Tag Info

Hot answers tagged

3

General strategies - Red Teaming Analysis Abuse identity and authentication -> Target: People and credentials -> RDP, SSH, more consoles, portals Exploit privilege and trust -> Target: Infrastructure -> NT Domain administrator, Unix root accounts Attack data structures and data handling -> Target: Services, Apps -> Client executables, Client-to-server ...


2

You don't mention which server; is it Apache? At the moment, it appears that an attacker must be able to cause a CGI program to run in order to exploit the vulnerability. Having no CGI scripts would seem to offer some protection. Removing mod_cgi from httpd.conf would offer more: a2dismod cgi apache2ctl graceful The second part of your question relies on ...


2

Hacking is a serious crime, and gets you in even a more of a problem. It seems you have some details, try to gather logs, screenshots etc. and get to the nearest police station and report the crime. Commiting a crime in awnser to a crime is NOT a solution.


1

The syntax for host is: host -t axfr domain.name dns-server For dig: dig axfr @dns-server domain.name Replace dns-server with the authoritative DNS server and domain.name with your target domain name. Keep in mind that this has very little to do with web applications, the above has to do with DNS. If we're talking about penetration testing, DNS zone ...


1

You will get that error when you access Gmail, and there isn't really anything you can do about it, except to try different browsers. This is due to HSTS (HTTP Strict Transport Security) which Google has implemented along with the option to include certificate pinning. This means that in order to access their sites without this warning, you need not only ...


1

Directory Traversal is an HTTP exploit which allows attackers to access restricted directories and execute commands outside of the web server's root directory. I'll help you with an example on this. In web applications with dynamic pages, input is usually received from browsers through GET or POST request methods. Here is an example of a GET HTTP ...


1

A directory traversal vulnerability is a vulnerability easy found through automation, so it's better to just run whichever tool you want to find if a site is vulnerable. However, if still you want to manual check whether or not a site is vulnerable, you need to identify a point where a file is loaded, i.e. test.php?file=myfile.txt and then guess the ...



Only top voted, non community-wiki answers of a minimum length are eligible