Website Hacking / Penetration Testing Tutorial (1 Viewer)

[byLanet]

Hedef web sitesi hakında bilgi toplama sistem tespiti whois dns sorgulamaları zaafiyet keşifi shell exploit gibi konuları anlatan settir.Tavsiyem anlatılanları dikatlice dinledikten sonra bol bol pratik yapmanız olacaktır hadi öperum.

1. 1:Courses intro :
2. 
   
3. 
   
4. 2:Lab Overview Needed Software :
5. 
   
6. 
   
7. 3 :Installing Kali 2017 As a Virtual Machine Using a Ready Image :
8. 
   
9. 
   
10. 4 :Installing Metasploitable As a Virtual Machine :
11. 
    
12. 
    
13. 5 :Installing Windows As a Virtual Machine :
14. 
    
15. 
    
16. 6 : Basic Overview Of Kali Linux : https://youtu.be/X-huku_oV8s
17. 
    
18. 
    
19. 7 : The Linux Terminal Basic Linux Commands : https://youtu.be/uCDs46G9InY
20. 
    
21. 
    
22. 8: Configuring Metasploitable Lab Network Settings : https://youtu.be/1jSkUYNdC8Q
23. 
    
24. 
    
25. 9 : What is a Website : https://youtu.be/i4ZpHy4V3ow
26. 
    
27. 
    
28. 10 : How to hack a website : https://youtu.be/kpcd-9UmUR4
29. 
    
30. 
    
31. 11 : Gathering Information Using Whois Lookup : https://youtu.be/r3S-qedWWTY
32. 
    
33. 
    
34. 12 : Discovering Technologies Used On The Website : https://youtu.be/88CwmHxSA-o
35. 
    
36. 
    
37. 13 : Gathering Comprehensive DNS Information : https://youtu.be/eXtvWr3dQEo
38. 
    
39. 
    
40. 14 : Discovering Websites On The Same Server : https://youtu.be/C76I0rC-LBA
41. 
    
42. 
    
43. 15 : Discovering Subdomains : https://youtu.be/KKF1oAKa2eQ
44. 
    
45. 
    
46. 16 : Discovering Sensitive Files : https://youtu.be/rE_vBZwGr24
47. 
    
48. 
    
49. 17 : Analysing Discovered Files : https://youtu.be/YWZwYusgd0k
50. 
    
51. 
    
52. 18 : Maltego Discovering Servers Domains Files : https://youtu.be/oFC4ksbPfRA
53. 
    
54. 
    
55. 19 : Maltego Discovering Websites Hosting Provider Emails : https://youtu.be/19E114_m5sA
56. 
    
57. 
    
58. 20 : What are they And How To Discover Exploit Basic File Upload Vulnerabilites : https://youtu.be/ORv7pps9PLs
59. 
    
60. 
    
61. 21 : HTTP Requests GET POST : https://youtu.be/lI7hIP18wog
62. 
    
63. 
    
64. 22 : Intercepting HTTP Requests : https://youtu.be/wCGfhIY-ZOg
65. 
    
66. 
    
67. 23 : Exploiting Advanced File Upload Vulnerabilities : https://youtu.be/nbvCzkDi1DE
68. 
    
69. 
    
70. 24 :Exploiting More Advanced File Upload Vulnerabilities : https://youtu.be/8kn_PmqiRCg
71. 
    
72. 
    
73. 25 : Security Fixing File Upload Vulnerabilities : https://youtu.be/W1Sn4J0uapk
74. 
    
75. 
    
76. 26 : What are they How To Discover Exploit Basic Code Execution Vulnerabilities : https://youtu.be/ZRVF8hmkMQc
77. 
    
78. 
    
79. 27 : Exploiting Advanced Code Execution Vulnerabilities : https://youtu.be/zGv5IvAInSM
80. 
    
81. 
    
82. 28 : Security Fixing Code Execution Vulnerabilities : https://youtu.be/mAl2YHcT0W0
83. 
    
84. 
    
85. 29 : What are they And How To Discover Exploit Them : https://youtu.be/2V_JDOD_54o
86. 
    
87. 
    
88. 30 : Gaining Shell Access From LFI Vulnerabilities Method 1 : https://youtu.be/ARk1-1qLxac
89. 
    
90. 
    
91. 31 : Gaining Shell Access From LFI Vulnerabilities Method 2 : https://youtu.be/xO3oE3c1xQc
92. 
    
93. 
    
94. 32 : Remote File Inclusion Vulnerabilities Configuring PHP Settings : https://youtu.be/nTYzRY1Syw4
95. 
    
