Welcome back two hacking a rise i am the laughing-man today we are going to hack a wordpress site so for this i mead a site for this tutorial coz we dont wanna get locked up now do we lol this tool comes installed on Kali Linux What is wpscan WPScan is a black box …
Category Archives: Web-app hacking
XSS DORKING
HERE’S A LIST OF XSS DORKS FOR GOOGLE XSS Dorks Code: inurl:”.php?cmd=” inurl:”.php?z=” inurl:”.php?q=” inurl:”.php?search=” inurl:”.php?query=” inurl:”.php?searchstring=” inurl:”.php?keyword=” inurl:”.php?file=” inurl:”.php?years=” inurl:”.php?txt=” inurl:”.php?tag=” inurl:”.php?max=” inurl:”.php?from=” inurl:”.php?author=” inurl:”.php?pass=” inurl:”.php?feedback=” inurl:”.php?mail=” inurl:”.php?cat=” inurl:”.php?vote=” inurl:search.php?q= inurl:com_feedpostold/feedpost.php?url= inurl:scrapbook.php?id= inurl:headersearch.php?sid= inurl:/poll/default.asp?catid= inurl:/search_results.php?search= xp : http://host/php/index.php?lang=%5BXSS%5D POP: http://host/php/index.php?lang=XSS BL4CKH4T G4N3$H GROUP
How to set Burp suite proxy
Burp suite is one the best tools for web app testing it has many options e.g SQL injection, Brute force fuzzing etc.. Burp suite is installed on Kali Linux so u don’t have to in stall to run in open terminal and type burp suite or go to applications in the left hand top corner …