Target => https://www.utcluj.ro/
Vuln type: Host Header Injection
Passwd file:
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/bin/sh
bin:x:2:2:bin:/bin:/bin/sh
sys:x:3:3:sys:/dev:/bin/sh
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/bin/sh
man:x:6:12:man:/var/cache/man:/bin/sh
lp:x:7:7:lp:/var/spool/lpd:/bin/sh
mail:x:8:8:mail:/var/mail:/bin/sh
news:x:9:9:news:/var/spool/news:/bin/sh
uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh
proxy:x:13:13:proxy:/bin:/bin/sh
www-data:x:33:33:www-data:/var/www:/bin/sh
backup:x:34:34:backup:/var/backups:/bin/sh
list:x:38:38:Mailing...
duminică, 14 ianuarie 2018
joi, 11 ianuarie 2018
Hacking Any .webs.com website with Cross Site Scripting! (XSS)
Things Need While Preforming this attack:
• A VPN! Safety First!
• Knowledge of Cross Site Scripting
•A active .webs.com website
Step 1.
Sign up on your webs.com target website and make any username.
Step 2.
Go to "Edit Profile" or anywhere so you can change your name.
The...
SMS Verification Sites
http://receive-sms.com/
http://www.k7.net/
http://lleida.net/uk/
http://sms-verification.com/
http://receive-sms-online.com/
http://pinger.com
http://www.smsverification.co.uk
http://www.twilio.com/
https://www.tropo.com
http://www.textnow.com (by LittleFighter)
http://receivesmsonline.com/freephonenumber/
http://www.receivesmsonline.com/
http://...
The Most Advanced Surveillance System I Have Ever Seen! [Video]
The Most Advanced Surveillance System I Have Ever Seen! [Video]
This is quite possibly the most advanced
automatic surveillance system I've seen to date - it's incredible, if a
little unnerving!
Baz Edwards
Oct 16, 2017
...
Best Cryptocurrency Wallets
Best Cryptocurrency Wallets
Here are the best cryptocurrency wallets to keep your coins safe and secure.
Baz Edwards
Dec 18, 2017
Image credit: Zach Copley/Flickr
If you haven't noticed lately, Bitcoin, Ethereum,...
Url Redirects
Open Url Redirects
Open url redirects are simply urls like https://www.example.com/?go=https://www.google.com/,
which when visited will go from example.com -> google.com. Generally
they are classed as low impact, but can we get account takeover with...
