TryHackMe | Looking Glass Step through the looking glass. A sequel to the Wonderland challenge room.tryhackme.com This is a short guide for Looking Glass machine. Get the IP address of the machine and perform the nmap scan. Multiple ports are opened showing service Dropbear sshd (protocol 2.0) Lets ssh into one of them

TryHackMe | Wonderland Fall down the rabbit hole and enter wonderland.tryhackme.com This is a short guide for Wonderland machine. Get the IP address of the machine and perform the nmap scan. Port 80 is opened.

Cracking wifi password through a dictionary attack can only be successful if the password is listed in the wordlist that you are using. Even if you try brute-forcing the password, a complex password will take a lot of time. So it's better to get the password using the phishing technique…

This is part 2 of the Wi-Fi Hacking series. In this article, we will be going through the demonstration of attacking WPA-secured wifi. For this demonstration, we will be using Aircrack-ng suite tools. Disclaimer: This article is intended for educational and ethical purposes only. It should only be used on…

This is part 2 of the Wi-Fi Hacking series. In this article, we will be going through the demonstration of attacking WEP-secured wifi. For this demonstration, we will be using Aircrack-ng suite tools. Disclaimer: This article is intended for educational and ethical purposes only. It should only be used on…

Wireless networks have historically been considered less secure than wired networks. Different versions of security protocols have been developed to make it more secure, including WEP, WPA, WPA2, and WPA3. This article will provide an overview of each Wi-Fi security protocol and offer tips on safeguarding Wi-Fi networks. WEP (Wired Equivalent Privacy) — The first Wi-Fi Security Protocol Initially, WEP…

I was testing the target which had its web application and mobile application in scope. Let’s say the target is example.com Firstly, I tested its web application which had only one domain in its scope. …

While testing a website I found that the verify email endpoint was leaking the authorization tokens of any verified users by just passing their email as an input. As I can not disclose the website name let's say the website is example.com As the program had one domain in its…

This is just a self-note on different steps to perform while approaching a target. 1. Subdomain Enumeration Tools: Amass (amass enum -active -d domain.com -o amass-subdomain-result.txt) Assetfinder (assetfinder -subs-only domain.com | anew assetfinder-subdomain-result.txt) Subfinder (subfinder -d domain.com -o subfinder-subdomain-result.txt) Findomain (findomain -t domain.com -u findomain-subdomain-result.txt)