In this tutorial, Im just wanna talk about open redirect vulnerability and explain how hacker do information gathering to find that vulnerability and kind of ways which help hackers to exploit it. — What is Open Redirect ? Open redirect is a security flaw in an app or a web page that causes it to fail to properly authenticate URLs. An Open Redirect Vulnerability entails an attacker manipulating the user and redirecting them from one site to another site — which may be malicious.

I was trying to create hacking tool which can perform google hacking database automatically with python. But I had problem, when I create that hacking tool I understood most of the time google just block my ip because it recognize that there is bot which is trying to gather some…

In this tutorial, Im just wanna talk about another hacking tool which developed for penetration testers and specially bug bounty hunters. — Name : Hakrawler Fast golang web crawler for gathering URLs and JavaScript file locations. This is basically a simple implementation of the awesome Gocolly library. Features : Unlimited, fast web crawling for endpoint discovery Fuzzy matching for domain discovery

In this tutorial we have simple python script which will ask for url and use certain dork to search in google and finally show the result to the hacker. — I decided to create this python script mostly to find vulnerable url to sql injection vulnerability with google hacking database techniques. source : import os import requests from colorama import Fore import platform import urllib import pandas as pd

In this real life tutorial you will learn about parameter manipulating vulnerability which can make hackers to bypass otp and finally account takeover. — # this vulnerability is not exist in all of the websites in the internet, you just need to test … Real world victim : In this tutorial I will use real world vulnerable website which I upload tutorial of that to my Youtube channel. You just need to sign up into your target website.

In this tutorial you will learn how real hackers can find injection vulnerabilities like : — xss,sqli,html-injection,… In your target website First I need to explain a little bit about sqli. Sql injection will happen when some parameters can take sql quary from users and show response to them. So if you wanna hack your target website with sql injection attack first you need to find those parameters and scan it with automate vulnerability scanner tools like…

In this tutorial you will learn how you can hack any users in your vulnerable website without having their password to login. — First you need to sign up with your email address and give some fake information to your target website to finally sign up. Then you wanna make sure your target website is vulnerable to this vulnerability or not so you will find reset-password option to reset your password.

BSQLinjector is an easy to use Blind SQL Injection tool in Ruby, that uses blind methods to retrieve data from SQL databases. The download is below. The author recommends using the “--test” switch to clearly see how configured payload looks like before sending it to an application. What is Blind SQL Injection? Blind SQL Injection…

What is an SSRF? SSRF stands for Server-Side Request Forgery. It’s a vulnerability that allows a malicious user to cause the webserver to make an additional or edited HTTP request to the resource of the attacker’s choosing. Types of SSRF There are two types of SSRF vulnerability; the first is a regular SSRF where data is returned…