Feb 5

What are “Strings” in Python?

Remember, we can create a string by entering text between two single or double quotation marks. Like this. — Remember, we can create a string by entering text between two single or double quotation marks. Like this. print("Python is fun") print('Always look on the bright side of life') Note: The delimiter (” or ‘) used for a string doesn’t affect how it behaves in any way. print('YOU DIDNT COME…

Python

2 min read

Feb 3

Noobs Guide to Data Types in Python Programming

In this blog, I am going to introduce the main data types that we use in Python. — In this blog, I am going to introduce the main data types that we use in Python. Each value in Python has a type. Text in quotes, no matter single or double, like “Hello World” is called a string. Integers Whole numbers are called integers. We can output integers with the…

Python

2 min read

Feb 2

Simple Operations using Python

So Python can spell, but can it count? Let’s talk about calculations. — So Python can spell, but can it count? Let’s talk about calculations. Doing a calculation in Python is simple, just enter it into the print statement. print(2 + 3) print(5 + 4 - 3) See the spaces around the plus and minus signs? The code will work without them —…

Python

2 min read

Jan 25

Cyborg Room Walkthrough Tryhackme

A box involving encrypted archives, source code analysis and more. — A box involving encrypted archives, source code analysis and more. Target IP: 10.10.250.161 Running Nmap Scan: nmap -sC -sV -T4 -p- 10.10.250.161 -vv root@ip-10–10–126–71:~# nmap -sC -sV -T4 -p 22,80 10.10.250.161 -vv Starting Nmap 7.60 ( https://nmap.org ) at 2022–01–20 17:43 GMT NSE: Loaded 146 scripts for scanning. NSE: Script Pre-scanning. NSE: Starting runlevel 1 (of 2) scan. Initiating…

Cybersecurity

4 min read

Jan 8

How to remove crap using ‘cut’ cmd from Httprobe output?

Default output from httprobe looks like; In certain conditions as ➖ — Default output from httprobe looks like; In certain conditions as ➖ cat results.txt | httprobe -c 100 -s -p https:443 > test.txt https://abc.com:443 https://xyz.com:443 Now what if we want only abc.com? See below: 1. To cut the last 4 characters from a subdomain Input.txt example: https://abc.com:443 to https://abc.com cat test.txt | rev | cut -c 5- | rev > last.txt

Bug Bounty

2 min read

How to remove crap using ‘cut’ cmd from Httprobe output?

Default output from httprobe looks like; In certain conditions as ➖

cat results.txt | httprobe -c 100 -s -p https:443 > test.txt

https://abc.com:443

https://xyz.com:443

Now what if we want only abc.com?

See below:

1. To cut the last 4 characters from a subdomain Input.txt

example: https://abc.com:443 to https://abc.com

cat test.txt | rev | cut -c 5- | rev > last.txt

Dec 15, 2021

How to use grep with regex like a Pro!

Hey, this is Rahul Bhichher! Ever felt exhausted while looking for a certain pattern, word, number or anything in a huge file? — Hey, this is Rahul Bhichher! Ever felt exhausted while looking for a certain pattern, word, number or anything in a huge file? Well don’t worry! This blog has got you all covered. Our focus will be the grep command in UNIX systems. along with the mighty ‘Regular Expressions’.

Cybersecurity

4 min read

Dec 11, 2021

Find & Hack Vulnerable Databases With Shodan!

Shodan detects devices that are connected to the internet at any given time, the location of those devices and their current users. And the… — Shodan detects devices that are connected to the internet at any given time, the location of those devices and their current users. And the same goes with vulnerable databases. Find Vulnerable databases using Shodan: product:MySQL — broad search for MySQL databases.

Shodan

1 min read

Dec 10, 2021

Port scanning responses in Nmap for noobs.

Ever wondered what open, close, filtered, unfiltered, open|filtered, close|filtered means during a port scans in Nmap, learn here. — Ever wondered what open, close, filtered, unfiltered, open|filtered, close|filtered means during a port scanning engagement in Nmap? Don’t worry this blog got you all covered. but first, let’s brush some basics. Penetration Testing consists of 5 steps, and Nmap plays an important role in the first two steps i.e. …

Nmap

3 min read

Oct 26, 2021

Beginners Guide to Learn SQL for SQLi attacks

Hi I am Rahul Bhichher, Contributing Security Analyst. As a beginner, I struggled with databases. and the main reason behind this was lack… — Hi I am Rahul Bhichher, Contributing Security Analyst. As a beginner, I struggled with databases. and the main reason behind this was lack of foundational knowledge. This post focuses on the very basics of SQL, so you can better understand what actually you are doing while performing SQL Injection attacks…

Cybersecurity

6 min read

Beginners Guide to Learn SQL for SQLi attacks

Oct 24, 2021

Command Injection -TryHackMe Walkthrough

Hey I am Rahul Bhichher, Contributing Security Analyst at SaferInternetProject. Today we are going to do some practical stuff on Command… — Hey I am Rahul Bhichher, Contributing Security Analyst at SaferInternetProject. Today we are going to do some practical stuff on Command Injection basically known as RCE in bug bounty world. https://tryhackme.com/room/oscommandinjection Go on to the task 5 and start your machine.

Tryhackme

1 min read