Looking into the login field, we are given the username, password and a request password section but we have no clue about the username probably we must have done a bit of ohSINT. so lets try inputting a random username and password to get a clue about the "Page source". Right-click and head to "View Page Source", looking through the codes we found a email value email2 set to the default admin email account "admin@defendtheweb.net"

but we cant interacting with the code from the page source so lets head back to the site and set the the admin account we found if we could get something fishy with the access. Cool! nothing interesting. we have to look into the "Inspect Element" from your browser to analyze and interact with the codes further.

Heading straight to the Request password line of code then back to the "Inspect Element", we found the same email2 value,please pay attention to the assigned value for that specific field.

Look like the value for “email2” is set to the default admin email account “admin@defendtheweb.net.” Try editing the HTML code with your chosen random email in the the value field of the "Inspect Element" then type in the same email the field and submit the request.

Once you submit the request, you should receive the user credentials.

Copy and paste them into the username and password field. Boom!! Pretty easy right?.

Note: Developers, This challenge just shows a tip of how your source code is a key for hackers to locate and access databases, as well as your intellectual property and using Code Access Security, ensure that your code operates in a variety of sandboxes without affecting its integrity. Validate all users and inputs. If the program works with money and important storage, user validation must have several clearances. Injection attacks will be prevented by validating data from all sources. Therefore ensure to perform a code review about your software before publishing it.

.NAME:Sublist3r .Profile: tryhackme.comDescription:Learn how to find subdomains with Sublist3r!

• Task 1: Intro

As you begin this room, read the disclaimer and how the tool is been used first before proceeding, No rocket science here...lol

Lets begin:

Sublist3r is a fantastic python script that allows us to perform quick and easy recon against our target, discovering various subdomains associated with the websites/domains in scope.

Resource used: .Sublist3r tool (https://github.com/aboul3la/Sublist3r) .pip python3

• Task 2: Installation

So you are asked to install Sublist3r in the opt directory, you will need to have Python 3.4.x (or higher) or Python 2.7.x installed. We'll be using Python 3 commands. if sure you have it firstly. Now copy the Github repository for Sublist3r, you will be installing it the opt directory, The standard directory for optional package installation on any linux distro you have.

Firstly, lets change to our opt directory: cd /opt

Cone the Sublist3r repository into opt using "git clone": git clone https://github.com/aboul3la/Sublist3r

.Move to the Sublist3r directory, you just created: use command to see the directory then cd Sublist3er.

Finally, install the requirements for running Sublist3r: pip3 install -r requirements.txt

• Task 3: Switchboard

Sublist3r has a number of switches that we can use to do everything from setting our target domain to changing which engine to use for searching. You can access this via running Sublist3r with only the help switch: -h (python3 sublist3r.py -h)

You could see an example of how it is used in a website like google.com

Use the Sublist3r help command to get the switches/option

• Task 4: Scans away!

Time to scan, let's run Sublit3r against a target company domain and learn about some common domains! You can also run this via the recon tool at dnsdumpster or you can also just download my results from running sublist3r.

Choose your choice but I personally would suggest go for the download if you dont know how to use dnsdumpster for recon!

Let's run sublist3r now against nbc.com, a fairly large American news company. Run this now with the command: Run python3 sublist3r.py -d nbc.com -o sub-output-nbc.txt

Look through the dns record results you have and pay close attention

.Once that completes open up your results and take a look through them. Email domains are almost always interesting and typically have an email portal (usually Outlook) located at them. Which subdomain is likely the email portal? mail

.Administrative control panels should never be exposed to the internet! Which subdomain is exposed that shouldn't be? admin

.Company blogs can sometimes reveal information about internal activities, which subdomain has the company blog at it? blog

.Development sites are often vulnerable to information disclosure or full-blown attacks. Two developer sites are exposed, which one is associated directly with web development? dev-www

.Customer and employee help desk portals can often reveal internal nomenclature and other potentially sensitive information, which dns record might be a helpdesk portal? help

.Single sign-on is a feature commonly used in corporate domains, which dns record is directly associated with this feature? Include both parts of this subdomain separated by a period.sslologin.stg

Lastly this needs some google dorking, we were told "NBC produced a popular sitcom about typical office work environment" check out what is "the office" about nbc.com in google.

.One last one for fun. NBC produced a popular sitcom about typical office work environment, which dns record might be associated with this show? office-words

Good recon mate!!

Hope its helps someone out there...Cheers

Although it really sounds harmful logging into your social media accounts ,checking on news feeds or reading through your emails or even mostly checking through your bank account using this networks are chances to be RISKY.

Briefly explaining about public WI-FI, what do you think are the risk of using them.

RISKS OF USING THEM

.MAN IN THE MIDDLE ATTACKS(MITM attack):

This is one of the most common threats happening in this network. If not familiar with this term..dont worry. A Man-In-The-Middle attack is when an attacker positions him/herself in an active connection between you and the Public WI-FI(tho not only for WI-FI attacks) either to impersonate one of the parties making it look like a normal active and uninterrupted connections is still undergoing.

