi
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/sqli.md
SSRF
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/ssrf.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Request%20Forgery
CRLF
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crlf.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CRLF%20Injection
CSV-Injection
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/csv-injection.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSV%20Injection
Command Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Command%20Injection
Directory Traversal
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Directory%20Traversal
LFI
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/lfi.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/File%20Inclusion
XXE
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xxe.md
Open-Redirect
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/open-redirect.md
RCE
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/rce.md
Crypto
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crypto.md
Template Injection
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/template-injection.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Template%20Injection
XSLT
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xslt.md
Content Injection
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/content-injection.md
LDAP Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LDAP%20Injection
NoSQL Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/NoSQL%20Injection
CSRF Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSRF%20Injection
GraphQL Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/GraphQL%20Injection
IDOR
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Direct%20Object%20References
ISCM
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Source%20Code%20Management
LaTex Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LaTeX%20Injection
OAuth
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/OAuth
XPATH Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/XPATH%20Injection
Bypass Upload Tricky
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Upload%20Insecure%20Files
GitHub
bugbounty-cheatsheet/cheatsheets/xss.md at master · EdOverflow/bugbounty-cheatsheet
A list of interesting payloads, tips and tricks for bug bounty hunters. - EdOverflow/bugbounty-cheatsheet
🎉 Free Cybersecurity Certifications - [Part 2]🧨
7. Website Hacking Techniques
[https://codered.eccouncil.org/course/website-hacking-techniques]
8. Digital Forensics Essentials (DFE)
[https://codered.eccouncil.org/course/digital-forensics-essentials]
9. Network Defense Essentials (NDE)
[https://codered.eccouncil.org/course/network-defense-essentials]
10. Introduction to Dark Web, Anonymity, and Cryptocurrency
[https://codered.eccouncil.org/course/introduction-to-dark-web-anonymity-and-cryptocurrency]
11. Certified in Cybersecurity℠ - CC
[https://isc2.org/Certifications/CC]
12. 20+ Free AWS Certs Related to Cybersecurity
[https://explore.skillbuilder.aws/pages/16/learner-dashboard]
7. Website Hacking Techniques
[https://codered.eccouncil.org/course/website-hacking-techniques]
8. Digital Forensics Essentials (DFE)
[https://codered.eccouncil.org/course/digital-forensics-essentials]
9. Network Defense Essentials (NDE)
[https://codered.eccouncil.org/course/network-defense-essentials]
10. Introduction to Dark Web, Anonymity, and Cryptocurrency
[https://codered.eccouncil.org/course/introduction-to-dark-web-anonymity-and-cryptocurrency]
11. Certified in Cybersecurity℠ - CC
[https://isc2.org/Certifications/CC]
12. 20+ Free AWS Certs Related to Cybersecurity
[https://explore.skillbuilder.aws/pages/16/learner-dashboard]
EC-Council Learning
Website Hacking Techniques Online Course for Beginners
Join our comprehensive website hacking course. Learn web application input validation and error handling testing Get 30+ Premium Videos. Earn a Certif
Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability
https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/
#patches #vulnerability #mitigation
https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/
#patches #vulnerability #mitigation