Password Reset Vulnerability For Bug Hunters

Hi All after a long time i decided to post something on bug bounty as many people are getting much interested into it .<br /> so we are going to make a small discuss on how this Password Reset vulnerability may lead you to earn $$$ :) .All these methods are founded on many sites also good tricks that you can try during your bug bounty .<br /> <div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJlFar3ft1Pt_aIbsGD3Q9ddSdsWmsp6qhmkiqX_kynBh9d8Pa_wNhf5crw57dRzRs7f6bkG6OdzEzZpE8S5J9iluIqTxLwUCIuEbOBa1mA4FlOGXYcSqFiTxxreNLb3AlAEJpGoNKcw4j/s1600/Bug-bounty-vulnerability-disclosure.jpg"><br /> <img height="199" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJlFar3ft1Pt_aIbsGD3Q9ddSdsWmsp6qhmkiqX_kynBh9d8Pa_wNhf5crw57dRzRs7f6bkG6OdzEzZpE8S5J9iluIqTxLwUCIuEbOBa1mA4FlOGXYcSqFiTxxreNLb3AlAEJpGoNKcw4j/s900/Bug-bounty-vulnerability-disclosure.jpg" width="420" /><br /> </a><br /> <span>Password Reset Vulnerability For Bug Hunters</span><br /> </div>Most of the site where there is a sign-in button then there must be an option for <b>forgot password</b> as of course human can forgot password :P. <br /> <br /> as you click on forgot password button you will be asked for registered email id to which a link will be sent for password reset.<br /> here you can try the normal XSS,CSRF...etc attack so i won't be discussing that i will talk about something different .<br /> <br /> so when you submit the request (Email id + cpacha may be) then you will get a mail containing a url like click here to reset/change password.<br /> <br /> there are multiple kinda of url you may get i will discuss few of them.<br /> <br /> Case 1: Vulnerability on url with a token email id or username<br /> <br /> https://site.com/members/resetpassword/username=xyz&emailid=abc@def@pqr.com&token=xsdf.234sdfdssd323<br /> <br /> So here you can see the user name and email id are in the url itself in some case you will get username/email id both encrypted.<br /> there you can try get the encoding (mostly it will be either base 64 or md5 ).then you can try replace the email id and username with your desired email id/username (encrypted/ un-encrypted )if that work then congo!! you have your bounty on your pocket as some time server accept the dynamic created token and check for the registed email id-user name at database end and says enter new password which ended up giving you $$$ .<br /> <br /> but some time your luck not that good and design of application is strong enough to check for dynamic token with mapped user.<br /> <br /> Case 2: Vulnerability in reference <br /> <br /> https://site.com/members/resetpassword/username=xyz&emailid=abc@def@pqr.com&token=xsdf.234sdfdssd323<br /> <br /> This is quite interesting when ever you clicked on link like this and intercept the request on your browser (burpsuite or any proxy tool) you will see some thing like this <br /> <br /> GET /xyz HTTP/1.1<br /> Host: abcd.com<br /> User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0<br /> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8<br /> Accept-Language: pl,en-us;q=0.7,en;q=0.3<br /> Accept-Encoding: gzip, deflate<br /> Referer: https://site.com/users/password/edit?reset_password_token=<b>HERE_IS_THE_VALUE_OF_RESET_PASSWORD_TOKEN</b><br /> Connection: keep-alive<br /> <br /> Then you can say report this as a security issue as an minimum information disclosure.<br /> <br /> n few cases you will find <br /> <br /> Referer: https://site.com/users/password/edit?mail=admin@abc.com&password=token&action=reset<br /> <br /> that some email id or admin or superuser name/ email id there also you can say it to security issue and get $$$ on your pocket.<br /> <br /> Case 3: Poor Encryption Breaking (Thanks To Ajay Sing Negi For sharing this)<br /> <br /> If you get a link like this<br /> <br /> https://site.com/members/setup-password/14aaef7bb41ed6e4b46d09298ec1bfc6a483623d/ <br /> <br /> After clicking on this type of link you will get into a page where email filed with attacker@gmail.com email id and the 2 blank field to change the password.<br /> <br /> Now while submitting request you can easily change the email id to victim mail id (can use proxy tool like burp suite )and change the password so if the validation is not there and if you have luck then you will end up resetting any victim password on that website and get a good bounty out of it.<br /> <br /> Case 4: Analyzing password Reset Vulnerability <br /> <br /> (again a good finding by Ajay singh negi)<br /> <br /> So what if you get a link like this.<br /> <br /> Attackers Email ID: attackeremailid@gmail.com and his password reset link:<br /> <br /> http://testsite.com/reset-password/74o4s384549484c4k4v506t4d5a3e5n5k444j4g5j4o4c553l454h464m474/74q55426l4q5u5m5c4s5l5m5n5t2102fadb4bd021805624f06ea4c8e4d38<br /> <br /> Here as you can guess there are some md5 encryption is there. on quick analyzing you can see 1st part in the password reset Url before '/' is password reset token and the second part is the md5 hash of the users email id in which the 1st 28 values (<b>74q55426l4q5u5m5c4s5l5m5n5t2</b>) are same for each users email ids and the remaining last values were different for each users email id as they were the users email id md5 hash value. So, the attacker can decrypt the email hash values easily using the online available md5 encrypters and decrypters like: http://md5decryption.com also sometimes some websites use base 64 encoding(or other encodings) which can also be easily decrypted using the online available base64 encoders and decoders like: http://ostermiller.org/calc/encode.html.<br /> <br /> <br /> Attackers Email ID: attackeremailid@gmail.com md5 hash value:<br /> 102fadb4bd021805624f06ea4c8e4d38<br /> <br /> <br /> Victims Email ID: victimemailid@gmail.com md5 hash value:<br /> 05ebb8fb6ec39f50d33e19cd5719084d<br /> <br /> <br /> 1st 28 values which is same for each users email id hash:<br /> 74q55426l4q5u5m5c4s5l5m5n5t2<br /> <br /> <br /> Crafted Url to Reset the password of the Victims Email ID(i.e account)victimemailid@gmail.com:<br /> <br /> http://testsite.com/reset-<br /> password/74o4s384549484c4k4v506t4d5a3e5n5k444j4g5j4o4c553l454h464m474/74q55426l4q5u5m5c4s5l5m5n5t205ebb8fb6ec39f50d33e19cd5719084d<br /> <br /> So in this way the attacker can Takeover on any users account.So if you find these kind of issue then you have money $$$ on your bank.<br /> <br /> So these are some common wayz of detecting Vulnerability that is typically found on password reset function.<br /> Also DO look out for click-jacking,CSRf,URL Redirection after password reset...etc IN password reset (even look out for log in / log out / automatically logged in after clicking the password recovery link also have a good impact ) to built the exploit scenario better and get more $$ Hope you like this please do leave a comment if you want some post like this which will help you in finding Bug-Bounty.

Password Reset Vulnerability For Bug Hunters

Hi All after a long time i decided to post something on bug bounty as many people are getting much interested into it . so we are going to ...

Read more »