"INSERTING THEMSELVES IN THE MIDDLE OF THE ATTACK”

So don’t believe you are secured please!!.

.Unencrypted Networks:

Encryption involves that the connection between Device A and B are private. Also means that the messages that are sent between your computer and wireless router/device are in the form of a “secret code” so that they cannot be read to anyone who doesn’t have the key to decipher the code. Wireless router encryptions mostly are by default turned off but inviting an IT pro should make it enabled.

"THERE IS NO SURE WAY TO TELL IF THIS HAS HAPPENED”

.Malicious Hotspots:

An hotspot created by cybercriminals are often used to gain access and control of victims sensitive information…wondering how they create such? Lets assume you are in a shopping mall with a name(CRYSTAL MALL) as usual their hotspot automatically on, you intend to connect to the WI-FI, there is a possibility you may think you are selecting the correct one, clicking on “CRYSTALL MALL WI-FI” but you haven’t. Instead you have gotten connected to a malicious hotspot thereby allowing the malicious hacker gain control over your sensitive information.

"TRICKING VICTIMS INTO CONNECTING TO WHAT THEY THINK IS LEGITIMATE”

.SNOOPING & SNIFFING:

WI-FI snooping and sniffing is what it sounds like(cunning & inhale) data being transmitted over a network. cybercriminals can automate certain software to assist them with eavesdropping on a WI-FI signals. This technique can allow them to access EVERYTHING that you may have doing online ,either viewing whole screen webpages you have visited to being able to capture your login credentials or even being able to hijack your accounts…sounds scarcely right?(Its not new this days).

"CAPTURING YOUR VISITED WEBPAGES AND INFO”

.Malware Distribution:

Malware is an acronym for “Malicious Software”. As the name implies, software which has been designed to operate in a harmful and undesirable manner. Security Vulnerabilities are also ways that attackers can slip malware onto your computer without your knowledge. Which are usually found in an operating system or software program. Attackers can exploit this weakness by manipulating codes to target a specific vulnerability and inject the malware onto your device.

"EVEN YOUR ANTIVIRUS MIGHT NOT SAVE YOU”

So whats the big point? AVOID THEM AT ALL COST AND BE PRIVACY CONSCIOUS.

HACKER'S ROADMAP:

➤**Learn Hacking Manifesto: ** Firstly,Understand that hacking is a big game, we believe in freedom and mutual responsibility and been a great one, you have to be outstanding having the attitude to be curious and creative makes you a better one. Hackers take a special delight in solving problems, sharpening their skills and exercising their intelligence.Thus its requires hard work(Key to success), if even you tend to be a malicious one bring the world to a pause, you are destined to read endlessly and practice what you have learnt. So work when you get the chance because unlike other pros, cyber security evolves so fast as whatever you’re taught today maybe less useful tomorrow. From time to time, you’ve to put much effort into learning the latest strategies, technologies, new vulnerabilities and exploitation techniques discovered.

"THE WORLD IS FULL OF FASCINATING PROBLEMS WAITING TO BE SOLVED”

➤Learn to Program: This sounds essential as for every hacker, you need to be able to use different programming languages depending on what are their uses. Hackers are problem solver and tool builders, learning how to program will help you implement solutions to problems.

Writing programs as a hacker will you to automate many tasks which would usually take lots of time to complete.

Writing program can also help you identify and exploit programming errors in applications that you will be targeting. No need to reinvest the wheel all the time, there are numbers of open source programs that are readily usable. You can customize the already existing applications and add your methods to suit your needs.

"THE USEFULNESS OF THIS LANG DEPENDS ON YOUR SCENARIO"

➤Learn UNIX: While you cant be an ethical hacker without understanding UNIX. For this reason, the hacker culture today is pretty strongly UNIX-centered. There are many types of UNIX-like operating systems, the most popular being Linux. Download any Linux distribution of your choice in the internet. For ethical hacking, I strongly recommend KALI LINUX and ParrotOS

"PICK A DISTRO"

➤RUN Virtual Machines(VMs): When you’re going to be doing penetration testing or hacking=related testing. It is necessary to build a lab because you cannot experiment on a live system. Therefore, you need a virtual environment known as “Virtual Machine”. For Beginners, I suggest sticking to VirtualBox or VMware . They are both simple to install and run.

Maybe be wondering why you need virtual machine? YES, you do need it and for several reason-the important reason is you need to stay within laws. You must practice your hacking-related skills in a legal way. Therefore you should run all your test virtually, In an artificial-built in system without compromising or attacking your main system. Secondly it protects you from malicious attacks to the main system, you can browse the web safely without thinking to harm your system.

Remember “There is possibility that during testing with a tool you could break the virtual operating system and not your live system”. Thus knowing the weakness of these OS and targeting them systematically helps.

"RUN MUTIPLE VMs IF YOU WISH"

➤**Learn Networking Fundamentals: ** A wide knowledge of networking is important for learning to perform ethical hacking. Data travels through many layers. Once an ethical hacker understands how there layers woks, they can understand the movement of data and therefore track and block data or retrieve data. So network security is extremely important to ethical hackers.

