Канал: Musab Khan

DVWA Docker Deployment: Terraform EC2 Demo

DVWA Docker Deployment: Terraform EC2 Demo

Gitlab CVE-2023-7028 - Account Takeover - TryHackme Lab

Gitlab CVE-2023-7028 - Account Takeover - TryHackme Lab

Code For Beginners: Port Scanner with Socket Programming - Write Your First Python Code Today!

Code For Beginners: Port Scanner with Socket Programming - Write Your First Python Code Today!

Code For Beginners: DNS Enumeration Made Easy - Write Your First Python Code Today!

Code For Beginners: DNS Enumeration Made Easy - Write Your First Python Code Today!

Search and boycott all brands that support the Israeli occupation. https://bdnaash.com

Search and boycott all brands that support the Israeli occupation. https://bdnaash.com

Top 10 Data Breaches | Ask ChatGPT

Top 10 Data Breaches | Ask ChatGPT

Ethical Hacking Roadmap | Ask ChatGPT

Ethical Hacking Roadmap | Ask ChatGPT

Top 10 Ethical Hacking Domains 2022 | Ask ChatGPT

Top 10 Ethical Hacking Domains 2022 | Ask ChatGPT

Bug Bounty | Oneliner | Port Scan without Cloudflare

Bug Bounty | Oneliner | Port Scan without Cloudflare

Linux Privilege Escalation via Capabilities | Linux Post Exploitation | Technique#8

Linux Privilege Escalation via Capabilities | Linux Post Exploitation | Technique#8

Linux Privilege Escalation via Path Variable | Linux Post Exploitation | Technique#7

Linux Privilege Escalation via Path Variable | Linux Post Exploitation | Technique#7

Linux Privilege Escalation via systemctl | Abuse SUID | Linux Post Exploitation

Linux Privilege Escalation via systemctl | Abuse SUID | Linux Post Exploitation

Linux Privilege Escalation via Find | Abuse SUID | Linux Post Exploitation

Linux Privilege Escalation via Find | Abuse SUID | Linux Post Exploitation

Pivoting via SShuttle | Practical Demonstration | Ethical Hacking

Pivoting via SShuttle | Practical Demonstration | Ethical Hacking

Back To Nature - 2022 Tour (Experimental Vlog)

Back To Nature - 2022 Tour (Experimental Vlog)

CEH Practical Exam Review

CEH Practical Exam Review

Linux Privilege Escalation via NFS root squashing | Post Exploitation | Technique#6

Linux Privilege Escalation via NFS root squashing | Post Exploitation | Technique#6

eLearnSecurity Web Application Penetration Tester eXtreme | eWPTXv2 Exam Review 2022

eLearnSecurity Web Application Penetration Tester eXtreme | eWPTXv2 Exam Review 2022

Linux Privilege Escalation via Weak File Permission | Post Exploitation | Technique#5

Linux Privilege Escalation via Weak File Permission | Post Exploitation | Technique#5

Eid Mubarak

Eid Mubarak

Linux Privilege Escalation via LD_PRELOAD environment variable | Post Exploitation | Technique#4

Linux Privilege Escalation via LD_PRELOAD environment variable | Post Exploitation | Technique#4

Linux Privilege Escalation via Sudo Misconfiguration | Post Exploitation | Technique#3

Linux Privilege Escalation via Sudo Misconfiguration | Post Exploitation | Technique#3

Linux Privilege Escalation via Nano - Abuse SUID | Linux Post Exploitation | Technique#2

Linux Privilege Escalation via Nano - Abuse SUID | Linux Post Exploitation | Technique#2

Linux Privilege Escalation via Cronjob | Linux Post Exploitation | Technique#1

Linux Privilege Escalation via Cronjob | Linux Post Exploitation | Technique#1

HTTP Request in Javascript | XMLHttpRequest - Ajax

HTTP Request in Javascript | XMLHttpRequest - Ajax

CVE 2022 0847 (Dirty Pipe) | Privilege escalation | Linux Kernel 5.8

CVE 2022 0847 (Dirty Pipe) | Privilege escalation | Linux Kernel 5.8

Command execution via MS SQL | xp_cmdshell Method

Command execution via MS SQL | xp_cmdshell Method

Path traversal via Nginx Misconfiguration | Nginx off-by-slash

Path traversal via Nginx Misconfiguration | Nginx off-by-slash

CEH Practical Exam Review | Certified Ethical Hacker Practical

CEH Practical Exam Review | Certified Ethical Hacker Practical

Bug Bounty Tips & Tweets - Tip#6 | Firebase Misconfiguration

Bug Bounty Tips & Tweets - Tip#6 | Firebase Misconfiguration

Hacking Competition in Pakistan

Hacking Competition in Pakistan

Password reset poisoning via dangling markup | Host Header | Portswigger Academy

Password reset poisoning via dangling markup | Host Header | Portswigger Academy

Host Header Injection | Password Reset Poisoning | Detailed Explanation

Host Header Injection | Password Reset Poisoning | Detailed Explanation

File path traversal | validation of file extension with null byte bypass | Portswigger Labs

File path traversal | validation of file extension with null byte bypass | Portswigger Labs

