Posts

CLOUD HACKING - key concepts

  https://www.niii.tech/ CLOUD HACKING - key concepts Virtualization Types os cloud computing: IaaS, PaaS, SaaS, IDaaS, FaaS, SECaaS, CaaS. Container is a package holding components of a single application and all its dependencies, relying on virtual isolation. Docker is the industry leader container management. Docker engine runs various Linux distributions and Windows Server OS. Kubernetes (K8) open source container (developed by Google and now with Cloud Native Computing Foundation). Docker rum i a SINGLE SYSTEM, and K8 runs across CLUSTERS. Deployments models: public, private, community, hybrid and multi. NIST released SP 500-292, NIST Cloud Computing Reference Architecture FedRAMP (Federal Risk and Authorization Management Program) is the regulatory effort regarding cloud computing.  PCI SSC Cloud Computing Guidelines published by the Cloud Special Interest Group PCI Security Standards Council. CSA (Cloud Security Alliance)  Virtualization introduces Hypervisor layer...

Mobile and IoT - key concepts

  https://www.niii.tech/ MOBILE and IoT https://owasp.org/www-project-mobile-top-10/ 2 majors mobile platforms:  Android (google) iOS (apple) Android and iOS have an  1) OS 2) middleware and  3) suite of built-in application (example: AI app Siri (woman’s voice) PERFORM SOME ACTION THATS GRANTS ADMINISTRATIVE (ROOT) ACCESS TO THE DEVICE: Rooting (Android): KingoRoot, TunesGo, OneClickRoot, MTK Droid Jailbreaking (iOS):  Cydia (cydiafree.com) Hexxa Plus (pangu8.com) Apricot (pangu8.com) Yuxigon (yuxigon.com) Techniques of Jailbreaking: 1) Untethered (kenel remain patched (jalbroken) after reboot) 2) Semi-tethered (reboot no longer retains  the patched kernel) 3) Tethered (reboot removes all jailbteaking patches, and may get stuck forever in a loop on start up) BYOD (Bring Your Onn Device) MDM (Mobile Device Management) goal controle enterprise mobiles . MDM solutions: 1) passcodes for unlocking 2) remote locking 3) remote wipe 4) root / jailbreak detection 5...

Connecting Wi-fi on Kali Linux

  https://www.niii.tech/ Kali Linux Terminal > sudo su > service NetworkManager status service NetworkManager restart apt-get update apt-get dist-upgrade reboot NOW WE INSTALL THE DRIVER !!!!! Terminal sudo su > cd Desktop > apt install git >  git clone https://github.com/TadakaSuryaTeja/BroadcomInstaller2021.git > ls > cd BroadcomInstaller2021 > ls > chmod +x Broadcom.sh > ls > ./Broadcom.sh 1) Install Wifi Driver [y/n] > y Kali reboot automaticaly … Login Password Search SSID wifi… Connect

WIRELESS NETWORKS - key concepts

  https://www.niii.tech/ WIRELESS NETWORK 802.11 series of standards is VERY IMPORTANT 802.11a  Speeds up to 54 Mbps 5 GHz range 802.11b 11 Mbps 2.4 GHz 802.11g 54 Mbps 2.4 GHz 802.11n over 100 Mbps Ranges in MIMO format between 2.4 GHz and 5 GHz 802.11i  Extension of the original 802.11 series with security mechanisms for WLAN 802.15.1 Bluetooh 802.15.4  Zigbee 802.16 Wireless metropolitan areas networks (WiMAX) Modulation: encoding method of choice in wireless networks (manipulation properties of a waveform) OFDM (Orthogonal Frequency-Division Multiplexing) and DSSS (Direct-Sequence Spread Spectrum) uses various pieces of a waveform to carry a signal. OFDM works  with several waveforms carrying messages back and forth and the TRANSMISSION MEDIA is divided into a series of FREQUENCY BANDS that do not overlap each other and EACH BANDS CAN CARRY A SEPARATE SIGNAL. DSSS COMBINES ALL AVAILABLE WAVEFORMS and the ENTIRE FRREQUENCY BANDWIDTH can be used for the delive...

SQL injection - Login and password for any website

https://www.niii.tech/ Login and password for any website or form: " or ""=" This is the same SQL statement: SELECT  *  FROM  Users  WHERE  Name = ""   or "" = ""   AND  Pass = ""   or   "" = "" https://www.w3schools.com/sql/sql_injection.asp

TOP critical security risk to web applications: BROKEN ACCESS CONTROL

https://www.niii.tech/ TOP critical security risk to web applications: BROKEN ACCESS CONTROL A01:2021 – Broken Access Control https://owasp.org/Top10/A01_2021-Broken_Access_Control/