just_thinking: you can also use cain

BackTrack6: Yea, I actually used Cain to crack mine. Just asked. I will try Slyr0x's mthd.

Something has been popping up in my mind these few days. Since we are a bunch of Whites, with plenty of Blacks and Greys here (this can't be disputed), I was thinking if some hacking competitions can come up here just in order to help the neophytes grow. Competitions that involve some steganography, hex editing etc. Wetin una think?

Slyr0x:

Great idea bro. .I actually worked on some hacking challenges some years back (links below)

1st Pre-Lab here : https://www.nairaland.com/nigeria/topic-686713.0.html
2nd Pre-Lab here: https://www.nairaland.com/nigeria/topic-686904.0.html
3rd Pre-Lab here: https://www.nairaland.com/nigeria/topic-687033.0.html
4th Pre-Lab here: https://www.nairaland.com/nigeria/topic-689322.0.html
5th Pre-Lab here: https://www.nairaland.com/745579/hacking-challenge-cross-site-scripting

. .and another thread "Web Security Tutorials" that served as a discussion room for solving Enigma Group's hacking challenges. .

I discontinued the threads though as Seun was not too keen on having hacking threads on Nairaland 'cos of Google Ads. .Now that Google ads have been scrapped, we can push forward this great idea. .

There are 2 ways to which we could go about this :

1. Use an already built hacking challenge site like hackthissite, enigma group while Nairaland will serve as the discussion room
2. We can contribute and buy a dedicated server. .this way, we can have full control over the server as well as developing/uploading "vulnerable by design" OS. .i.e. rooting a linux box through some web application vulns etc

Great idea. .count me in. .

Slyr0x:

Great idea bro. .I actually worked on some hacking challenges some years back (links below)

1st Pre-Lab here : https://www.nairaland.com/nigeria/topic-686713.0.html
2nd Pre-Lab here: https://www.nairaland.com/nigeria/topic-686904.0.html
3rd Pre-Lab here: https://www.nairaland.com/nigeria/topic-687033.0.html
4th Pre-Lab here: https://www.nairaland.com/nigeria/topic-689322.0.html
5th Pre-Lab here: https://www.nairaland.com/745579/hacking-challenge-cross-site-scripting

. .and another thread "Web Security Tutorials" that served as a discussion room for solving Enigma Group's hacking challenges. .

I discontinued the threads though as Seun was not too keen on having hacking threads on Nairaland 'cos of Google Ads. .Now that Google ads have been scrapped, we can push forward this great idea. .

There are 2 ways to which we could go about this :

1. Use an already built hacking challenge site like hackthissite, enigma group while Nairaland will serve as the discussion room
2. We can contribute and buy a dedicated server. .this way, we can have full control over the server as well as developing/uploading "vulnerable by design" OS. .i.e. rooting a linux box through some web application vulns etc

Great idea. .count me in. .

Slyr0x:

Great idea bro. .I actually worked on some hacking challenges some years back (links below)

1st Pre-Lab here : https://www.nairaland.com/nigeria/topic-686713.0.html
2nd Pre-Lab here: https://www.nairaland.com/nigeria/topic-686904.0.html
3rd Pre-Lab here: https://www.nairaland.com/nigeria/topic-687033.0.html
4th Pre-Lab here: https://www.nairaland.com/nigeria/topic-689322.0.html
5th Pre-Lab here: https://www.nairaland.com/745579/hacking-challenge-cross-site-scripting

. .and another thread "Web Security Tutorials" that served as a discussion room for solving Enigma Group's hacking challenges. .

I discontinued the threads though as Seun was not too keen on having hacking threads on Nairaland 'cos of Google Ads. .Now that Google ads have been scrapped, we can push forward this great idea. .