File path traversal | validation of start of path | Portswigger labs

File path traversal | validation of start of path | Portswigger labs

File path traversal | traversal sequences stripped with superfluous URL-decode | Portswigger Labs

File path traversal | traversal sequences stripped with superfluous URL-decode | Portswigger Labs

File path traversal | traversal sequences stripped non-recursively | Portswigger Labs

File path traversal | traversal sequences stripped non-recursively | Portswigger Labs

File path traversal | traversal sequences blocked with absolute path bypass | PortSwigger Labs

File path traversal | traversal sequences blocked with absolute path bypass | PortSwigger Labs

File path traversal | simple case | PortSwigger Lab

File path traversal | simple case | PortSwigger Lab

Basic password reset poisoning | Host Header | Portswigger Academy

Basic password reset poisoning | Host Header | Portswigger Academy

Notify | Send Notifications to Discord Server | Bug Bounty Automation

Notify | Send Notifications to Discord Server | Bug Bounty Automation

How to setup DigitalOcean VPS | VPS Setup for Bug Hunting

How to setup DigitalOcean VPS | VPS Setup for Bug Hunting

Information disclosure | Portswigger

Information disclosure | Portswigger

Bug Bounty | XSS VIA Web Cache Poisoning | HackerOne

Bug Bounty | XSS VIA Web Cache Poisoning | HackerOne

PwnFunction | DOM XSS Challenge#5 | Ugandan Knuckles

PwnFunction | DOM XSS Challenge#5 | Ugandan Knuckles

BugBounty | CVE-2019-15043 - Grafana unauthenticated API | AT&T

BugBounty | CVE-2019-15043 - Grafana unauthenticated API | AT&T

Talk with Shahrukh Iqbal Mirza | Bug Bounty Hunter

Talk with Shahrukh Iqbal Mirza | Bug Bounty Hunter

Bug Bounty | Can't Find Bugs | Solution

Bug Bounty | Can't Find Bugs | Solution

Channel Discussion - English Content OR Urdu/Hindi Content - Decision

Channel Discussion - English Content OR Urdu/Hindi Content - Decision

Channel Discussion - English Content OR Urdu/Hindi Content

Channel Discussion - English Content OR Urdu/Hindi Content

Bug Bounty Tips & Tweets - Tip#5 | Hunt Open Redirects

Bug Bounty Tips & Tweets - Tip#5 | Hunt Open Redirects

PwnFunction | DOM XSS | Jefff - Solution

PwnFunction | DOM XSS | Jefff - Solution

PwnFunction | DOM XSS Challenge#1 - Solution

PwnFunction | DOM XSS Challenge#1 - Solution

DOM XSS | Detailed Explanation | document.referrer Property

DOM XSS | Detailed Explanation | document.referrer Property

DOM XSS | Detailed Explanation | location.hash Property

DOM XSS | Detailed Explanation | location.hash Property

Bug Bounty | Open Redirect - AT&T | HackerOne

Bug Bounty | Open Redirect - AT&T | HackerOne

Web Security | Web Cache Poisoning - Lab 2 | Practical Demonstration

Web Security | Web Cache Poisoning - Lab 2 | Practical Demonstration

FavFreak - Make your Recon Fast with Favicon

FavFreak - Make your Recon Fast with Favicon

2020 Milestone | 10K Challenge

2020 Milestone | 10K Challenge

Web Security | Web Cache Explanation | Practical Demonstration

Web Security | Web Cache Explanation | Practical Demonstration

Bug Bounty | Subdomain Takeover - University of Oxford | Self Hosted

Bug Bounty | Subdomain Takeover - University of Oxford | Self Hosted

Bug Bounty Tips & Tweets - Tip#4 | qsreplace - FFUF - Burpsuite | Low Hanging Fruits

Bug Bounty Tips & Tweets - Tip#4 | qsreplace - FFUF - Burpsuite | Low Hanging Fruits

Bug Bounty | Credentials exposed - MongoDB | HackerOne

Bug Bounty | Credentials exposed - MongoDB | HackerOne

Bug Bounty | CouchDB - No Authentication | Hackerone

Bug Bounty | CouchDB - No Authentication | Hackerone

Automate everything | Masscan + Nmap | Metasploit Workspace

Automate everything | Masscan + Nmap | Metasploit Workspace

Bug Bounty | Basic Recon Automation | Part#3

Bug Bounty | Basic Recon Automation | Part#3

Bug Bounty | Basic Recon Automation | Part#2

Bug Bounty | Basic Recon Automation | Part#2

Bug Bounty | Basic Recon Automation | Part#1

Bug Bounty | Basic Recon Automation | Part#1

shuffleDNS - MassDNS wrapper | enumerate valid domains

shuffleDNS - MassDNS wrapper | enumerate valid domains

Bug Bounty | Mental Health & Gaming

Bug Bounty | Mental Health & Gaming

Bug Bounty Tips & Tweets - Tip#3 | Nuclei - Template Based Vulnerability Detection

Bug Bounty Tips & Tweets - Tip#3 | Nuclei - Template Based Vulnerability Detection