Computer Fake Viruses to Play Pranks On April Fool Day On Friends Pc

Hi all in India we do play lots of pranks with our friends on 1st that is popularly known as April fool day :D.<br /> Also its Special In Odisha As people celebrate this day as <b>"<b>Utkala Divas</b>" (ଓଡ଼ିଶା ଦିବସ or Odisha Day</b>).<br /> So Here are some top application that you can play pranks on friends Pc specially i tried with girls pc they will scare the hell out of you :D.<br /> <br /> <a class="center" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqeEp0Ao15VTEdk6rQnjBejL4_UUycmjeunDmohFymDiKOkDlVsU0cSQKKaV1HaWeIgvtezjaplwEgg4aixg60n9xx234trIEdqH8Lep6Plr7yb96-6GkQWex22YHsFcviOFbYdoDeiyAc/s320/troian-virus-worm.jpg"><br /> <img alt="Funny Virus on April fool day" height="299" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqeEp0Ao15VTEdk6rQnjBejL4_UUycmjeunDmohFymDiKOkDlVsU0cSQKKaV1HaWeIgvtezjaplwEgg4aixg60n9xx234trIEdqH8Lep6Plr7yb96-6GkQWex22YHsFcviOFbYdoDeiyAc/s720/troian-virus-worm.jpg" width="670" /><br /> </a><br /> <br /> 1. Add / Remove - Add/Remove is a cool prank that makes it appear that all of your software on your computer is being removed using the Windows Add/Remove Program feature. This is so real, that it will shock the most of the experienced user.<br /> <a href="http://www.rjlpranks.com/download.cfm?d=2">Download here </a><br /> 2.2. Avoid – It makes your Windows Start button avoid any mouse clicks. Just launch this program exe and watch as your Start button jumps away from your mouse cursor whenever you try to click on it.<br /> <a href="http://www.rjlpranks.com/pranks/avoid/">Download Here</a><br /> 3. Bomb – It will run the program you want to run, then after a delay for 5 second, it will display the BOMB message. This will simulate that the program you just ran is bombed.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/bomb/download.shtml">Download Bomb</a><br /> 4. Click Me – It will display a button on which you can never click with your mouse.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/clickme/download.shtml">Download Click Me</a><br /> 5. ClickStart – ClickStart is one of the cool Windows prank program which hides itself in the background and after every 45 seconds it will click on the start button causing the start menu to open. Users will be surprised when their start menu pops up, they will have no idea what is going on.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/clickstart/download.shtml">Download ClickStart</a><br /> 6. Clippy – It is a simulated office assistant that, when ran, will hide in the background for 1 minute then popup in the lower right hand corner of the screen and say something useless.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/clippy/download.shtml">Download Clippy</a><br /> 7. Copy Cursor – It replicates the current Windows mouse cursor over-and-over again on the screen. This is VERY annoying which makes it a great prank!<br /> <a href="http://www.rjlsoftware.com/software/entertainment/copycursor/download.shtml">Download Copy Cursor</a><br /> 8. Crazy Num Caps Scroll – It will toggle the Num Lock, Caps Lock, or Scroll Lock keys at user defined intervals which makes the working of any user very annoying experience.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/crazy_ncs/download.shtml">Download Crazy Num Caps Scroll</a><br /> 9. Create Message Pro – It allows you to configure and create stand alone .EXE files for distribution across your network or the Internet. It adds the ability to specify the message text, buttons to appear on the message, and the type of message icon that appears.<br /> <a href="http://www.rjlsoftware.com/software/utility/createmsg/download.shtml">Download Create Message Pro</a><br /> 10. Cursor Fun – It will change the current mouse cursor to a user specified cursor. It allows you to choose which Windows cursor to change, what type of cursor to change it to.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/cursorfun/download.shtml">Download Cursor Fun</a><br /> 11. Dirty Mouse – It is a windows prank that simulates the mouse ball is dirty. How many times have you tried to move your mouse and it does not move.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/dirty/download.shtml">Download Dirty Mouse</a><br /> 12. DownHoax – This is a great prank makes it appear as though an “unwanted” file is being downloaded from the Internet. DownHoax randomly chooses a site from its internal database of “undesirables” and proceeds to simulate downloading an equally distasteful file.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/downhoax/download.shtml">Download DownHoax</a><br /> 13. Email Fun – When executed, Email Fun displays a fake email screen complete with the To:, From:, Subject: and message contents. Then it immediately pretends to automatically type an email to everyone that is in your address book.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/email/download.shtml">Download Email Fun</a><br /> 14. Fake Delete – Fake Delete simulates the deletion of all files/folders in the Windows directory or whichever directory is passed via the command line. Fake Delete uses the standard Windows delete dialog so it appears very realistic, and it cannot be disabled or stopped.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/fakedel/download.shtml">Download Fake Delete</a><br /> 15. Fake Format – Fake Format mirrors the Windows “Format” functionality. Once the program is started, no matter which buttons are chosen, the program simulates formatting the specified drive.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/fakefmt/download.shtml">Download Fake Format</a><br /> 16. Fake Shutdown – This prank program simulates what would occur when a user chooses to shut down Windows. Each screen was cautiously created to mirror the look of the actual Windows shutdown sequence.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/fakeshutdown/download.shtml">Download Fake Shutdown</a><br /> 17. Fake Start Menu – This program will replace the existing Windows 95 Start Menu (task bar). It will respond to nothing from the user.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/fakestart/download.shtml">Download Fake Start Menu</a><br /> 18. Flasher – Flasher is a hidden prank program that allows you to flash any image to the computer screen, almost like a subliminal message.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/flasher/download.shtml">Download Flasher</a><br /> 19. Flip It – It will display a fake Windows message that appears to have flipped upside-down. Clicking on the YES button will slowly make each piece of text rotate 180 degrees until you can read it again.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/flipit/download.shtml">Download Flip It</a><br /> 20. Floppy Madness – Floppy Madness is a small prank program that will try and access the floppy drive at user specified intervals. If this does not seem fun, just download it and see.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/floppy/download.shtml">Download Floppy Madness</a><br /> 21. Follow Me – When you execute this program, it will automatically hide in Windows and wait for your mouse cursor to move. Once your cursor moves, it automatically moves your Start Button to the same position, horizontally, on the Windows Task Bar.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/followme/download.shtml">Download Follow Me</a><br /> 22. Gas Gripe – This program will lead you through a series of price comparisons with other liquid products. With the help of a very clean interface, Gas Gripe will have you laughing in your chair as you watch the price per gallon go up with other products<br /> <a href="http://www.rjlsoftware.com/software/entertainment/gas/download.shtml">Download Gas Gripe</a><br /> 23. HeadAche – A program that would instantly give you a headache, download and run to know how it produce a headache.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/headache/download.shtml">Download HeadAche</a><br /> 24. Message Manager Lite – Message Manager it will allow you to setup a message dialog to be displayed upon a network login. You can specify the text to be displayed, the image, the buttons (up to 9), and when to display the message.<br /> <a href="http://www.rjlsoftware.com/software/utility/message/download.shtml">Download Massage Manager</a><br /> 25. Mouse Droppings – Watch as your mouse drops little black turds all over your screen, randomly. This is a great joke to play on an unsuspecting co-worker, you can even email this prank to a friend.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/droppings/download.shtml">Download Mouse Droppings</a><br /> 26. Mouse Move – Mouse Move is a a program that can run hidden to move the users mouse cursor to random positions on the screen.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/mousemove/download.shtml">Download Mouse Move</a><br /> 27. MouseClicks – MouseClicks is a harmless gag program that allows you to disable the left, right or both mouse clicks every x seconds.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/mouseclicks/download.shtml">Download MouseClicks</a><br /> 28. Password Prank – This program displays a fake, but very realistic, password box to the user. No matter what key the user presses, it starts typing in its own password. Once the password is entered an error message is displayed to the user telling them their password is not long enough.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/password/download.shtml">Download Password Prank</a><br /> 29. Pirated Software – Pirated Software is a prank that emulates the standard software installation or setup. However, the installation walks you through the steps of installing illegal software.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/pirate/download.shtml">Download Pirated Software</a><br /> 30. Popup Prank – Popup Prank is a gag software program that allows you to simulate these online popup advertisements.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/popup/download.shtml">Download Popup Prank</a><br /> 31. Print Me – When you launch Print Me the standard Windows Print dialog appears, no matter which button is pressed a fake print dialog screen displays to the user.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/printme/download.shtml">Download Print Me</a><br /> 32. WAV Launcher – This is a hidden program launcher. It will launch a specified program or .wav file at user defined intervals.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/launcher/download.shtml">Download WAV Launcher</a><br /> 33. Random Bumper – It is a hidden software program that will play gross burp sounds randomly every minute until closed.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/burp/download.shtml">Download Random Bumper</a><br /> 34. ReplaceKeys – ReplaceKeys is a fun little prank that allows you to replace many keyboard keystrokes with different keyboard keystrokes.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/replacekeys/download.shtml">Download ReplaceKeys</a><br /> 35. Rotate – Rotate is a desktop manipulator that will randomly flip the desktop into all sorts of weird positions.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/rotate/download.shtml">Download Rotate</a><br /> 36. Screen Screw – Screen Screw does just that, it screws with your screen. When you launch Screen Screw it will appear as though your screen has some type of problem painting its colors.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/screenscrew/download.shtml">Download Screen Screw</a><br /> 37. Shakedown – Shakedown will take your current desktop and shake it violently, This will not only annoy you to death, but also give your eyes a good strain.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/shakedown/download.shtml">Download Shakedown</a><br /> 38. Show – Hide Desktop – Show – Hide Desktop is another fun Windows prank from RJL Software. This prank allows you to configure how often the desktop icons will hide and then show again.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/showhide/download.shtml">Download Show – Hide Desktop</a><br /> 39. The Finger – The Finger on an unsuspecting user and watch their reaction when the cursor changes to the middle finger and then back to normal again.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/finger/download.shtml">Download The Finger</a><br /> 40. Time Traveler – Time Traveler is a devious little prank that changes the Windows system clock to a random time. To make matters worse, Time Traveler runs invisible in the background performing this task every 30 seconds.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/traveler/download.shtml">Download Time Traveler</a><br /> 41. Vista Upgrade Prank – The Vista Upgrade Prank starts by emulating the Windows Update service screen. Clicking the install or cancel button closes the update service window and appears to initiate the Vista Upgrade Advisor.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/vista/download.shtml">Download Vista Upgrade Prank</a><br /> 42. Y2K Joke – Y2K is a silly software program that spoofs all of the Y2K issues. It simulates fixing your BIOS, mouse, monitor, and even corrects your calendar problems by changing all letter Ys to letter Ks.<br /> <a href="http://www.rjlsoftware.com/software/entertainment/y2k/download.shtml">Download Y2K Joke</a><br /> <br /> All of the above links and pranks are completely safe they don't harm/affect your system in anyways .these are purely built for fun application so enjoy have nice time ahead keep smiling

Computer Fake Viruses to Play Pranks On April Fool Day On Friends Pc

Hi all in India we do play lots of pranks with our friends on 1st that is popularly known as April fool day :D. Also its Special In Odisha ...

