Ethical hacking and penetration testing

I, the author of Miloserdov.org (my name is Alexey), am looking for a job! Interested in both permanent employment and freelance. My main knowledge and skills are: Linux OS, Linux administration experience programming, experience in creating web services (PHP, Bash), including based on Linux utilities extensive experience in working with technical documentationRead More

This article is the next part of the Pupy guide. The first two parts: How to install Pupy Pupy manual: how to create a backdoor How to manage sessions The sessions command performs tasks related to session management: display a list of connected remote computers selecting a session to sendRead More

To generate a working payload, we need a clear understanding of how and what works, and before starting work you need to understand terms like: transports launchers listeners payloads Transport Transport is how (using what protocols and technologies) the server and the client transfer information between themselves. The following optionsRead More

Pupy is an open source tool for cross-platform remote administration (Windows, Linux, OSX, Android are supported as “clients”) and post-exploitation. Written mostly in Python. Simply say, this program will create backdoors for different OSs, perform actions to add persistence on remote systems, perform exploits to collect data, increase the privileges,Read More

The Social Mapper program is designed to search for profiles of people in social media. The algorithm of the program is that it searches for a large number of profiles based on the given data (for example, the name and surname of people), and then using the facial recognition technologyRead More

Kali Linux has Firefox ESR installed. The letters ESR mean Extended Support Release. If to reduce to the dry rest, then in fact Firefox ESR is a usual Firefox which loses new functions and is less often updated, though it receives security updates. From time to time, the version ofRead More

Table of contents 1. What is netcat for 2. Netcat Versions 3. How Ncat Works 4. How to connect to HTTP in Ncat 5. How to connect via SSL (HTTPS) to Ncat 6. Ncat listening mode 7. Running commands via ncat 8. How to connect with Ncat if a remote machine is behind NAT 9. How to makeRead More

In this article, we will discuss how to use the HostHunter program, which is able to determine hostnames for a large number of IP addresses. Although HostHunter is primarily designed to work with a large array of IP, you can, if desired, use it to search for hostnames of andRead More

If you have not read the first part, it is recommended to start with it. 9. Cameras Nowadays every company and organization has cameras: someone steals cookies in the rest room, employee do not work properly at their workplaces and so on. This organization is no exception. I had theRead More

On the one hand, this story is based on a real security audit case, that is, if I could talk about it without cuts, it would have resulted in a case from which new web application security auditors or webmasters and administrators could learn something new. But, as with anyRead More