Hiển thị các bài đăng có nhãn Ethical Hacking. Hiển thị tất cả bài đăng
Hiển thị các bài đăng có nhãn Ethical Hacking. Hiển thị tất cả bài đăng
Beating an SEH/VEH based Crack me through analysis

Beating an SEH/VEH based Crack me through analysis


In this article , I will try to show how to beat an advanced crackme that is using an interesting way to calculate the length and it’s generating exceptions to be dealt with in order to return values into 32-bit registers such as EAX register , the key to beat a crackme is deep analysis through what it does under the hood especially when it’s using mixed methods to confuse,stop or slow the
10 System Admin Tools to Help You Secure Your Network

10 System Admin Tools to Help You Secure Your Network




System admins are frequently bombarded with security concerns, requests, alerts, news items, “did you see this?!” emails, and more. Keeping up with all the aspects of network security can seem like an overwhelming task, but in this post we’re going to look at ten tools a system admin can use to help secure their network. Some you may be familiar with, like network security software, while
XSS attacks practical examples ~ Cross site Scripting Exploits

XSS attacks practical examples ~ Cross site Scripting Exploits

Hello BTS readers,  So far i explained about XSS attacks and risks of this vulnerability; also i have provided guide to setup your own pentesting lab(using dvwa) to practice XSS attacks.

Dvwa is limited to few xss methods.  You may curious to know more about the practical examples for the XSS attacks. eHackingNews will help you to know more about the latest XSS attacks.

The XSS Vulnerability
Complete Cross site Scripting(XSS) cheat sheets : Part 1

Complete Cross site Scripting(XSS) cheat sheets : Part 1


I am just providing this XSS Cheat sheet after collecting the exploit-codes from hackers' techniques and different sites especially http://ha.ckers.org/xss.html .  This is complete list of XSS cheat codes which will help you to test xss vulnerabilities ,useful for bypassing the filters.  If you have any different cheat codes , please send your code.

Basic XSS codes:
----------------------------
Complete Cross Site Scripting(XSS) Guide : Web Application Pen Testing

Complete Cross Site Scripting(XSS) Guide : Web Application Pen Testing




Hello BTS readers, Here is complete set of posts that explains everything about the Cross site scripting.  Still more articles are on the way, Stay tuned to BreakTheSec..!


Link To Tutorials:

Cross Site Scripting(XSS) Basics
DOM Based XSS attack
XSS Filter Bypass Techniques
Self-XSS (Cross Site Scripting) :Social Engineering Attack and Prevention 
XSS Cheat Sheet 
XSS Attacks Examples
Cookie
How to deface website with Cross Site Scripting ? : Complete XSS Tutorial

How to deface website with Cross Site Scripting ? : Complete XSS Tutorial


This is my third article about Cross site Scripting Tutorial. Last time, i explained how to do vulnerability test for XSS and some filter bypassing technique. Now let us see how a hacker deface a website with XSS vulnerability?

Never implement this technique. I am just explaining it for educational purpose only.
Defacing is one of the most common thing when the hacker found the vulnerability
Set up your own Lab for practicing SQL injection and XSS : Ethical Hacking

Set up your own Lab for practicing SQL injection and XSS : Ethical Hacking


I hope you learned about the Sql injection and XSS from BTS.  But you may curious to practice the SQLi and XSS attacks. we know that doing the attack on third-party website is crime.  So how can we do the practice? Here is the solution for you friends. Why shouldn't set up your own web application ? Yes, you can setup your own Pen Testing lab for practicing the XSS and SQLi vulnerabilities.