Wireless LAN Security and Penetration Testing Megaprimer

Wireless LAN Security and Penetration Testing Megaprimer

 

 

Source list : http://www.securitytube.net/groups?operation=view&groupId=9 

 

Credit :- www.securitytube.net

 

No.	Thumbnail	Video Title
1		Wireless Lan Security Megaprimer Part 1: Getting Started
2		Wireless Lan Security Megaprimer Part 2: Bands, Channels And Sniffing

SHORYUKEN

Aimed at easy and fast hacking, shoryuken is a linux bash tool designed to get full control of poorly configurated web applications with backend DBMS in the same machine. In its current version, it uses SQL injection techniques to own MYSQL and MSSQL hosts when they run as OS user ROOT with application user having file privileges (Linux MySQL) or as DB sysadmin user with DB running as OS user SYSTEM (Windows MSSQL). It is done using the same unique HTTP request, the shoryuken (that means "rising dragon punch" in japanese).

Takeover is pretty straightforward with a single request issued to open a "custom shell" on Windows using xp_cmdshell output redirected to a file at default web server root (c:\inetpub\wwwroot) and on Linux using a PHP one line web shell with sudo also at default web server root (/var/www).

The custom shell is provided using default HTTP port 80 (it will be always there) without need to run or download anything and/or relying on firewall's policy.

Shoryuken needs curl installed (Debian-like systems: apt-get install curl).

for more and download

- Saba

Ethical Hacking - Client-side attack

- Saba

Man In The Middle Attack - Ethical Hacking Example

Credit

-Saba

Hacking DNS - Video

Hacking DNS

Credit:- to original uploader

- Saba

Introduction to Phishing Email Hacking Attacks

What is DNS ? Dns Basics

Introduction to Hacking - Video- for Newbies

Credit :- to original up loader 

Basics of Ethical Hacking Part1

Hi Friends,
Many of my readers and followers emailed me that my post are targeting mid level professionals and more over.. tools based, and also suggested me to cover all the basic of ethical hacking(EH), so that every one can reap the benefit.. firstly I thank all the friends/readers who are encouraging me, which enables me to take out time and keep my interest alive in blogging.

I thought were to start about basics of EH ... a simple Google search can yield lot of results.. but what is the use until unless we understand the concepts of it. Video tutorials is the best way for all ( including lazy ppl like me) Then i have decided to make videos (hopefully), then i thought why to reinvent the wheel ?.... so let me search and get all the ethical hacking basic videos at one place. juts a thought now sure how far it works..

As part of it .. the first topic and known topic TCP IP

HOW TCP IP Works ?

Here is good animated video I found @ youtube , if you are newbie , you will love it..

- Saba

ClubHack’11 PreCon CTF – A WalkThru --- PPT ( Winner's Presentation)

How i-won-club hack-precon-ctf-v2

View more presentations from n|u - The Open Security Community

Google Images :- Search by Image

Now Question ,how is it useful ?

you can use this search for social engineering along with person pics.
you can find fake profile of any social networking site.
  
want to try ? interesting one would be... upload your own pic and see where else it has been used ;)


Saba

Sql injection Using Havij - Video

Credit:

Source :- http://secxplrd.blogspot.com/2011/11/sql-injection-using-havij.html

Tor Browser Bundle -browse Anonymously

 

Tor Browser Bundle

---

The Tor software protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, it prevents the sites you visit from

HOWTO : Blind SQL Injection _ Videos

Credit to : KFProdigy

This is KFProdigy's work but not mine. I re-post it for educational purpose only.

Sqlninja 0.2.6 Released - SQL Server injection & takeover tool

Sqlninja is a tool targeted to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end.
Its main goal is to provide a remote access on the vulnerable DB server, even in a very hostile environment. It should be used by penetration testers to help and automate the process of taking over a DB Server when a SQL Injection vulnerability has been discovered.
Have a look at the flash demo and then feel free to download. It is released under the GPLv3

Demo1 Video

Demo2 Video

Download

Source

How to find vulnerabilities and write exploits Video Tutorial - Vivek Ramachandran

Introduction

Memcpy Buffer Overflow Exploitation 

Strcpy Buffer Overflow Exploitation

Minishare Buffer Overflow Exploitation
 

FreeSSHD Buffer Overflow
 

SEH Basics
 

Overwrite SEH
 

Exploiting SEH
 

Guest Lecture
 

Binary Diffing Microsoft Patches

Source :- http://www.securitytube.net/

Aidsql: Sql Injection Penetration Testing Tool

Description: This is a video showing you how to effectively audit your website with aidsql.

Download aidSQL: http://www.insecurestuff.in/2011/02/aidsql-tools-to-find-vulnerable-spots.html

Source

Deeper Look At 35$ Aakash Tablet

Source

Credits For Video : Venture Beat