Vulnerability Scanning

hello everyone today i am gonna mention about vulnerability Discovery/Scanning mehtods and tools which one is the most populer or free and you will see how to do it simply. but before we start i need to say preliminary informations about my case. I assume we are normal users in the network or IT manager […]

PentesterLab XSS Solutions and How to Use Beef

Cross-site Scripting (XSS) is a client-side code injection attack. There 3 types of XSS. 1-Reflected XSS 2-Stored XSS 3- DOM XSS We can execute malicious javascript code which is stealing cookie or redirecting victim anywhere. Example1 In Example1, the first thing I tried is injecting <a> tag. I saw that the input is directly printed. […]

PentesterLab Command Injections

Hello, in this article I’m gonna show you command injection vulnerability. I’ll be using PentesterLab for this. You can download it here. Let’s get started. So what is the command injection? According to Owasp : Command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via […]

HOW TO FIX UPDATE AND UPGRADE ERROR ON KALI

When you first start kali machine may not take any fail or error about update and upgrade. If you have follow instructions. 1- Check your network connection.Make sure whether connected “Nat network” or not. 2- Open terminal and write this command “leafpad etc/apt/sources.list”. It may not work because you are not empty directory. if you […]