VAPT Hacker

The latest version of iOS has a very strange bug. By sending a single telegu character of an Apple device including iPads, iMacs etc can lead to a crash in the OS. The receiving application weather it is Gmail, whatsapp or messaging app crashes on receiving the text. The reported character is To fix the bug, delete the conversation that has received that message. If you are unable to delete that, the only option left is to reset your iPhone by taking it into DFU mode. You can find the tutorial of it here. https://help.ifixit.com/article/108-dfu-restore Apple has fixed the bug in latest beta release of iOS 11.3. The bug doesn't affect telegram and skype. Apple has stated that the fix will be public soon. Follow us on Facebook:-  Facebook.com/VAPTHacker LinkedIn:-  https://www.linkedin.com/in/rohankalra97/ Twitter:-  https://twitter.com/rohankalra97

API Application Programming Interface aka API is a code that allows two different softwares to interact with each other. We will try to sniff Web API here. Web API are of mainly two types :- SOAP and REST. SOAP API contains only headers while REST API contains headers as well as body. Headers and body are used to send data to a server across the internet. SNIFFING If your APIs are insecure, a hacker can sniff them and modify it to cause damage to your server.  Fiddler is one of the software which allows us to sniff API. 1) Download fiddler from  https://www.telerik.com/download/fiddler  and install it in Kali or Windows. 2) Install Fiddler and run it as Admin. 3) You will see a screen like this 4) Open any Url on your browser. 5) You will see that Requests will be captured there. 6) You can modify the body and headers and spoof a request. 7) To spoof a request, we will be using a google chrome plugin "Postman". 8) You can download it from ...

SQL SQL is a database language which is designed for storing, retrieving and manipulating data stored in a database. SQL Injection If a SQL database is directly connected to the website, it can be manipulated to steal and modify the database. This happens after a user is able to inject a code in SQL server doing whatever he wants to do with the database. In a way, he gets the full control of it. 1)To understand SQL injection, we must understand SQL queries. 2) Say while logging a user 'Rohan' with password 'pass123', a sql query is sent as SELECT from users WHERE user='Rohan' and password='pass123'; 3)What if the query was SELECT from users WHERE user='Rohan' or '1'='1'; 4)The first user would be logged in. 5) We can do the same here, for example. 6) On entering  ' OR '1'='1' #   ,we get logged in as Jake, since he is the first user in the database. 7) Queries can further be...

Session Hijacking Session hijacking can be defined as impersonating and sending a request as a user other than yourself. In layman's language, it is similar to plane hijacking, where a terrorist takes control of the plane except that here the hacker takes control of the session. It can be done in many ways, the most common being stealing the cookies of a user. Procedure 1) Find the website which is vulnerable to XSS. Let us assume that a site abc.com is vulnerable to XSS. 2) Assume that when a search (which is vulnerable to XSS) is performed on the website, parameters are passed in the url in the format http://abc.com/?s=hello 3) Now we need to save the cookies of the user. 4) Copy the code from my repository at  https://github.com/rohankalra97/Session-Hijacking/blob/master/stealer.php  and save it as stealer.php 5) Replace the 5th line with the url which you want the user to be finally redirected to. 6) Create an empty file with name log.txt . 7) Now pu...

  Introduction Cross-Site Scripting (XSS) is a type of injection which allows users to run custom scripts on trusted website. On giving a url to the users, it might allow one to showcase a custom page on a trusted website or redirect a user, allowing him to steal his cookies and do session hijacking. Checking for cross site scripting 1) Download Firefox browser. This does not required Kali and can be tested in windows as well as Mac. 2)In Firefox, type about:config in url. 3) Search for browser.urlbar.filter.javascript . 4) Double click on it, to change the value to false. 5) Now open the website which you want to test. 6) Generally, XSS is present in search bars. 7) In search bar type <script>alert(1)</script> and press enter 8) If you see an alert box, then the site is vulnerable to cross site scripting. 9) If it doesn't work, you can try the cheat sheet at https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet 10) If none of t...

Metasploit The Metasploit Project is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development. It comes pre loaded in Kali linux. It is free and open source but some pro features require you to pay 2000$ to 30000$ per annum depending on the features that you require. VSFTPD VSFTPD is a GPL licensed FTP server for UNIX systems, including Linux. It is now secure and extremely fast. It supports IPv6 and SSL. We will exploit a vulnerability which was present in VSFTPD 2.3.4. Exploit 1) Run terminal in Kali and enter the command msfconsole 2) Incase you get an error , exit the metasploit and enter the command service postgresql start and the run the metasploit 3) You will see a screen like this 4) Now to search for exploit vsftpd, enter the command search vsftpd 5) Incase a screen like the one shown below is different from the one you got, your metasploit is extremely outda...

Information Wired Equivalent Privacy or WEP is a type of wifi protocol. Despite being vulnerable to many exploits over the internet, WEP is still the most used wifi protocol.  Introduced as part of the original 802.11 standard ratified in 1997, its intention was to provide data confidentiality comparable to that of a traditional wired network. Security WEP has been deprecated from the security point of view. This is due to the fact that it can be cracked within minutes and there are many exploits available for free on the internet. WEP is vulnerable because of relatively short IVs and keys that remain static. Aircrack-ng Aircrack- ng  is a complete suite of tools which comes pre-loaded in Kali  to assess WiFi network security.  It works with any wireless network interface controller whose driver supports raw monitoring mode and can sniff 802.11a, 802.11b and 802.11g traffic.  Testing your wifi With this tutorial, you can check if your wifi is v...