Monday, July 13, 2020

How to make a phone call without displaying our mobile number.

Hi friends today I will explain you how to call anyone without displaying our mobile number.


       First I will give you a link here click that link and install that application.

App link: https://play.google.com/store/apps/details?id=free.calling.app.wifi.phone.call

Open this app and at the top of your app you will be seeing tabs like call , credit, contact.

In that you have to select credit option. At the center of the top screen you will be having the spinning wheel there you will be having tap to start button. Click on that button then the wheel spins and you will getting some credits. You have do repeatedly so that you can get more credit points.
            Some times that wheel will not spin then don't worry.....! In the bottom of the spinning wheel right side there will be an icon like speedometer need to click that speedometer icon. Then I will display daily remaining limit pop up box..... Click get it button then it will spin automatically.

The call cost for one minute is 260 credit points.

You can call whatever number you want then it automatically displays a random mobile number and the connection established with that random number.


If you have any doubts regarding this please comment I will get back to you. 

Tuesday, June 9, 2020

How to check Methods in web Application vulnerability Assesment

Hi Friends  today I will explain you about how to check the Methods while performing the Web Application vulnerability Assessment using Burp Suite.



1) First setup proxy to your Browser and connect with burp.

2) Now intercept the request of your URL.

3) Send that Request to Repeater.

4) Now you have to Replace all the Methods that are available and check the response if you are getting 200 ok as response code then it means the server accepted if not rejected.


The Methods that should not be allowed or disabled in the Application are following.


1)PUT

2)DELETE

3)CONNECT

4)TRACE

If any of the above methods are enabled then it might be vulnerable.


If you want to know what all methods are enabled then you need to check with  OPTIONS  method that it will list all the methods that are enabled in the web server.


How to check the Arbitrary HTTP Methods:


use HEAD, JEFF and CATS sometimes it would be treated as a GET request if these methods are allowed then it is Vulnerable.

I hope this will be very useful to you Thankyou.  If you have any doubt you can comment me there I will reply you.

Saturday, May 16, 2020

Port Number || How to find the port number in windows.

What is a Port Number?

To put it simply, a port number is the means through which a specific message is identified when it’s forwarded to a server. Depending upon on the service type, it will either be associated with TCP or UDP port.

TCP vs. UDP

TCP stands for Transmission Control Protocol and sends the data after establishing a connection which makes it more reliable than UDP for data transfers. On the other hand, UDP stands for User Diagram Protocol and sends data packets connection-less which makes it lightweight and significantly faster than TCP.

How to Find Your Port Number?

Here, we’ll show you the steps to find the port number of your computer:

How to find the port number in Windows?

  1. Open Command Prompt by typing “Cmd” in the search box.
  2. Enter the “ipconfig” command.
  3. Now, type “netstat -a” command for a list of connections and port numbers.

How to find the port number in Mac?

  1. Open System Preferences by clicking on the Apple icon.
  2. Go to Network.
  3. Choose your network and then click Advanced.
  4. Select the Port Scan tab.
  5. Enter the IP address you want to scan.

What is the Difference between an IP Address and Port Number?

A computer network is made up of a collection of devices – such as routers, printers, laptops, and cameras – that are connected together for sharing data and resources.
Each device within the network has a unique numerical label allocate to it, known as the Internet Protocol (IP) address. It helps with two main functions:
  • Network or host identification
  • Location addressing
In contrast, a single device can have multiple processes running at any given time. The port number is what helps to identify those processes taking place in the device.

Wednesday, May 13, 2020

https://ctf.hacker101.com || CTF Hacker 101 || capture the flag in Hacker one

Hi friends today i will show you all the flags that i have submitted in Hacker 101 web site please  use the flags and try to submit...........It may work out but i am not Sure......Thank you..




The Below ones:

^FLAG^1d5248e44319d32358345d09b64ed75b80978ea989f195c659ea93a4bd76d2fd$FLAG$
^FLAG^e0705bcb806a49a14458dc6b6b1640d4662b053065115407aa605d4e0183f897$FLAG$
^FLAG^eb43b2fb83055b0718ac7716ea4eb13f04f8df6e87f27556c535ef5eb439bfab$FLAG$
^FLAG^d891594bc41ead4e4ea5949eff5f609e73f3843624a89cde34e003000802c052$FLAG$
^FLAG^ff950214ae4b43d19e00ded3b2fd88fa9d8bdf9df1687ca97bf3cfe0a3c0c636$FLAG$
^FLAG^b22e5c69f20e29fc2655df14efa5c27661df9bbabbdec2ad962c1728876f59b4$FLAG$



Reference videos:-

Monday, May 11, 2020

Temporary email for OTP By pass || Authentication

Hi users today i will tell you a good web site for email and OTP by pass Authentication :



This will be useful to all of you while creating the fake accounts and they will be valid only for temporary use.



The website link: https://temp-mail.org/en/

Clickjacking sample code

What is clickjacking

Clickjacking is an attack that tricks a user into clicking a webpage element which is invisible or disguised as another element. This can cause users to unwittingly download malware, visit malicious web pages, provide credentials or sensitive information, transfer money, or purchase products online.
Typically, clickjacking is performed by displaying an invisible page or HTML element, inside an iframe, on top of the page the user sees. The user believes they are clicking the visible page but in fact they are clicking an invisible element in the additional page transposed on top of it.
The invisible page could be a malicious page, or a legitimate page the user did not intend to visit – for example, a page on the user’s banking site that authorizes the transfer of money.
 
 
<html>
<head>
<title>Clickjack test page</title>
</head>
<body>
<p>Website is vulnerable to clickjacking!</p>
<iframe src="http://www.yoursite.com/sensitive-page" width="500" height="500"></iframe>
</body>
</html>

Top 10 Free AI Tools in 2024: Boost Your Productivity and Creativity

In today's rapidly evolving digital landscape, artificial intelligence (AI) has become an indispensable asset for professionals, creativ...