Read more »

PwnSTAR: Pwn_SofT_Ap_scRipt For Hacking

It is basically a bash script to launch a Fake AP, configurable with a wide variety of attack options.Includes a number of index.html and server php scripts, for sniffing and phishing.Can act as multi-client captive portal using php and iptables.<br /> Launches classic exploits such as evil-PDF.An easy way to launch the "best" metasploit modules eg CVE-2013-0422 De-auth with aireplay, airdrop-ng or MDK3.<br /> <br /> PwnSTAR.tgz is a bundle containing the current version of the script + all required webpages.<br /> <a href="https://code.google.com/p/pwn-star/downloads/list">Download Here</a><br /> <b><br /> Few Top features:-</b><br /> <br /> takes care of configuration of interfaces, macspoofing, airbase-ng and isc-dhcp-server<br /> steals WPA handshakes<br /> phishes email credentials<br /> serves webpages: supplied (eg hotspot, below) or provide your own<br /> sniffing with ferret and sslstrip<br /> adds a captive portal to the frontend of the fake AP<br /> assorted exploits<br /> de-auth with MDK3, aireplay-ng or airdrop-ng<br /> Use your imagination, craft your own webpages, and have fun.<br /> <br /> Download packege contents.<br /> "hotspot_3" is a simple phishing web page, used with basic menu option 4.<br /> "portal_simple" is a captive portal which allows you to edit the index.html with the name of the portal eg "Joe's CyberCafe". It is used for sniffing.<br /> "portal_hotspot3" phishes credentials, and then allows clients through the portal to the internet.<br /> "portal_pdf" forces the client to download a malicious pdf in order to pass through the portal.<br /> Designed for Kali-linux and BackTrack5 ,Current version for Kali is PwnSTAR_0.9.<br /> <br /> <b>Installation process:-</b><br /> <br /> It is simple to install and use. download from above link and then follow the screenshot.<br /> <a class="center" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzqI84yRfvGuSRGGzmPGToxCxr0t2pxEY8njyfxs_WcyX8lMoxvxopdN3D9WE42vEaxvQVs1eWI92Gnvx3lLscObru_mgOyQea6WNYckcnHHuNDM1EI8SXjAJQDKZzDnGZ0GladTn_t1gK/s100/12.png"><br /> <img height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzqI84yRfvGuSRGGzmPGToxCxr0t2pxEY8njyfxs_WcyX8lMoxvxopdN3D9WE42vEaxvQVs1eWI92Gnvx3lLscObru_mgOyQea6WNYckcnHHuNDM1EI8SXjAJQDKZzDnGZ0GladTn_t1gK/s1000/12.png" width="750" /><br /> </a><br /> <br /> And Main menu is this<br /> <br /> <a class="center" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimRS_hV9RoWDeR5DT0F3s1GIfGHX49JOkaY7mtDifWqF0ZzdCl2Zs7yugQr0g9HnFo4UrURyak4dIUhk8OprMV6DbnVgTKHqloexdndrMRr4Ihz1GRTXz1Q-CV9heHbR2ln0KcqKT19_CM/s1600/11.png"><br /> <img height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimRS_hV9RoWDeR5DT0F3s1GIfGHX49JOkaY7mtDifWqF0ZzdCl2Zs7yugQr0g9HnFo4UrURyak4dIUhk8OprMV6DbnVgTKHqloexdndrMRr4Ihz1GRTXz1Q-CV9heHbR2ln0KcqKT19_CM/s1000/11.png" width="750" /><br /> </a><br /> <br /> Keep checking darksite.co.in for upcoming tutorial on PwnSTAR.

PwnSTAR: Pwn_SofT_Ap_scRipt For Hacking

It is basically a bash script to launch a Fake AP, configurable with a wide variety of attack options.Includes a number of index.html and se...

Read more »

Lazy Kali Script for Kali Linux Must have

Hi all today i am going tell you about bash script that helps you in kali linux to handle many software updation in simple manner.<br /> Lazy kali is just a simple bash script that makes you feel lazy and helps in better way to Adds quite a few tools to Kali Linux.<br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmui6V4PdR8o_Q2NJIMFN2ScgY_nWTxf-DHTbjIZVdylOGiCkp20wKsbeQ_S4BqOOxOnKFtPodoZjPbmZ2NdXK1h-r_YC0W_u3bbsIZYPFOACKJFcLjiaMIK6C85IWxThDgVW0DsWGCWHm/s1600/lazy+kali.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmui6V4PdR8o_Q2NJIMFN2ScgY_nWTxf-DHTbjIZVdylOGiCkp20wKsbeQ_S4BqOOxOnKFtPodoZjPbmZ2NdXK1h-r_YC0W_u3bbsIZYPFOACKJFcLjiaMIK6C85IWxThDgVW0DsWGCWHm/s400/lazy+kali.png" /></a></div>Here are the list of tool that you can add using lazy kali with current version.<br /> Adds quite a few tools to Kali Linux.<br /> <li>Bleeding Edge Repos<br /> <li>AngryIP Scanner<br /> <li>Terminator<br /> <li>Xchat<br /> <li>Unicornscan<br /> <li>Nautilus Open Terminal<br /> <li>Simple-Ducky<br /> <li>Subterfuge<br /> <li>Ghost-Phisher<br /> <li>Yamas<br /> <li>PwnStar<br /> <li>Ettercap0.7.6<br /> <li>Xssf<br /> <li>Smbexec<br /> <li>Flash<br /> <li>Java<br /> <li>Easy-Creds... and more!<br /> <br /> Lazy-Kali will also update Kali, Start Metaploit Services, Start Stop And Update Open-Vas. This is the first version, script is self updating so more will be added in a short time. Will try to add requested features. <br /> <br /> You can download lazy kali from <a href="https://code.google.com/p/lazykali/downloads/detail?name=lazykali.sh&can=2&q=">this link</a><br /> You will get the file with the name <b>lazykali.sh</b>. Now to install follow the screen shot.<br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrZVkSpG_bvspgglpGIiOFWjIPob32WYRqWDCj1v9VWrZJ_YsBWFPJ8kaelX6HiHP8mxC7D_BaONeE9DpbkPLEaDNJNlsHy-kEZIdBmqKC6899cJOOO1h2cfrmr7j3YHY8rWfT4Y4Uhi-Z/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrZVkSpG_bvspgglpGIiOFWjIPob32WYRqWDCj1v9VWrZJ_YsBWFPJ8kaelX6HiHP8mxC7D_BaONeE9DpbkPLEaDNJNlsHy-kEZIdBmqKC6899cJOOO1h2cfrmr7j3YHY8rWfT4Y4Uhi-Z/s400/4.png" /></a></div>if the script is not installed it may prompt you to install. Type Y to install the script.<br /> Once that is done you will see manu as shown in first screen shot.<br /> <br /> there you go you can select update kali Option 1 to update your kali linux.<br /> just like if you select option 5 (sniffing/spoofing) then you can see this menu.<br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAy9DDdtp_4Nye4MBuUlZVaaeZDg_0a6FYD6iHi6NQmBDZL1x4ZI4d8-pykT7PHm-FnIJA0jEJ_lg_bKkgpYEkg8soZz8uyQkNBU4YRI_1sSX99hS7hLspnLUbZHGJa-cUvxQ_8Mg03yHt/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAy9DDdtp_4Nye4MBuUlZVaaeZDg_0a6FYD6iHi6NQmBDZL1x4ZI4d8-pykT7PHm-FnIJA0jEJ_lg_bKkgpYEkg8soZz8uyQkNBU4YRI_1sSX99hS7hLspnLUbZHGJa-cUvxQ_8Mg03yHt/s400/2.png" /></a></div>if you select installing extra options 6 then this screen will show up.<br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-I_MUTkSHSf2Nn_gqOEvh_AmG1aJskQUZPxc8NIsTEbIK52aoRl6aGwYn8-SAhiH9zwuq5KArwnETv5uRbc4Taj4ekYeKxNiAW8u6toyVFQu7hvBhieDS3booGtX3UO-51Ujo8AyOQOh2/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-I_MUTkSHSf2Nn_gqOEvh_AmG1aJskQUZPxc8NIsTEbIK52aoRl6aGwYn8-SAhiH9zwuq5KArwnETv5uRbc4Taj4ekYeKxNiAW8u6toyVFQu7hvBhieDS3booGtX3UO-51Ujo8AyOQOh2/s400/1.png" /></a></div>Hope this will make you lazy on kali and have fun.<br /> Thanks for reading .

