iExploit

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Apply for Membership

Top Posters

Who's Online (4)

Powered by Vanilla. Made with Bootstrap.
Looking to introduce yourself? Look no further, and click here! We also have IRC! [irc.evilzone.org #iexploit]
Just another guy asking suggestions for learning Web-Exploitation
  • mandi
    Posts: 207
    As the title says ,i am looking forward to build some strong base in learning Web-Application hacking and exploitation,

    For now i am not looking for advanced stuff such as understanding coding,playing inside xamp and wamp locally,

    I am just interested in understanding about the basics of those attacks
    and how it works? like that...

    for now i am looking specifickly to understand basics of the following,
    just basics because once i understood the basics of these attacks,

    1)sql
    2)blind sqli
    3)Directory traversal attacks
    4)xss
    5)CSRF
    6)basics of WAF
    7)bacis working operation of shells
    8)log-in authentication bypass
    9)working of WebApplication firewalls and how it is implemented..

    I know for sql and blind sqli i can find lot of materials on here and also on hackforums,but my concern is they are mostly looking forward to attack the site instead of focusing on the basic operations of it works..

    So please give me some advice/guidance based on your personal experience,...

    That is why i asked here,instead of searching for articles and e-books my-self,Because i know the worth of "experience"....
  • MCP_01
    Posts: 18
    There are two very useful tools to explore, identify and then leverage web-applications.

    Those are:

    w3af - The web application attack and audit framework

    http://w3af.sourceforge.net/

    Web-Securify

    http://www.websecurify.com/

    They both focus on the application's and offer various methods of attack, be it reverse shells if possible or fuzzing!
  • Xin
    Posts: 3,251
    I am developping some elearning slides on these subjects in great detail but im afraid you will have to wait until they are done, until then google it there pretty well documented
    Xin
  • mandi
    Posts: 207 

    I am developping some elearning slides on these subjects in great detail but im afraid you will have to wait until they are done, until then google it there pretty well documented


    Thanks bro,i can wait,for now i am focusing less on the attack vectors,i am much more interested in understanding about the fundamentals of the attacks,As a intermediate solution if you got any nice articles,e-books for understanding those stuff,please update here :)


    There are two very useful tools to explore, identify and then leverage web-applications.

    Those are:

    w3af - The web application attack and audit framework

    http://w3af.sourceforge.net/

    Web-Securify

    http://www.websecurify.com/

    They both focus on the application's and offer various methods of attack, be it reverse shells if possible or fuzzing!



    Thanks bro,If you good any more nice articles for understanding the basic operations of those attack vectors please let me know...

    hope you will...
  • MCP_01
    Posts: 18
    If your looking to get the low down grasp of how they work, the User Guide is always the best place to start ;)

    http://w3af.sourceforge.net/documentati ... sGuide.pdf

    I run it pretty much in the GTK mode (graphical) mainly because I am lazy when it comes to using the command line. :D

    My main project at the moment is rebuilding a decrepit old Sun UltraSparc, I swapped the motherboard, plugged in a very old VGA monitor and had no graphics, then presumed that must be because of the newer motherboard, so then stripped the whole shebang, re-installed the old motherboard, then narrowed it down to the monitor being so F***ing old thats why I had no visual output. Screamed, tore out a few chunks of hair and after having then found a newer monitor to be working am now working on installing FatDog64. Complete with SFS (secure filing system).

    Damn thing is so old, but it has a duel core IIi Sabre CPU and now boasts 640MB of Ram at all of its whopping 333Mhz.

    The cool thing about these old IIi chips is the later III chips had a problem that caused Sun to recall most of them due to a serious error but the Architecture is mainly RISK, so it runs most 64Bit operating systems like Darwin, OSX & Gnu/Linux with little to no problems what-so-ever!

    Think of the Movie - Hackers and remember the words "RISK is GOOD!" I was astonished to learn it's Duel Core, seems Sun Microsystems have been ahead of the curve for a very long time. Not too shabby for something built in 1996. If anyone wants a spare motherboard, PCI bus or Sabre IIi CPU I have a few going begging & they work and it would be a shame to throw them in the bin when someone else can enjoy rebuilding one as well.

    I have spares pilling up, K8 AMD chips, Pentium 4 chips some hyper threading, some not, in total approx 8 PC's lovingly rebuilt and ready to go to a new home and at budget prices depending on what your looking for. Keep the potato chips I'll eat the pentium chips! PM me for prices and spex and we can do a dodgy dave deal down some seedy dark alleyway. Heh, sod paying PC world prices is my motto & it is truthfully amazing how much crap a single individual can accumulate from a lifetime of hoarding. Raid controllers, duel layer graphics cards (two monitors), Sound-cards, Motherboards, Zip Drives, DAT Drives, SCSI controllers, CPU's, HD's & RAM!
  • burn1337
    Posts: 37
    MCP - I completely know what you mean about a lifetime of hoarding... I have so much crap, yet so little places to put it all... I probably have more computer components then I care to count lol...
    As for RISK, well of course it is good. And yes Sun Microsystems have always been on top; hence why they can offer so much free stuff and still keep thousands employed lol... Also RISK was originally designed around 64 and 128 bit systems. The first 64 bit processor was made back in the late 60's and I believe the first 128 bit processor was made in the late 70's or early 80's.
    I am curious if you have thought about installing Solaris on your system though...

    Mandi - For your whole list, personally no one thing can truly help you with this... I say this cause if you really want to exploit something; you first have to know how it works... You want to know about sql injections; learn sql. You want to learn XSS exploits; learn javascript, networking, and so forth. You want to learn firewalls; learn iptables, ipchains, networking, protocols, ect.. I haven't looked at the links provided by MCP, but I have also been hacking since shortly after his Sabre was made... I program in over a dozen and a half languages...
    Outside of learning those things first... After that it's all about your recon...
    "Mind, body, heart, and soul; when all work as one, this is control." - myself
Add a Comment