If you are submitting requests and are expecting an empty response body, you should still check your response headers to determine if the request was successful.
To search your response headers, you will need to add the “Search=Headers” into your web_reg_find function.
web_reg_find("Text/IC=HeaderSearch", "Search=Headers", LAST);
The different request methods OPTIONS, DELETE, PUT, HEADER typically return a valid response with an empty response body.
Common Ports
| Port Number | Service | Notes |
|---|---|---|
| 21 | FTP | |
| 22 | SSH | Encrypted |
| 23 | Telnet | |
| 25 | SMTP | |
| 53 | DNS | |
| 80 | HTTP | Web |
| 110 | POP3 | |
| 143 | IMAP4 | |
| 389 | LDAP | |
| 443 | HTTPS | Encrypted, Web |
| 465 | SMTP over SSL | Encrypted |
| 587 | SMTP | |
| 1433 | Microsoft SQL Server | Database |
| 1434 | Microsoft SQL Server | Database |
| 2082 | cPanel | |
| 2083 | cPanel over SSL | Encrypted |
| 2483 | Oracle DB | Database |
| 2484 | Oracle DB | Database |
| 3306 | MySQL | Database |
| 3389 | Terminal Server (RDP) | |
| 5432 | PostgreSQL | Database |
| 8080 | HTTP Proxy |
Address Resolution Protocol – Poisoning / Spoofing
How?
An attacker sends falsified ARP messages over the LAN, which results in the linking of an attacker’s MAC address with the IP address of a victim computer or server on the network.
Audience?
LAN network segments that use ARP
Impact?
MitM attacks (viewing non encrypted traffic, sessions, credentials etc.)
DoS attacks
Mitigation?
Static MAC addressing
ARP spoofing detection software
Packet filtering/inspection
Common Flags
-u URL
-p PARAMETER_TO_TEST
-v VERBOSE (1-6, default 1-Show info and warning messages)
–cookie=”document.cookie”
–level=LEVEL (1-5)
–risk=RISK (1-4)
–user-agent=”SQLMAP”
–headers=”HEADERS”
–technique=BEUSTQ (Boolean, Error, Union, Stacked, Time, Query Inline)
–dump DUMP DBMS database table entries
–dump-all DUMP all DBMS database table entries
–users
–passwords
–is-dba Determines if the current user is a DBA
Continue reading…
\xAC\xED\x00\x05sr is a magic number of Java serialisation
Disable DEP
bcdedit.exe /set {current} nx AlwaysOff
Enable DEP
bcdedit.exe /set {current} nx AlwaysOn
Disable UAC
C:\Windows\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f
Enable UAC
C:\Windows\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 1 /f
Disable Firewall:
Netsh Advfirewall set allprofiles state off
Enable Firewall:
Netsh Advfirewall set allprofiles state on
Check status of Firewall:
Netsh Advfirewall show allprofiles
Action completed. This event is triggered when the action to be performed has completed. However, the step may not have ended yet. For example, for steps related to the application, there might be additional network or DOM activity. Dispatched when the action defined in the step is completed.
Continue reading…
Test database connectivity using notepad on Windows systems
1. Navigate to any folder or desktop.
2. Create an empty text file with any file name.
3. Change the extension to .UDL
4. Double click the new file. A Data Link Properties window will appear allowing you to test database connections.
Continue reading…
Test SMTP connectivity via Telnet and send a test email
1. Open cmd prompt
2. Enter telnet
smtp.domain.com port (eg.
telnet smtp.hostname.com 25 )
Continue reading…
For VUGen versions 11.0 and below.
To properly use float variables, they need to be explicitly declared. Only integers can be used without the explicit declaration
Continue reading…