There are 2 ways to which we could go about this :

1. Use an already built hacking challenge site like hackthissite, enigma group while Nairaland will serve as the discussion room
2. We can contribute and buy a dedicated server. .this way, we can have full control over the server as well as developing/uploading "vulnerable by design" OS. .i.e. rooting a linux box through some web application vulns etc

Great idea. .count me in. .

just_thinking: that is cool. am also in.

kiddie:
i knw little about this still into worms virus and ratting sooo big boss lets learn first

just_thinking: no knowledge is liitle cus am quite sure some ppl here might be interested in that "little" knowledge of urs

Slyr0x:

Great idea bro. .I actually worked on some hacking challenges some years back (links below)

1st Pre-Lab here : https://www.nairaland.com/nigeria/topic-686713.0.html
2nd Pre-Lab here: https://www.nairaland.com/nigeria/topic-686904.0.html
3rd Pre-Lab here: https://www.nairaland.com/nigeria/topic-687033.0.html
4th Pre-Lab here: https://www.nairaland.com/nigeria/topic-689322.0.html
5th Pre-Lab here: https://www.nairaland.com/745579/hacking-challenge-cross-site-scripting

. .and another thread "Web Security Tutorials" that served as a discussion room for solving Enigma Group's hacking challenges. .

I discontinued the threads though as Seun was not too keen on having hacking threads on Nairaland 'cos of Google Ads. .Now that Google ads have been scrapped, we can push forward this great idea. .

There are 2 ways to which we could go about this :

1. Use an already built hacking challenge site like hackthissite, enigma group while Nairaland will serve as the discussion room
2. We can contribute and buy a dedicated server. .this way, we can have full control over the server as well as developing/uploading "vulnerable by design" OS. .i.e. rooting a linux box through some web application vulns etc

Great idea. .count me in. .

kiddie: jst got this 1daful software kismet try it out

Slyr0x:
https://www.youtube.com/watch?v=sGKFBTS_M3o

Details

Hi guys,

I made a video detailing the exploitation of a blind SQL injection in a PHP based website and how an attacker can use it to gain access to the administration pages. Then, using this access, the attacker will be able to gain code execution on the server by using a configuration issue.


What you will learn?

=> Blind SQL injection exploitation using time-based exploitation
=> Hiding Webshell Backdoor Code in Image Files
=> Gaining code execution using a PHP webshell

www.google.org.ng for sale.

Lemme know what y'all think

Full Blogpost here : http://rotimiakinyele.com/from-sql-injection-to-shell-ii-detailed-walkthrough.jsp

BackTrack6: @don crust, if what u downloaded is a 64bit ubuntu, it definitely will not install on a 32bit system.
Ophcrack is a password cracking program that makes use of rainbow tables (cryptanalysis) to crack passwords. Do we know that with Cain & Abel, we can create our own rainbow tables to crack password with. It takes a long time to create one, but I think it's worth trying to create one. Mine's taking like forever to be 100% created.

BackTrack6: @don crust, if what u downloaded is a 64bit ubuntu, it definitely will not install on a 32bit system.
Ophcrack is a password cracking program that makes use of rainbow tables (cryptanalysis) to crack passwords. Do we know that with Cain & Abel, we can create our own rainbow tables to crack password with. It takes a long time to create one, but I think it's worth trying to create one. Mine's taking like forever to be 100% created.

just_thinking: av also tried creating rainbow table with cain but apart that it said it will take one month to complete the size itself is aroung 20Gb. i just wich i can get somene who av it and just copy it.

just_thinking: av also tried creating rainbow table with cain but apart that it said it will take one month to complete the size itself is aroung 20Gb. i just wich i can get somene who av it and just copy it.

BackTrack6:
why not try creating it urself. if u wait to get it from someone u may hv to wait for long sir. i think what mks the table so large is length of password we want to create d table to crack.

DonCrust: Just thinking I have a new copy of ubuntu but i'm getting error when installing it.

"This kernel requires an x86-64 CPU but only detect an i686 CPU..... I think the problem is because i downloaded 64bit version. Anyway, I've installed Lubuntu 12.04 and it works perfectly. What tools/software can you recommend?

just_thinking: i will try that. av u check the android network exloploitation toolkit

BackTrack6:
I don't have an android device, but I have downloaded the file for onward installation when I get an android.

Ehn, anybody wit idea on operating cgwin especially running kismet in it. Will appreciate.

djdroydakkount: Evening fellas an well done on dis tred so far, it's been very helpful. Pls I wanted to ask if i can setup a virtual lab on a system with 2gig RAM, till wen I'll b able 2 upgrade cos Have read it on a couple webpages aπϑ here too dat 3 is d recommended RAM siz.- just wanna know d consequence. Ŧђɑ̤̥̈̊п̥̥̲̣̣̣kƨ a lot. N.B: I already run ubuntu in vtualbox on windows 7.