.TCP/IP and UDP Protocols, EMI to exploit the vulnerability of the www

.Subnet,LAN,WAN and VPN.

.Networking commands to do an http request needs to be on your fingertips.

"THIS IS ESSENTIAL IN ANY CYBERSECURITY FIELD"

➤**Learn Cryptography: ** This is the practice and study of techniques that are used for secure communication in the presence of third parties. Cryptography is heavily used in SSL based internet communication. This is one of the most essentials in all because it enables hackers to crack hashes, cipher text and secured algorithms

.Understand how SSL works and its cryptography in keeping SSL secure

This determines algorithms are used for cryptography key generation, digital signing, verification to protect data privacy, web browsing on the internet and confidential communications such as credit card transactions and email.

"TO TRANSFORM MESSAGES IN WAYS THAT ARE HARD TO DECIPHER"

.Read About: -

"ENCRYPTION ALGORITHMS AND WHY THEY ARE DIFFICULT TO DECRYPT".

Its is important to understand what these theoretical vulnerabilities and defenses look like in real-world applications. So, you should practice hacking and defending.

➤Participate in open-source Projects,CTF(Capture The Flag) Platforms. Bug bounties also a great way to practice.

HackerOne and Bugcrowd are two of the biggest platforms, with a wide variety of clients.

➤Contribute your vulnerability findings to global vulnerability database.

➤Pick a program related to your chosen field of expertise and hack away! actual targets instead of stimulated ones like CTFs. so it will be a lot harder, but a lot more realistic.

➤Promote Valuable Information Another characteristic of a good hacker is that he must be able to collect and filter useful and interesting information into web pages or documents, such as Frequently Asked Questions (FAQs) lists, and make those available to all. Those who maintain technical FAQs are respected at the same level as the open-source authors.

➤Helps in keeping the Organization Working Popular hacking culture is run by Volunteers who do some very important but unglamorous tasks, such as administering mailing lists, moderating newsgroups, developing RFCs, and other technical standards. Doers of these jobs earns a lot of respect as these are huge time consumer and is not as much fun as playing with codes.

LASTLY FOR NOW:

EXPERIMENT! EXPERIMENT!! EXPERIMENT!!

.Document The Progress .Consider a backup before any experiments

.Start small and have check-pt

I guess this article has made an impart to you?Alright

HAPPY HACKING!

.NAME:Web Fundamentals .Profile: tryhackme.com.Diffculty: Easy .Description: Learn how the web works!

• Task 1: Introduction and objectives:

This room is designed as a basic intro to how the web works.

"We'll cover HTTP requests and responses, web servers, cookies and then put them all to use in a mini Capture the Flag at the end". That is the mission of this room so get your brain and hands ready for this. I wont explain deeply on what it's all about, you should have learnt them in the room...only guide you into getting your answers. Lets continue.

WELL EXPLANATORY ENOUGH!!

• Task 2: How do we load websites?

  

NOTE: Tho in getting your answers to this questions, read through the sub topic "Loading some content" in the task.Done?

• Task 3: More HTTP - Verbs and request formats:

Not getting it?

1)Post is the "verb" used for a login because

2)GET is the "verb" used to see your bank balance once you're logged in because

3)No,The body of a GET request does not matter because...Mostly be Ignored

4)Hmm...in getting the answer for this, we need to do some research about this "I'm a Teapot" status code and we dont have an idea about it, look through the Hint if you wish but lets check it out in our browser, In mine its looks like this:

lets check it out and we got our answer:

5)Status code will you get if you need to authenticate to access some content, and you're unauthenticated?...hmm using our current mozilla page we can get our answer, look left to your screen, we have something talking about authentication Lets check it out:

So after reading through i found something,hope you did too?

Try out the status code..Done? Good job!

• Task 4:Cookies,tasty!

Dont forget to check out the link for extra info tho.

• Task 5:Mini CTF:

After learning about Curl and how to use it in making both GET and POST requests,Time to get hands dirty!! we were told that their is a web server running in MACHINE_IP:PORT,check it out in your browser, you should get something like this:

1)Make a GET request to the web server with path /ctf/get: using the format:

curl http://<MACHINE_IP<port>/ctf/get You should get your flag:

2)Make a POST request with the body "flag_please" to /ctf/post: using the format:

curl -X POST -d http://<MACHINE_IP>:<PORT>/ctf/post

Note: -d stands for "HTTP POST data"

You should get a flag:

3)Make a GET request to /ctf/getcookie and check the cookie the server gives you: using this format:

curl http://<MACHINE_IP>:<PORT>/ctf/getcookie -c -

Get the flag:

Also Note: -c - flag is to retrieve the cookie.

And Finally:

4)Set a cookie with name "flagpls" and value "flagpls" in your devtools (or with curl!) and make a GET request to /ctf/sendcookie using this format:

curl -b "body=value" http://<MACHINE_IP>:<PORT>/ctf/sendcookie

FLAG:

Take Note: -b is "Body of the value"

THATS IT WELL DONE!!

Hope this helps someone out there...Cheers