Lazy Kali Script for Kali Linux Must have

Hi all today i am going tell you about bash script that helps you in kali linux to handle many software updation in simple manner. Lazy kal...

Read more »

Innobuzz CISE (Certified Information Security Expert) Exam Question Answer

<div dir="ltr" style="text-align: left;" trbidi="on"> Hi Everyone Here is the post that most people google for.<br /> funnily i have given cise exam for multiple time for some of my friends. so lets not waste the time<br /> directly go into question .so i am skipping the register for exam and other bla bla bla part.<br /> <br /> Note: This Q/A we published after taking permission from Innobuzz and these questions are changed now.<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTdA2wWDsBLCFrrPVFPL55a9rpiUhJUJFmn_H2W0f5pKzei2jBi_PyYXXU-it6Qxv3NOAKyI8f4kNKTuI5R8f-aVU44LnSIRvty5tyRrjkCtbV0C35ebRclEWa6_NSK5-5mkDj-BAnE8NB/s1600/cise.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTdA2wWDsBLCFrrPVFPL55a9rpiUhJUJFmn_H2W0f5pKzei2jBi_PyYXXU-it6Qxv3NOAKyI8f4kNKTuI5R8f-aVU44LnSIRvty5tyRrjkCtbV0C35ebRclEWa6_NSK5-5mkDj-BAnE8NB/s400/cise.jpg" /></a></div> come to question and answer.<br /> 1)Enter Administrative Contact Mail Address of innobuzz.in<br /> <br /> Asnwer:- Its very simple go to who.is and search for innobuzz.in and the answer will show you on search result.<br /> that is <b>innobuzz.control@gmail.com</b> <br /> <br /> 2)Enter Domain name Starting with "S" hosted on same server innobuzz.in.<br /> <br /> Asnwer:- Again this can be solve via online easily <a href="http://www.yougetsignal.com/tools/web-sites-on-web-server/">Yougetsignal</a> and the answer is <b>www.secfence.com</b> .<br /> <br /> 3)Enter Exact name of service running on port number 21 of innobuzz.in.<br /> <br /> Answer :- This Answer can easily Find out by using nmap.if u are on backtrack then you can use this simple command on terminal.<br /> <br /> <b>nmap -A innobuzz.in</b> and you will see the answer on scan result.<br /> <br /> the answer is <b>Pure-FTPd</b><br /> <br /> 4)Here is one of the funny question The Password is being sent on http header. catch it and enter bewlow.<br /> <br /> Answer:-You can easily see by using mozilla live header addons.<br /> <br /> And The Answer is <b>ADMIN@123</b>.<br /> <br /> 5) Here comes the final one again good one.Enter the password.<br /> <br /> Answer:-you just need to view source(ctrl+u) you will see some thing like this on green color "cDQ1c3dyMGQyIyRAIQ=="<br /> <br /> now this is a base 64 encodeed one you can easily decode with some online site like <a href="http://www.base64decode.org/">http://www.base64decode.org</a>.<br /> <br /> The answer will be <b>p45swr0d2#$@!</b><br /> <br /> i believe this exam was easy yes. after submitting answer you will get a code which you need to submit at innobuzz portal.<br /> after which you will get CISE certificate.<br /> <br /> Please Do comment if you have faced have questions also you can add new questions if you get during exam .<br /> Find screen shot here<br /> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfh3-8oqdPTWSiCrXhaDkik3NFVveCXE_zhjJfKRX5VhVltZ2WRjKlVwaacjwe6Xbvbh1LlYq1t7maI2MFx-W5UqMzM71Ip8wLR-HY7hAsbqABitgtLurQd7bgRFsVl6cHW4GbIm5HcJ_-/s1600/1.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfh3-8oqdPTWSiCrXhaDkik3NFVveCXE_zhjJfKRX5VhVltZ2WRjKlVwaacjwe6Xbvbh1LlYq1t7maI2MFx-W5UqMzM71Ip8wLR-HY7hAsbqABitgtLurQd7bgRFsVl6cHW4GbIm5HcJ_-/s320/1.jpg" /></a><br /> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjtwwnudVoenMpTNZhrzjwHMFPSpPXdEmx7Q3gOHBgO6yoJZ_B2Az2LO6g7jlOE7v2VKJjktCqyXIbgJ5QbSFbnnDMl9VZ5xCeMShnqUuZzIdTnsyLOczlAJUIWsAHmRyauJGFsm8jNPx-/s1600/2.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjtwwnudVoenMpTNZhrzjwHMFPSpPXdEmx7Q3gOHBgO6yoJZ_B2Az2LO6g7jlOE7v2VKJjktCqyXIbgJ5QbSFbnnDMl9VZ5xCeMShnqUuZzIdTnsyLOczlAJUIWsAHmRyauJGFsm8jNPx-/s320/2.jpg" /></a><br /> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9vheW9KygHQHzMlE8EVjSQJYxSNbauR83X-hU0f3Qu1RyaUYsp7lzemndmAcRJ1imCXCnCKk2YdHA8bwQL5Vsq2j3klLMxcfHkOfUV0zVnll821iWkWL4uL0XpRTtu9SvraO7tsuaVRmC/s1600/3.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9vheW9KygHQHzMlE8EVjSQJYxSNbauR83X-hU0f3Qu1RyaUYsp7lzemndmAcRJ1imCXCnCKk2YdHA8bwQL5Vsq2j3klLMxcfHkOfUV0zVnll821iWkWL4uL0XpRTtu9SvraO7tsuaVRmC/s320/3.jpg" /></a><br /> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMzvCGsa22bw3aeSoX3X7j50Inwolb-NeNhRxBBG6PUh0cHoHbAN9DGHH8pN4_eTYYkTwo9yGIE6lDtQygTSvhAq_rxHhu10kf-IHiamLLE1nTC6geiE5bupNBVFxblUNzwgmoqfYzPLk5/s1600/4.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMzvCGsa22bw3aeSoX3X7j50Inwolb-NeNhRxBBG6PUh0cHoHbAN9DGHH8pN4_eTYYkTwo9yGIE6lDtQygTSvhAq_rxHhu10kf-IHiamLLE1nTC6geiE5bupNBVFxblUNzwgmoqfYzPLk5/s320/4.jpg" /></a><br /> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6g2T9PpAwWO3yRshwF5F-h9iH65hyphenhyphenVmD4gfMHRKwceBnYWRfk0S58a38_9O6dIbH3RzU8ahgqEdCT_ha1AyZ23M5yeSSu0FLDd4IGBPtEwygPAwB1loMIOA6QcoNTTRcVnUCAPr0T_HCh/s1600/5Ans.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6g2T9PpAwWO3yRshwF5F-h9iH65hyphenhyphenVmD4gfMHRKwceBnYWRfk0S58a38_9O6dIbH3RzU8ahgqEdCT_ha1AyZ23M5yeSSu0FLDd4IGBPtEwygPAwB1loMIOA6QcoNTTRcVnUCAPr0T_HCh/s320/5Ans.jpg" /></a><br /> <br /> Please Do comment if you like this or want more post on any topic.<br /> <br /> Thanks for visiting.<br /> <br /> <br /> <br /></div>

Innobuzz CISE (Certified Information Security Expert) Exam Question Answer

Hi Everyone Here is the post that most people google for. funnily i have given cise exam for multiple time for some of my friends. so lets...

