+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: Advanced Methods (/Thread-Advanced-Methods)
RE: Advanced Methods - Reiko - 11-27-2014
I don't think you know what you're asking for. That's the problem here.
I'm not going to give you a fish. I'm going to tell you to teach yourself how to fish.
RE: Advanced Methods - blackhatcat - 11-27-2014
(11-27-2014, 07:08 PM)Takedown Wrote: *facepalm that's not what I was asking for. This forum is fucking stupid.
Thank you for that, I haven't laughed this hard at something here in a while.
Spoiler:
![[Image: 39a.gif]](http://i0.kym-cdn.com/photos/images/newsfeed/000/550/009/39a.gif)
RE: Advanced Methods - Eclipse - 11-27-2014
(11-27-2014, 07:08 PM)Takedown Wrote: *facepalm that's not what I was asking for. This forum is fucking stupid.
Your intelligence, or lack thereof, is truly astounding...
RE: Advanced Methods - Nebulous - 11-27-2014
(11-27-2014, 07:08 PM)Takedown Wrote: *facepalm that's not what I was asking for. This forum is fucking stupid.
So you come on a forum asking for advenced web heking methods then when someone gives you an answer you call it fucking stupid? You clearly have no fucking clue what you're asking for.
RE: Advanced Methods - Ryle - 11-30-2014
(11-27-2014, 07:08 PM)Takedown Wrote: *facepalm that's not what I was asking for. This forum is fucking stupid.
You're fucking stupid.
RE: Advanced Methods - dotz - 12-12-2014
Get funky!
"blackhatcat" damn bro
RE: Advanced Methods - W0rM - 12-26-2014
i think that guy is looking for some advanced movies like stuff.. where you just insanely type shit on your keyboard and hack the entire nsa within seconds.. tell him about that!
RE: Advanced Methods - phyrrus9 - 12-26-2014
(11-27-2014, 07:08 PM)Takedown Wrote: *facepalm that's not what I was asking for. This forum is fucking stupid.
Right, you want us to do all of the work for you. See once you get into the advanced things, there isnt a pretty little button to do it for you. You get to spend weeks building a payload for an exploit that took you a year to find only to figure out that the injection vector itself is flawed. Then go back to the drawing board. Yes, this is the SHAttered dreams story.
Please be more specific. 'advanced' to me is not advanced to most of the people on this forum. Advanced to me is next to godly for some of you guys. (though I have seen some really impressive things from some of the members).
Specifics help me determine on a scale of 0 (skiddly) to 10 (yeah, you're not ever getting here, Mel) of what level of 'advanced' you're on.
Isn't it nice that his username is the title of the Hackers sequel movie?
Kill Hannah made a pretty nice song that got used in it.
RE: Advanced Methods - p.u.r.e.m.i.n.d - 02-23-2015
Lol gives me good laughs just like old dayzzzz
RE: Advanced Methods - Misha- - 02-23-2015
Here's some stuff to look into.
Spoiler:
Trapdoor permutations
tweakable encryption
deterministic encryption: SIV and wide PRP
RoR patching
CBC padding attacks
attacking non-atomic decryption
diffie-hellman protocol attacks
the merkle-damgard paradigm
elgamal public-key system
Mass Assignment Abuse
XSLT processor remote inclusion
server-side javascript injection
security middleware office: netscape suite
lotus notes/domino
security middleware: sap interconnections
subIP: atm
frame relay
VLANs
802.11b
LDAP Injection
Server-side Includes Injection - X
Structured Query Language Injection - X
Clickjacking - X
Dangling Pointers
FTP Bounce Attack
Symbolic Links
Server-side Javascript Injection (SSJS)
HTTP Verb Tampering
HTTP Parameter Pollution
UMTS
MPLS
DSL
ARINC 429
protocols such as: sqlnet
net8
tuxedo
encina
corba
smb/cifs
JCryption
VoIP (sip h323)
SOAP
infrastructure: PKI
SOC
intrusion detection
802.1X
javascript prototype
ext core and mootools
ext js or dhtmlx