96. 
    
97. 33 : Remote File Inclusion Vulnerabilities Discovery Exploitat : https://youtu.be/IB9yhETxPc0
98. 
    
99. 
    
100. 34 : Exploiting Advanced Remote File Inclusion Vulnerabilities : https://youtu.be/d_RUgjdwuNU
101. 
     
102. 
     
103. 35 : Security Fixing File Inclusion Vulnerabilities : https://youtu.be/a5ox3ox2IDY
104. 
     
105. 
     
106. 36 : WHAT IS SQL : https://youtu.be/lkIvGAfN0v0
107. 
     
108. 
     
109. 37 : DANGER OF SQL INJECTION : https://youtu.be/JCV3yHi8EjM
110. 
     
111. 
     
112. 38 : Discovering SQL Injections In POST : https://youtu.be/TqWq63zODOs
113. 
     
114. 
     
115. 39 : Bypassing Logins Using SQL Injection Vulnerability : https://youtu.be/q6jFxlXHo1I
116. 
     
117. 
     
118. 40 : Bypassing More Secure Logins Using SQL Injections : https://youtu.be/AL2qWanCKNg
119. 
     
120. 
     
121. 41 : Security Preventing SQL Injections In Login Pages : https://youtu.be/CztR-2WO6Gk
122. 
     
123. 
     
124. 42 : Discovering SQL Injections in GET : https://youtu.be/V6BGHx0dY5k
125. 
     
126. 
     
127. 43 :Reading Database Information : https://youtu.be/8luZrWB-5N0
128. 
     
129. 
     
130. 44 : Finding Database Tables : https://youtu.be/jOgMRVgZEKo
131. 
     
132. 
     
133. 45 : Extracting Sensitive Data Such As Passwords : https://youtu.be/q-0NyD8e7jY
134. 
     
135. 
     
136. 
     
137. 46 : Discovering Exploiting Blind SQL Injections : https://youtu.be/SKnMNvdJHa0
138. 
     
139. 
     
140. 47 : Discovering a More Complicated SQL Injection : https://youtu.be/34oDkUBwXf0
141. 
     
142. 
     
143. 48 : Extracting Data passwords By Exploiting a More Difficult SQL Injection : https://youtu.be/MUUdn6jbdmk
144. 
     
145. 
     
146. 49 : Bypassing Security Accessing All Records : https://youtu.be/rXssSxtPY20
147. 
     
148. 
     
149. 50 : 50 Bypassing Filters : https://youtu.be/pekcgAtfR9s
150. 
     
151. 51 : Security Quick Fix To Prevent SQL Injections : https://youtu.be/fjC0VBTFA_s
152. 
     
153. 
     
154. 52 : Reading Writing Files On The Server Using SQL Injection Vulnerability : https://youtu.be/BMNGJkxI_eI
155. 
     
156. 
     
157. 53 : Getting A Reverse Shell Access Gaining Full Control Over The Target Web Server : https://youtu.be/g8QEoI-OyZU
158. 
     
159. 
     
160. 54: Discovering SQL Injections Extracting Data Using SQLmap : https://youtu.be/z00QFB3lLvc
161. 
     
162. 
     
163. 55 : Getting a Direct SQL Shell using SQLmap : https://youtu.be/BakhqQTp13s
164. 
     
165. 
     
166. 56 : Security The Right Way To Prevent SQL Injection : https://youtu.be/9-RY4gP8Ol0
167. 
     
168. 
     
169. 57 : Introduction What is XSS or Cross Site Scripting : https://youtu.be/-1FCDPpkKFo
170. 
     
171. 
     
172. 58 : Discovering Basic Reflected XSS : https://youtu.be/tNQIAmUYp9g
173. 
     
174. 
     
175. 59 : Discovering Advanced Reflected XSS : https://youtu.be/x-u_ZSj0Q90
176. 
     
177. 
     
178. 60 : Discovering An Even More Advanced Reflected XSS : https://youtu.be/72HSDicvkRU
179. 
     
180. 
     
181. 61 : Discovering Stored XSS : https://youtu.be/q32oN8wTj6w
182. 
     
183. 
     
184. 62 Discovering Advanced Stored XSS : https://youtu.be/-EVIPYAhypg
185. 
     
186. 
     
187. 63 : Discovering Dom Based XSS : https://youtu.be/_1nlk2lfSZE
188. 
     
189. 
     
190. 
     
191. 64 : Hooking Victims To BeEF Using Reflected XSS : https://youtu.be/auITaznqRBs
192. 
     
193. 
     
194. 
     