Read more »

PHP Script For Cracking http Basic Authentication

hi in this post i am again sharing article of one of my very nice friend <a href="http://www.mannulinux.org/">manish</a> this php shell helps in cracking http basic authentication password cracking.now lets come to the real topic what exactly basic auth.<br /> <div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQ5QZ_gw1g2A0DVqsNJ5A_vynb86cjioz1ijR97HxWPlykpJqzJka-si1XLoA6IeKLpt_1LJrj_jwcm4mY4_PLarmorVhMQW3NY4GJq3Mz6X33FaC7eKqi4BrwVvFj5EYfyAqn5WnZT6I/s1600/http4.png"><br /> <img height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQ5QZ_gw1g2A0DVqsNJ5A_vynb86cjioz1ijR97HxWPlykpJqzJka-si1XLoA6IeKLpt_1LJrj_jwcm4mY4_PLarmorVhMQW3NY4GJq3Mz6X33FaC7eKqi4BrwVvFj5EYfyAqn5WnZT6I/s800/http4.png" width="620" /><br /> </a><br /> <span>Http Basic Auth Cracker PHP Script</span><br /> </div><br /> so in order to perform HTTP transaction(request- response), basic access authentication is a method for an HTTP user agent to provide a user name and password when making a request.after providing correct user id and password when it is asked.<br /> <br /> <div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFjb166gjvGsyUf3mfAe2kJEZ7ePcLdCtwk-639Y8VaYLWIbebYCzeS2VFXS5t2beqrYJ8rDNU5iOEpftyYs6t4QDQHqUp3cdv-PdbMOI_CNdivi7fssIYh5VByrH7h-SpMaC_THwCvRE/s1600/http3.png"><br /> <img height="199" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFjb166gjvGsyUf3mfAe2kJEZ7ePcLdCtwk-639Y8VaYLWIbebYCzeS2VFXS5t2beqrYJ8rDNU5iOEpftyYs6t4QDQHqUp3cdv-PdbMOI_CNdivi7fssIYh5VByrH7h-SpMaC_THwCvRE/s600/http3.png" width="320" /><br /> </a><br /> <span>Basic Auth Prompt</span><br /> </div><br /> it will allow you to do the http request.so our objective here is how we can break it or get the correct user id and password <br /> so we can do it with the help of php script and brute force attack.<br /> you can brute force any panel which is using basic authentication using this script <br /> <br /> <a href="http://www.mediafire.com/download/3fa25np8nmflmxd/http.php"><br /> download link here</a><br /> <br /> Procedure is very simple<br /> <br /> you need to supply link where htaccess is implemented , username list and password list <br /> <br /> <div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxq0Bl-Djt8Ygy1MCn1mfYZKdi2VGciRcHF4TkIg2p3tCEqUaB1irZ52ievSJhLLYeUqz-9En-BsT8yVUl8fczF4EJK01CWaskIIbHJOyC8dIbIpvvXy2K4JtEpIJoyrRNBz9pP493TYo/s1600/http.png"><br /> <img height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxq0Bl-Djt8Ygy1MCn1mfYZKdi2VGciRcHF4TkIg2p3tCEqUaB1irZ52ievSJhLLYeUqz-9En-BsT8yVUl8fczF4EJK01CWaskIIbHJOyC8dIbIpvvXy2K4JtEpIJoyrRNBz9pP493TYo/s1600/http.png" width="620" /><br /> </a><br /> <span>provide possible username and password list</span><br /> </div><br /> and click "<b>lets hex this shit</b>" button<br /> if password is weak or in your password list, you will get success message like this<br /> <br /> <div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjccN1YdAdi_A8ZTMd6NcyWpjJVI8Lpv1ngPilXWOusixZooCW6LCkOXzKBdpO5nQojWGVuwq5YguI15xBuzY61dH2bFnL3AwsFgaMphPYJGXpdQX3fMb9ob1J0YM8JZ-RjHcC7-ISg8i4/s1600/http2.png"><br /> <img height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjccN1YdAdi_A8ZTMd6NcyWpjJVI8Lpv1ngPilXWOusixZooCW6LCkOXzKBdpO5nQojWGVuwq5YguI15xBuzY61dH2bFnL3AwsFgaMphPYJGXpdQX3fMb9ob1J0YM8JZ-RjHcC7-ISg8i4/s1600/http2.png" width="620" /><br /> </a><br /> <span>Cracked Successfully :)</span><br /> </div><br /> enjoy :)<br /> with love from Team IndiShell<br /> if you have any problem regarding this script , you can message manish on facebook<br /> http://facebook.com/manish1046<br /> <br /> it work very nice you should definitely give a try :) if u encounter http basic auth somewhere :).

PHP Script For Cracking http Basic Authentication

hi in this post i am again sharing article of one of my very nice friend manish this php shell helps in cracking http basic authentication ...

Read more »

Tabnabbing Attack with social Engineering toolkit on Backtrack | kali

Hi everyone here is the post that basically explain about very fundamental attack known to be tab nabbing attack.the attack is very simple again you sent an link to the victim he/she click on it and redirected to your desired login page which looks like original and the after putting his/her credentials you get that in no time .<br /> so lets do this with social engineering toolkit as here more social engineering trick is very necessary .<br /> So before doing all do check your own BT/Kali System IP address by typing <b>ifconfig</b> command.<br /> then Open Your Backtrack terminal and Type <b>cd /pentest/exploits/set</b><br /> Now Open Social Engineering Toolkit (SET) <b>./set</b><br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8mOCeh6T49bOGwtiZujht1oA12Rg7bDtIoMh2sHliLfnJO-2NfErxGQPetMnjX0w-kJTbsfdIkiqXtEgNATLykrZxlYkROjNvyRF9dvNAMSmqpYl37FhoWuzWP146-RLb03JvtFsOgJhw/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8mOCeh6T49bOGwtiZujht1oA12Rg7bDtIoMh2sHliLfnJO-2NfErxGQPetMnjX0w-kJTbsfdIkiqXtEgNATLykrZxlYkROjNvyRF9dvNAMSmqpYl37FhoWuzWP146-RLb03JvtFsOgJhw/s720/1.png" /></a></div>after that choose social engineering attack that is option 1 and then choose option 2, <b>“Website Attack Vectors”</b>.<br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXXnvQM1rOT8QcacsgxOq08vMrzbiVjdLmvby4Ebwj_f_hrh24i5oDySrfTWUQsBmOhaMvrJvZ1Bb_zBsl-hmcrFi1RKYzQHPTgg1w2QT5CRTUUqMThZW2RageZa0DiEAlbXOAZ-tYunLS/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXXnvQM1rOT8QcacsgxOq08vMrzbiVjdLmvby4Ebwj_f_hrh24i5oDySrfTWUQsBmOhaMvrJvZ1Bb_zBsl-hmcrFi1RKYzQHPTgg1w2QT5CRTUUqMThZW2RageZa0DiEAlbXOAZ-tYunLS/s520/2.png" /></a></div>a list of options will be populated you have to select option<b> 4 “Tabnabbing Attack Method”</b>.<br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyynYd_9GCyeMDOl0b0hf-IMfWMlMn45py7x8ORMFu510M7kKTjL9yedvj7vEcbnk4urT99hMRHwDYxoT9JJn_iOB0x4NOXQKD3Q4Yj6lHSOm4uW33FVtmUFT2iV5OsN7Pm3prYhJgB1zM/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyynYd_9GCyeMDOl0b0hf-IMfWMlMn45py7x8ORMFu510M7kKTjL9yedvj7vEcbnk4urT99hMRHwDYxoT9JJn_iOB0x4NOXQKD3Q4Yj6lHSOm4uW33FVtmUFT2iV5OsN7Pm3prYhJgB1zM/s520/3.png" /></a></div>next choose option 2 <b>“Site Cloner”</b>.<br /> it will ask for your system ip which you can give that you got from ifconfig (<b>your backtrack machine ip</b>)<br /> Then Enter the URL of the site you want to clone. In this case<b> http://www.facebook.com </b>and hit enter. SET will clone up the web site. And press return to continue.<br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPr-T2k0wOCGp2LOn9_tSipWfdFyGWfk6M7Iam6Zt1Tq7Hi1kixJATeqMG3wz75m77kjVjou5d5kcmykAZk6kGCRB-M95AP7_zUZ4cbtkk2eDgS5Dvdr_dy08FrNYvZSx9LJ5kSsAweP6u/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPr-T2k0wOCGp2LOn9_tSipWfdFyGWfk6M7Iam6Zt1Tq7Hi1kixJATeqMG3wz75m77kjVjou5d5kcmykAZk6kGCRB-M95AP7_zUZ4cbtkk2eDgS5Dvdr_dy08FrNYvZSx9LJ5kSsAweP6u/s520/5.png" /></a></div>Now convert your URL into Google URL using goo.gl and send this link address to your victim via Email or Chat or any other social way you can make it reach to victim.<br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHX5huRp5OrW-sQ3bCw9pqvykPX2ACAXGrr9YyJoEwn7QcvgZzEM6HVjcgvbODu5hmaCQHJobjcU6t0b48a0YF6N_63GnJ46wZtbddX_prk0qPvjhS_TeLqCyzWcV81MqAA_nC59fm5wND/s1600/7.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHX5huRp5OrW-sQ3bCw9pqvykPX2ACAXGrr9YyJoEwn7QcvgZzEM6HVjcgvbODu5hmaCQHJobjcU6t0b48a0YF6N_63GnJ46wZtbddX_prk0qPvjhS_TeLqCyzWcV81MqAA_nC59fm5wND/s520/7.png" /></a></div>When victim open in their browser it should be a message that the page is still loading. so victim start to open another tab. As soon as victim open new tab, our fake website start working. That script will redirect the victim to the phishing page your derived.<br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnMlmpIRhfnDnHM7CGWvWsmMY3IehCgTqzLAX_U6ki3w6T54pbokySoARQdGXaxbs90Y8VjEY7WdbpES-gGROYCn-tIwtDLjPX1XkJsXLmAH8_224xCdb67VylB3rOg52aAn4TYSgy3XRb/s1600/8.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnMlmpIRhfnDnHM7CGWvWsmMY3IehCgTqzLAX_U6ki3w6T54pbokySoARQdGXaxbs90Y8VjEY7WdbpES-gGROYCn-tIwtDLjPX1XkJsXLmAH8_224xCdb67VylB3rOg52aAn4TYSgy3XRb/s520/8.png" /></a></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv47HfRzZX5REPWkHXVb_cpMVSGCu-bCrUUHDCMDWxXHn-m-a5oK4sNS7Q-vPLcNCOip_pKKVHN39WQNevX2peYFfQRHkJapN9oVMnJtSLx2PV5eXG3ASqgOZjDzbU01L9-gOEhIqUpwly/s1600/9.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv47HfRzZX5REPWkHXVb_cpMVSGCu-bCrUUHDCMDWxXHn-m-a5oK4sNS7Q-vPLcNCOip_pKKVHN39WQNevX2peYFfQRHkJapN9oVMnJtSLx2PV5eXG3ASqgOZjDzbU01L9-gOEhIqUpwly/s320/9.png" /></a></div>here yyou goes these are the user id and password of the victim :D.<br /> be safe keep hacking :).

