"If Nobody sees it, it didn't Happen"
XSS stands for Cross-Site Scripting, which is one of the attacks type on the Websites. In this article, I will be using https://xss-game.appspot.com to demonstrate how you can check for XSS bugs in different input
Continue readingCross-Site Scripting (XSS) – The Bug Bounty Guide
Recently, while upgrading my virtual machine, I was stumbled upon Greyed-out Fit Guest Now option. This is pretty exhausting as it only shows the console window but not the full Guest view. I took the
Continue readingFixing VMware “Fit Guest Now” Feature in Kali-linux: Solved
Stack Overflow for Beginners: 1 is the overflow based machine. We have to exploit the Binaries in order to get to the next level. These binaries are owned by user who is a level above.
Pubg (PlayerUnknown’s Battlegrounds) is being played world wide now. So many users is proportional to so many error. I have been playing pubg for about a week now and faced the following problems: 1. The selected
Continue readingPubg Stuck on Loading Screen and Ping Error Solutions Android
Node CTF is available at: https://www.vulnhub.com/entry/node-1,252/ This Vulnerable machine Node is based on the new technologies and how we can hack into them. It uses Node Express server Json and hadoop. There are many ways to
This article is a guide to perform SQL Injection on the Base64 encoded Url parameters. These parameters are encoded so as to make the site injection proof but that is a big myth. Recently I
Continue readingSQL Injection on Base64 Encoded String Parameters
Overthewire Natas Level 25 – 26 is based on directory traversal. The code have many restrictions because it sanitizes the user input and makes it harder for us to get the password. Let’s see how
Continue readingOVERTHEWIRE NATAS SERIES: 25 – 26 LEVEL Walkthrough
Overthewire Natas 25 Level is based on strcmp() function vulnerability. Generally, strcmp() is used to compare two strings together, We need to generate some kind of error here so we can obtain the password for
Continue readingOVERTHEWIRE NATAS SERIES: 24 – 25 LEVEL Walkthrough
Overthewire natas level 23 – 24 is also based on PHP GET request parameter tampering. We have to carry out the injection in such a way that it fits both the conditions of the code.
Continue readingOVERTHEWIRE NATAS SERIES: 23 – 24 LEVEL Walkthrough
Overthewire natas level 22 – 23 is the easiest of all levels, We just have to send a GET request as “/?revelio” to reveal the admin password. This code for this level looks like this:
Continue readingOVERTHEWIRE NATAS SERIES: 22 – 23 LEVEL Walkthrough