Cross Site Tracing - X
Cross Site Content Forgery - X
XSS mixed with CSRF (XSRF) - X
Cross Site Referral Forgery - X
Davies' attack
meet-in-the-middle attack
man-in-the-middle - X
birthday attack
supply chain attack
hybrid and preliminary attacks
collision attacks
jit spraying
pop3 sniffing
pivoting
java signed applet & irb shells
toggle-case attack
side-channel attacks
time monitoring
sp/dp analysis
high-order dpa attack
differential fault analysis
truncated differential cryptanalysis
Jingle BOFs
Jingle ROPs
Nessus/OpenVAS wrapper for ike-scan
DEPS – Precise Heap Spray on Firefox and IE10
Heap Layout Visualization with mona.py and WinDBG Root Cause Analysis – Memory Corruption Vulnerabilities
WoW64 Egghunter
DEP/ASLR bypass with msvcr71.dll and mona.py
ROP retn+offset and impact on stack setup
Exploiting Ken Ward Zipper : Taking advantage of payload conversion
Bypassing Stack Cookies
SafeSeh
SEHOP
HW DEP and ASLR
Reversing Vectored Exception Handling (VEH)
ARP Amplification
Hidden SSID's And ARP
Cracking Clientless
Kleptograpy
Cryptovirology
Subliminal/Covert/Newton/Oracle channels
Heuristic Bias Matching
Uniform Sampling
Security of Phi-Hiding PIR
Deniable Encryptions
RNG Biasing Trojan Horses
Key Escrow
PKCS SETUP attacks
Schnorr Signature Algorithm
Pointcheval-Stern algorithm biasing
Security of ElGamal
Linear Fault Analyses
Exortion of cryptoviruses
VRRP/HSRP/DHCP and dynamic ARP inspection DAI
VTP protocols and STP hotspots
tweakable encryption
deterministic encryption: SIV and wide PRP
RoR patching
CBC padding attacks
attacking non-atomic decryption
diffie-hellman protocol attacks
the merkle-damgard paradigm
elgamal public-key system
Mass Assignment Abuse
XSLT processor remote inclusion
server-side javascript injection
security middleware office: netscape suite
lotus notes/domino
security middleware: sap interconnections
subIP: atm
frame relay
VLANs
802.11b
LDAP Injection
Server-side Includes Injection - X
Structured Query Language Injection - X
Clickjacking - X
Dangling Pointers
FTP Bounce Attack
Symbolic Links
Server-side Javascript Injection (SSJS)
HTTP Verb Tampering
HTTP Parameter Pollution
UMTS
MPLS
DSL
ARINC 429
protocols such as: sqlnet
net8
tuxedo
encina
corba
smb/cifs
JCryption
VoIP (sip h323)
SOAP
infrastructure: PKI
SOC
intrusion detection
802.1X
javascript prototype
ext core and mootools
ext js or dhtmlx
Cross Site Tracing - X
Cross Site Content Forgery - X
XSS mixed with CSRF (XSRF) - X
Cross Site Referral Forgery - X
Davies' attack
meet-in-the-middle attack
man-in-the-middle - X
birthday attack
supply chain attack
hybrid and preliminary attacks
collision attacks
jit spraying
pop3 sniffing
pivoting
java signed applet & irb shells
toggle-case attack
side-channel attacks
time monitoring
sp/dp analysis
high-order dpa attack
differential fault analysis
truncated differential cryptanalysis
Jingle BOFs
Jingle ROPs
Nessus/OpenVAS wrapper for ike-scan
DEPS – Precise Heap Spray on Firefox and IE10
Heap Layout Visualization with mona.py and WinDBG Root Cause Analysis – Memory Corruption Vulnerabilities
WoW64 Egghunter
DEP/ASLR bypass with msvcr71.dll and mona.py
ROP retn+offset and impact on stack setup
Exploiting Ken Ward Zipper : Taking advantage of payload conversion
Bypassing Stack Cookies
SafeSeh
SEHOP
HW DEP and ASLR
Reversing Vectored Exception Handling (VEH)
ARP Amplification
Hidden SSID's And ARP
Cracking Clientless
Kleptograpy
Cryptovirology
Subliminal/Covert/Newton/Oracle channels
Heuristic Bias Matching
Uniform Sampling
Security of Phi-Hiding PIR
Deniable Encryptions
RNG Biasing Trojan Horses
Key Escrow
PKCS SETUP attacks
Schnorr Signature Algorithm
Pointcheval-Stern algorithm biasing
Security of ElGamal
Linear Fault Analyses
Exortion of cryptoviruses
VRRP/HSRP/DHCP and dynamic ARP inspection DAI
VTP protocols and STP hotspots