Tabnabbing Attack with social Engineering toolkit on Backtrack | kali

Hi everyone here is the post that basically explain about very fundamental attack known to be tab nabbing attack.the attack is very simple a...

Read more »

Hack Remote Windows 7 | XP PC With Metasploit (Browser Auto Pwn Vulnerability)

Hi all this is one of the popular attack know as browser auto pwn Vulnerability which we are going to use in this tutorial.<br /> This is a simple vulnerability that allow attacker to hack to remote machine just by a single click by the victim.<br /> <font color="green"><b>-::Using Metasploit::-</b></font><br /> in metasploit there is a module known as browser autopwn.The basic idea behind that module is that it creates a web server in our local machine which will contain different kind of browser exploits.When the user will open the malicious link then the execution of the exploits will start against the browser of the user and if one of the exploits is successful a meterpreter session will open.<br /> <br /> follow these steps to carry out the attack.<br /> open you backtrack/kali terminal make sure metasploit is there (which is present by default :D ).<br /> type #<b>msfconsole</b> on terminal<br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbzcoSzRv2ObzIjC7bZ-hh6rurjLnRlc6NFdRW1aho1zZkQ7vGTCmGYfXhwqWS6NKv5yXiCVg7ZP0jP5-DYL5op64Q7mO-n8_KLLZ2o6QzzlT_W3EzT7Qv-d2tEHIK7dPGMTl9EQptrKnO/s1600/msfconsole.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="msfconsole" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbzcoSzRv2ObzIjC7bZ-hh6rurjLnRlc6NFdRW1aho1zZkQ7vGTCmGYfXhwqWS6NKv5yXiCVg7ZP0jP5-DYL5op64Q7mO-n8_KLLZ2o6QzzlT_W3EzT7Qv-d2tEHIK7dPGMTl9EQptrKnO/s520/msfconsole.png" /></a></div><br /> Now follow these steps as show in image <br /> use the browser_autopwn module<br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYdqnkgj6U7hQiB-GmD0PyPYV33iGG1lE9ebC9LOMWwZ8FIDmnh5WqbYhspVXP8B6OfGxo3U8LA44r5qjPrkpOVuHvkDKM5aWA380wbZMc3th45NoA0KI0TYFBI-oXwr0I9J7TwmYsU4DB/s1600/use+auxiliry.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="use browser auto pwn" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYdqnkgj6U7hQiB-GmD0PyPYV33iGG1lE9ebC9LOMWwZ8FIDmnh5WqbYhspVXP8B6OfGxo3U8LA44r5qjPrkpOVuHvkDKM5aWA380wbZMc3th45NoA0KI0TYFBI-oXwr0I9J7TwmYsU4DB/s920/use+auxiliry.png" width="580" /></a></div><br /> We have set up the LHOST with our IP address,the port to be 4445 and the URIPATH with / in order to prevent metasploit to set up random URL’s.now you will see below image.<br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgMr-rPzCaHbvyu8wJ_Iv-uA1t25A-pvfJHsv2AvqFStRY5ihEvfKJkWNteXm3WrfJAk2Z6fE2tgCAL_mXGD_wzY7cVHQbj2ZxPNK-hkCpKqoQp_5u1PNtupl1tEvCPLEO33HdV6nolfWKd/s1600/server+started.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="server started with 16 module" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgMr-rPzCaHbvyu8wJ_Iv-uA1t25A-pvfJHsv2AvqFStRY5ihEvfKJkWNteXm3WrfJAk2Z6fE2tgCAL_mXGD_wzY7cVHQbj2ZxPNK-hkCpKqoQp_5u1PNtupl1tEvCPLEO33HdV6nolfWKd/s320/server+started.png" /></a></div>Server started with 16 module.<br /> next we need to send the link to victim (like here http://192.168.205.131:8080/).as soon as the victim open the link its all done.<br /> we have the meterpreter shell control in out hand you can do various activity you wish with meterpreter shell functionality.<br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyoIKuudbNSWEo_R72nyn9jfHFUrRDeOPi3O112SaTxra2oV7mSTph3FWoz81p4ZQFB85KbHdtTMO-apCJVrTFaKZVWkjDG_tThozXgs8ld13tSCHwV6hz-J9mvDFHryfwNeyC8Wsemvk1/s1600/hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyoIKuudbNSWEo_R72nyn9jfHFUrRDeOPi3O112SaTxra2oV7mSTph3FWoz81p4ZQFB85KbHdtTMO-apCJVrTFaKZVWkjDG_tThozXgs8ld13tSCHwV6hz-J9mvDFHryfwNeyC8Wsemvk1/s920/hacked.png" /></a></div><br /> Enjoy the hack of your victim machine have fun .<br />

Hack Remote Windows 7 | XP PC With Metasploit (Browser Auto Pwn Vulnerability)

Hi all this is one of the popular attack know as browser auto pwn Vulnerability which we are going to use in this tutorial. This is a simpl...

Read more »