195. 65 : Hooking Victims To BeEF Using Stored XSS : https://youtu.be/_hjGEqqQ3BA
196. 
     
197. 
     
198. 66 : 66 BeEF Interacting With Hooked Victims : https://youtu.be/5Zm9z03BGec
199. 
     
200. 
     
201. 67 : BeEF Running Basic Commands On Victims : https://youtu.be/tXHz3qqo874
202. 
     
203. 
     
204. 68 : BeEF Stealing CredentialsPasswords Using A Fake Login Prompt : https://youtu.be/GsgYCBa1b7M
205. 
     
206. 
     
207. 69 : Installing Veil 3 : https://youtu.be/QadDcm8dKDA
208. 
     
209. 
     
210. 
     
211. 70 : Bonus Veil Overview Payloads Basics : https://youtu.be/_3Ve9FkVUwY
212. 
     
213. 
     
214. 
     
215. 71 : Bonus Generating An Undetectable Backdoor Using Veil 3 : https://youtu.be/cDl8XBLU5ds
216. 
     
217. 
     
218. 
     
219. 72 : Listening For Incoming Connections : https://youtu.be/u_XD-xHJ9B4
220. 
     
221. 
     
222. 
     
223. 73 : Using A Basic Deliver Method To Test The Backdoor Hack Windows 10 : https://youtu.be/qz0PK70BH-E
224. 
     
225. 
     
226. 
     
227. 74 : BeEF Gaining Full Control Over Windows Target : https://youtu.be/H1TsVWtnqXM
228. 
     
229. 
     
230. 
     
231. 75 :Security Fixing XSS Vulnerabilities : https://youtu.be/Qv4HhrgrEqQ
232. 
     
233. 
     
234. 
     
235. 76: Logging In As Admin Without a Password By Manipulating Cookies : https://youtu.be/dPETYGnUsbY
236. 
     
237. 
     
238. 
     
239. 77 : Discovering Cross Site Request Forgery Vulnerabilities CSRF : https://youtu.be/s57j6uxeLGc
240. 
     
241. 
     
242. 
     
243. 78 : Exploiting CSRF Vulnerabilities To Change Admin Password Using a HTML File : https://youtu.be/Ko-pSBnXKcs
244. 
     
245. 
     
246. 
     
247. 79 : Exploiting CSRF Vulnerabilities To Change Admin Password Using Link : https://youtu.be/8lt8ZNn1R7o
248. 
     
249. 
     
250. 
     
251. 80: Security The Right Way To Prevent CSRF Vulnerabilities : https://youtu.be/Q34823AXCAs
252. 
     
253. 
     
254. 
     
255. 81: What Are Brute Force Dictionary Attacks : https://youtu.be/yBlcMJt5wMU
256. 
     
257. 
     
258. 82: Creating a Wordlist : https://youtu.be/5MSQmSOpxl4
259. 
     
260. 
     
261. 83 :Launching a Wordlist Attack Guessing Login Password Using Hydra : https://youtu.be/ePftn8WV_A4
262. 
     
263. 
     
264. 84 Scanning Target Website For Vulnerabilities : https://youtu.be/vvXVYjV6ASo
265. 
     
266. 
     
267. 85 Analysing Scan Results : https://youtu.be/6EidEmEYBAo
268. 
     
269. 
     
270. 86 : Post Exploitation Introduction : https://youtu.be/jLAp7XWrFCM
271. 
     
272. 
     
273. 87 : Interacting With The Reverse Shell Access Obtained In Previous Lectures : https://youtu.be/WHMme0QiDVw
274. 
     
275. 
     
276. 
     
277. 88 : Escalating Reverse Shell Access To Weevely Shell : https://youtu.be/UEDxe60Avs4
278. 
     
279. 
     
280. 89 Weevely Basics Accessing Other Websites Running Shell Commands etc : https://youtu.be/E1Dd21WEW74
281. 
     
282. 
     
283. 90 : Bypassing Limited Privileges Executing Shell Commands : https://youtu.be/F2rOQBIgb5I
284. 
     
285. 
     
286. 91 : Downloading Files From Target Webserver : https://youtu.be/lyt3Gd6s6is
287. 
     
288. 
     
289. 92 : Uploading Files To Target Webserver : https://youtu.be/5qs2pdmNFXY
290. 
     
291. 
     
292. 93 : Getting a Reverse Connection From Weevely : https://youtu.be/y2DeFdhZVaw
293. 
     
294. 
     
295. 94 : Accessing The Database : https://youtu.be/_gpfcTutb4g

 

[Quaxer]

Eline sağlık.