Downloadable Vulnerable Web Application For Practice Hacking Skills

:<b>Part2</b>:<br /> In part1 of this post i have listed <a href="http://www.darksite.co.in/2014/01/online-sites-for-practice-hacking-skills.html">Online | Live Sites For Practice Web Application Hacking Skills</a> Now here i will give you links for downloading iso/zip file which you can install and enjoy in best possible way.<br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjL4T9YjlnAEoChIWYLi7c1SyMoAeQ4NcNQy5-M2C0zrgZ_Yos3gKmkOfxBQehu5jlThveQsEiRZ1ClJRFUzaGcbHITlcJx8KryPYZpip4ApR4GusaSVBeOjR0ZCVUKoD69rbLbcS1ieMr0/s1600/offline+hacking.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Hacking practice vulnerable" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjL4T9YjlnAEoChIWYLi7c1SyMoAeQ4NcNQy5-M2C0zrgZ_Yos3gKmkOfxBQehu5jlThveQsEiRZ1ClJRFUzaGcbHITlcJx8KryPYZpip4ApR4GusaSVBeOjR0ZCVUKoD69rbLbcS1ieMr0/s1600/offline+hacking.jpg" /></a></div>with these vulnerable web applications you can test your web hacking knowledge, pen-testing tools, skills, and kung-fu on, with an added bonus... without going to jail :) The vulnerable web applications have been classified in two categories: offline, VMs/ISOs.<br /> The following list references downloadable vulnerable web applications to play with that can be installed on a standard operating system (Linux, Windows, Mac OS X, etc) using a standard web platform (Apache/PHP, Tomcat/Java, IIS/.NET, etc).i am sure this will sharp your hacking skill,take these as a challenge and i am sure this will be a boost for you.<br /> <font color="green"><h2>List of offline VM/Isos For Practicing Hacking Skills </h2></font><br /> <li>The <b>BodgeIt Store</b> (Java): <a href="http://code.google.com/p/bodgeit/">http://code.google.com/p/bodgeit/</a> (<a href="http://code.google.com/p/bodgeit/downloads/list">download</a>)</li><br /> <br /> <li>OWASP <b>Bricks</b> (PHP): <a href="http://sechow.com/bricks/index.html">http://sechow.com/bricks/index.html</a> (<a href="http://sechow.com/bricks/download.html">download</a> & <a href="http://sechow.com/bricks/docs/">docs</a>)</li><br /> <br /> <li>The <b>ButterFly Security</b> Project (PHP): <a href="http://sourceforge.net/projects/thebutterflytmp/">http://sourceforge.net/projects/thebutterflytmp/</a> (<a href="http://sourceforge.net/projects/thebutterflytmp/files/">download</a>)</li><br /> <br /> <li><b>bWAPP</b> - an extremely buggy web application! (PHP): <a href="http://www.itsecgames.com/">http://www.itsecgames.com</a> (<a href="http://sourceforge.net/projects/bwapp/files/">download</a>) (<a href="http://itsecgames.blogspot.be/2013/01/bwapp-installation.html">docs</a>)</li><br /> <br /> <li>Damn Vulnerable Web Application - <b>DVWA</b> (PHP): <a href="http://www.dvwa.co.uk/">http://www.dvwa.co.uk</a> (<a href="http://code.google.com/p/dvwa/downloads/list">download</a>) </li><br /> <br /> <li>Damn Vulnerable Web Services - <b>DVWS</b> (PHP): <a href="http://dvws.secureideas.net/">http://dvws.secureideas.net</a> (<a href="http://dvws.secureideas.net/downloads/files/dvws.tgz">download</a>)</li><br /> <br /> <li>OWASP <b>Hackademic Challenges</b> Project (PHP): <a href="https://www.owasp.org/index.php/OWASP_Hackademic_Challenges_Project">https://www.owasp.org/index.php/OWASP_Hackademic_Challenges_Project</a> (<a href="https://code.google.com/p/owasp-hackademic-challenges/">download</a>)</li><br /> <br /> <li>Google <b>Gruyere</b> (Python): <a href="http://google-gruyere.appspot.com/">http://google-gruyere.appspot.com</a> (<a href="http://google-gruyere.appspot.com/gruyere-code.zip">download</a>)</li><br /> <br /> <li><b>Hacme Bank</b> (.NET): <a href="http://www.mcafee.com/us/downloads/free-tools/hacme-bank.aspx">http://www.mcafee.com/us/downloads/free-tools/hacme-bank.aspx</a> (<a href="http://www.mcafee.com/apps/free-tools/termsofuse.aspx?url=/us/downloads/free-tools/hacme-bank.aspx">download</a>)</li><br /> <br /> <li><b>Hacme Books</b> (Java): <a href="http://www.mcafee.com/us/downloads/free-tools/hacmebooks.aspx">http://www.mcafee.com/us/downloads/free-tools/hacmebooks.aspx</a> (<a href="http://www.mcafee.com/apps/free-tools/termsofuse.aspx?url=/us/downloads/free-tools/hacmebooks.aspx">download</a>)</li><br /> <br /> <li><b>Hacme Casino</b> (Ruby on Rails): <a href="http://www.mcafee.com/us/downloads/free-tools/hacme-casino.aspx">http://www.mcafee.com/us/downloads/free-tools/hacme-casino.aspx</a> (<a href="http://www.mcafee.com/apps/free-tools/termsofuse.aspx?url=/us/downloads/free-tools/hacme-casino.aspx">download</a>)</li><br /> <br /> <li><b>Hacme Shipping</b> (ColdFusion): <a href="http://www.mcafee.com/us/downloads/free-tools/hacmeshipping.aspx">http://www.mcafee.com/us/downloads/free-tools/hacmeshipping.aspx</a> (<a href="http://www.mcafee.com/apps/free-tools/termsofuse.aspx?url=/us/downloads/free-tools/hacmeshipping.aspx">download</a>)</li><br /> <br /> <li><b>Hacme Travel</b> (C++): <a href="http://www.mcafee.com/us/downloads/free-tools/hacmetravel.aspx">http://www.mcafee.com/us/downloads/free-tools/hacmetravel.aspx</a> (<a href="http://www.mcafee.com/apps/free-tools/termsofuse.aspx?url=/us/downloads/free-tools/hacmetravel.aspx">download</a>)</li><br /> <br /> <li>OWASP <b>Insecure Web App</b> Project (Java): <a href="https://www.owasp.org/index.php/Category:OWASP_Insecure_Web_App_Project">https://www.owasp.org/index.php/Category:OWASP_Insecure_Web_App_Project</a> (<a href="http://sourceforge.net/projects/insecurewebapp/files/">download</a> - <i>orphaned</i>)</li><br /> <br /> <li><b>Mutillidae</b> (PHP): <a href="http://www.irongeek.com/i.php?page=mutillidae/mutillidae-deliberately-vulnerable-php-owasp-top-10">http://www.irongeek.com/i.php?page=mutillidae/mutillidae-deliberately-vulnerable-php-owasp-top-10</a> (<a href="http://www.irongeek.com/mutillidae/">download</a>)</li><br /> <br /> <li>OWASP <b>.NET Goat</b> (C#): <a href="https://owasp.codeplex.com/">https://owasp.codeplex.com</a> (<a href="https://owasp.codeplex.com/SourceControl/list/changesets#">download</a>)</li><br /> <br /> <li><b>Peruggia</b> (PHP): <a href="http://peruggia.sourceforge.net/">http://peruggia.sourceforge.net</a> (<a href="http://sourceforge.net/projects/peruggia/files/">download</a>)</li><br /> <br /> <li><b>Puzzlemall</b> (Java): <a href="https://code.google.com/p/puzzlemall/">https://code.google.com/p/puzzlemall/</a> (<a href="https://code.google.com/p/puzzlemall/downloads/list">download</a>) (<a href="https://code.google.com/p/puzzlemall/downloads/list">docs</a>)</li><br /> <br /> <li>Stanford <b>Securibench</b> (Java) & <a href="http://suif.stanford.edu/~livshits/work/securibench-micro/">Micro</a>: <a href="http://suif.stanford.edu/~livshits/securibench/">http://suif.stanford.edu/~livshits/securibench/</a> (<a href="http://suif.stanford.edu/~livshits/securibench/download.html">download</a>)</li><br /> <br /> <li><b>SQLI-labs</b> (PHP): <a href="https://github.com/Audi-1/sqli-labs">https://github.com/Audi-1/sqli-labs</a> (<a href="https://github.com/Audi-1/sqli-labs/archive/master.zip">download</a>) (<a href="http://dummy2dummies.blogspot.com/">blog</a>)</li><br /> <br /> <li><b>SQLol</b> (PHP): <a href="https://github.com/SpiderLabs/SQLol">https://github.com/SpiderLabs/SQLol</a> (<a href="https://github.com/SpiderLabs/SQLol/archive/master.zip">download</a>)</li><br /> <br /> <li>OWASP <b>Vicnum</b> Project (Perl & PHP): <a href="https://www.owasp.org/index.php/Category:OWASP_Vicnum_Project">https://www.owasp.org/index.php/Category:OWASP_Vicnum_Project</a> (<a href="http://sourceforge.net/projects/vicnum/files/">download</a>)</li><br /> <br /> <li><b>VulnApp</b> (.NET): <a href="http://www.nth-dimension.org.uk/blog.php?id=88">http://www.nth-dimension.org.uk/blog.php?id=88</a> (<a href="http://projects.nth-dimension.org.uk/dir?d=VulnApp">CVS download</a> & <a href="http://projects.nth-dimension.org.uk/rptview?rn=6">vulns</a>)</li><br /> <br /> <li><b>WackoPicko</b> (PHP): <a href="https://github.com/adamdoupe/WackoPicko">https://github.com/adamdoupe/WackoPicko</a> (<a href="https://github.com/adamdoupe/WackoPicko/zipball/master">download</a>) (<a href="http://cs.ucsb.edu/~adoupe/static/black-box-scanners-dimva2010.pdf">whitepaper</a>)</li><br /> <br /> <li>OWASP <b>WebGoat</b> (Java): <a href="https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project">https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project</a> (<a href="http://code.google.com/p/webgoat/downloads/list">download</a>) (<a href="https://www.owasp.org/index.php/WebGoat_User_and_Install_Guide_Table_of_Contents">guide</a>)</li><br /> <br /> <li>OWASP ZAP <b>WAVE</b> - Web Application Vulnerability Examples (Java): <a href="http://code.google.com/p/zaproxy/downloads/list">http://code.google.com/p/zaproxy/downloads/list</a></li><br /> <br /> <li><b>Wavsep</b> - Web Application Vulnerability Scanner Evaluation Project (Java): <a href="https://code.google.com/p/wavsep/">https://code.google.com/p/wavsep/</a> (<a href="https://code.google.com/p/wavsep/downloads/list">download</a>) (<a href="https://code.google.com/p/wavsep/downloads/list">docs</a>)</li><br /> <br /> <li><b>WIVET</b> - Web Input Vector Extractor Teaser: <a href="https://code.google.com/p/wivet/">https://code.google.com/p/wivet/</a> (<a href="http://www.webguvenligi.org/projeler/wivet">download</a>) (<a href="https://code.google.com/p/wivet/downloads/list?can=1&q=">tests</a>)</li><br /> <br /> <font color="blue"><h2>Virtual Machines (VMs) or ISO images</h2></font><br /> The following list references pre-installed and ready to use virtual machines (VMs) or ISO images that contain one or multiple vulnerable web applications to play with.<br /> <li><b>BadStore</b> (ISO): <a href="http://www.badstore.net/">http://www.badstore.net</a> (<a href="http://www.badstore.net/register.htm">download</a> - registration required)</li><br /> <br /> <li><b>Bee-Box</b> (bWAPP VMware): <a href="http://sourceforge.net/projects/bwapp/files/bee-box/">http://sourceforge.net/projects/bwapp/files/bee-box/</a></li><br /> <br /> <li>OWASP <b>BWA</b> - Broken Web Applications Project (VMware - <a href="http://code.google.com/p/owaspbwa/wiki/ProjectSummary">list</a>): <a href="https://www.owasp.org/index.php/OWASP_Broken_Web_Applications_Project">https://www.owasp.org/index.php/OWASP_Broken_Web_Applications_Project</a> (<a href="http://code.google.com/p/owaspbwa/wiki/Downloads">download</a>)</li><br /> <br /> <li><b>Drunk Admin Web Hacking Challenge</b> (VMware): <a href="https://bechtsoudis.com/work-stuff/challenges/drunk-admin-web-hacking-challenge/">https://bechtsoudis.com/work-stuff/challenges/drunk-admin-web-hacking-challenge/</a> (<a href="http://bechtsoudis.com/data/challenges/drunk_admin_hacking_challenge.zip">download</a>) </li><br /> <br /> <li><b>Exploit.co.il</b> Vuln Web App (VMware): <a href="http://exploit.co.il/projects/vuln-web-app/">http://exploit.co.il/projects/vuln-web-app/</a> (<a href="http://sourceforge.net/projects/exploitcoilvuln/files/">download</a>)</li><br /> <br /> <li><b>GameOver</b> (VMware): <a href="http://sourceforge.net/projects/null-gameover/">http://sourceforge.net/projects/null-gameover/</a> (<a href="http://sourceforge.net/projects/null-gameover/files/">download</a>)</li><br /> <br /> <li><b>Hackxor</b> (VMware): <a href="http://hackxor.sourceforge.net/cgi-bin/index.pl">http://hackxor.sourceforge.net/cgi-bin/index.pl</a> (<a href="http://sourceforge.net/projects/hackxor/files/">download</a>) (<a href="http://hackxor.sourceforge.net/cgi-bin/hints.pl">hints&tips</a>)</li><br /> <br /> <li><b>Hacme Bank Prebuilt VM </b>(VMware): <a href="http://ninja-sec.com/index.php/hacme-bank-prebuilt-vmware-image-ninja-sec-com/">http://ninja-sec.com/index.php/hacme-bank-prebuilt-vmware-image-ninja-sec-com/</a> (<a href="http://dc121.4shared.com/download/wwPhUxMQ/hackme_bank_vm_Ninja-Sec.zip">download</a>)</li><br /> <br /> <li><b>Kioptrix4</b> (VMware & Hyper-V): <a href="http://www.kioptrix.com/blog/?p=604">http://www.kioptrix.com/blog/?p=604</a> (<a href="http://www.kioptrix.com/dlvm/Kioptrix4_vmware.rar">download</a>) </li><br /> <br /> <li><b>LAMPSecurity</b> (VMware): <a href="http://sourceforge.net/projects/lampsecurity/">http://sourceforge.net/projects/lampsecurity/</a> (<a href="http://sourceforge.net/projects/lampsecurity/files/">download</a>) (<a href="http://sourceforge.net/projects/lampsecurity/files/Documentation/">doc</a>)</li><br /> <br /> <li><b>Metasploitable</b> (VMware): <a href="http://blog.metasploit.com/2010/05/introducing-metasploitable.html">http://blog.metasploit.com/2010/05/introducing-metasploitable.html</a> (<a href="http://updates.metasploit.com/data/Metasploitable.zip.torrent">download</a> - torrent) (<a href="http://www.metasploit.com/learn-more/how-do-i-use-it/test-lab.jsp">doc</a>)</li><br /> <br /> <li><b>Metasploitable 2</b> (VMware): <br /> <a href="https://community.rapid7.com/docs/DOC-1875">https://community.rapid7.com/docs/DOC-1875</a> (<a href="https://sourceforge.net/projects/metasploitable/files/Metasploitable2/">download</a>)</li><br /> <br /> <li><b>Moth</b> (VMware): <a href="http://www.bonsai-sec.com/en/research/moth.php">http://www.bonsai-sec.com/en/research/moth.php</a> (<a href="http://sourceforge.net/projects/w3af/files/moth/moth/">download</a>)</li><br /> <br /> <li><b>PentesterLab</b> - The Exercises (ISO & PDF): <a href="https://www.pentesterlab.com/exercises/">https://www.pentesterlab.com/exercises/</a> </li><br /> <br /> <li><b>PHDays I-Bank</b> (VMware): <br /> <a href="http://phdays.blogspot.com.es/2012/05/once-again-about-remote-banking.html">http://phdays.blogspot.com.es/2012/05/once-again-about-remote-banking.html</a> (<a href="http://downloads.phdays.com/phdays_ibank_vm.zip">download</a>)</li><br /> <br /> <li><b>Samurai WTF</b> (ISO - list): <a href="http://www.samurai-wtf.org/">http://www.samurai-wtf.org</a> (<a href="http://sourceforge.net/projects/samurai/files/">download</a>)</li><br /> <br /> <li><b>Sauron</b> (Quemu) [<i>Spanish</i>]: <a href="http://sg6-labs.blogspot.com/2007/12/secgame-1-sauron.html">http://sg6-labs.blogspot.com/2007/12/secgame-1-sauron.html</a> (<a href="http://sg6-labs.blogspot.com/search/label/SecGame">solutions</a>)</li><br /> <br /> <li><b>UltimateLAMP</b> (VMware - <a href="http://www.metasploit.com/learn-more/how-do-i-use-it/test-lab.jsp">list</a>): <a href="http://ronaldbradford.com/blog/ultimatelamp-2006-05-19/">http://ronaldbradford.com/blog/ultimatelamp-2006-05-19/</a> (<a href="http://ronaldbradford.com/tmp/UltimateLAMP-0.2.zip">download</a>)</li><br /> <br /> <li><b>Virtual Hacking Lab</b> (ZIP): <a href="http://sourceforge.net/projects/virtualhacking/">http://sourceforge.net/projects/virtualhacking/</a> (<a href="http://sourceforge.net/projects/virtualhacking/files/">download</a>)</li><br /> <br /> <li><b>Web Security Dojo</b> (VMware, VirtualBox - <a href="http://www.mavensecurity.com/web_security_dojo/">list</a>): <a href="http://www.mavensecurity.com/web_security_dojo/">http://www.mavensecurity.com/web_security_dojo/</a> (<a href="http://sourceforge.net/projects/websecuritydojo/files/">download</a>)</li><br /> <br /> You can have a lots of fun time with these so why to waste time download and gets started now .Happy hacking :)

Downloadable Vulnerable Web Application For Practice Hacking Skills

: Part2 : In part1 of this post i have listed Online | Live Sites For Practice Web Application Hacking Skills Now here i will give you lin...

Read more »