Bug Bounty Tips & Tweets - Tip#2 | Hunt XSS

Bug Bounty Tips & Tweets - Tip#2 | Hunt XSS

Bug Bounty Tips & Tweets - Tip#1 - Queries

Bug Bounty Tips & Tweets - Tip#1 - Queries

Bug Bounty Tips & Tweets - Tip#1

Bug Bounty Tips & Tweets - Tip#1

Sar | Vulnhub | OSCP LIKE VM

Sar | Vulnhub | OSCP LIKE VM

Basic PenTesting 1 | Vulnhub

Basic PenTesting 1 | Vulnhub

CVE-2007-1860 | Mod_jk Module | Double Decoding Technique

CVE-2007-1860 | Mod_jk Module | Double Decoding Technique

File upload with PhpMyAdmin

File upload with PhpMyAdmin

OWASP Amass - In-depth Asset Discovery tool

OWASP Amass - In-depth Asset Discovery tool

Apache Struts s2-052 | CVE-2017-9805 | Remote Code Execution

Apache Struts s2-052 | CVE-2017-9805 | Remote Code Execution

Bug Bounty | Header Injection - AT&T | Hackerone

Bug Bounty | Header Injection - AT&T | Hackerone

Eid Mubarak to everyone ;)

Eid Mubarak to everyone ;)

Bug Bounty Hunting Tools & Lazyrecon Setup over VPS

Bug Bounty Hunting Tools & Lazyrecon Setup over VPS

Bug Bounty | SMTP Injection + HTML Injection - AT&T | Hackerone

Bug Bounty | SMTP Injection + HTML Injection - AT&T | Hackerone

Bug Bounty | Blind SQL Injection - AT&T | Hackerone

Bug Bounty | Blind SQL Injection - AT&T | Hackerone

Beginners guide to TMUX

Beginners guide to TMUX

Justice for Dawood Butt | Hamza Ghani | Tiger Ghani The Rapstar

Justice for Dawood Butt | Hamza Ghani | Tiger Ghani The Rapstar

Massdns - A High-Performance DNS stub Resolver

Massdns - A High-Performance DNS stub Resolver

Masscan - Fastest Port Scanner

Masscan - Fastest Port Scanner

XSSHunter Setup For Blind XSS

XSSHunter Setup For Blind XSS

Assetfinder - Subdomain Enumeration Tool

Assetfinder - Subdomain Enumeration Tool

JSParser - Find Endpoints with javascript | Bug Hunting Tools

JSParser - Find Endpoints with javascript | Bug Hunting Tools

ffuf: Fast web fuzzer | Enumerate Directories and files

ffuf: Fast web fuzzer | Enumerate Directories and files

Deliver XSS with Request Smuggling

Deliver XSS with Request Smuggling

Exploit HTTP Request Smuggling

Exploit HTTP Request Smuggling

Node-Red - Remote Code Execution

Node-Red - Remote Code Execution

HackTheBox - Jerry

HackTheBox - Jerry

Mobile Snatched - A Sad Story

Mobile Snatched - A Sad Story

HackTheBox - Bounty - Privilege Escalation

HackTheBox - Bounty - Privilege Escalation

HackTheBox - Bounty

HackTheBox - Bounty

Download Files with CERTUTIL in windows

Download Files with CERTUTIL in windows

Web.config RCE

Web.config RCE

Automate Request Smuggling Attack with Burpsuite Extension - CL.TE & TE.CL

Automate Request Smuggling Attack with Burpsuite Extension - CL.TE & TE.CL

HTTP Request Smuggling - Basic CL.TE

HTTP Request Smuggling - Basic CL.TE

I'm on vacations

I'm on vacations

HackTheBox - Legacy

HackTheBox - Legacy

HackTheBox - Devel

HackTheBox - Devel

HackTheBox - Devel - Glimpse

HackTheBox - Devel - Glimpse

Hack The Box - Invite Code Challenge Solution

Hack The Box - Invite Code Challenge Solution

"Cyber Threats in Oil & Gas Industry" By SCSP - Students Feedback

"Cyber Threats in Oil & Gas Industry" By SCSP - Students Feedback

Server Side Template Injection

Server Side Template Injection

Hacking Labs | Vulnerable Applications For Practice

Hacking Labs | Vulnerable Applications For Practice

Curl Essentials

Curl Essentials

Kali Linux Undercover Mode

Kali Linux Undercover Mode

Skytower Walkthrough | Vulnhub CTF

Skytower Walkthrough | Vulnhub CTF

Ethical Hacker | Bug Bounty Hunter | Shahrukh Iqbal Mirza

Ethical Hacker | Bug Bounty Hunter | Shahrukh Iqbal Mirza

Bypass Firewall with Proxy - Skytower Demo

Bypass Firewall with Proxy - Skytower Demo

SUDO Security Policy Bypass Vulnerability - CVE-2019-14287 - Privilege Escalation via SUDO

SUDO Security Policy Bypass Vulnerability - CVE-2019-14287 - Privilege Escalation via SUDO

How to be a Hacker - Share Your Hacking Misconceptions

How to be a Hacker - Share Your Hacking Misconceptions

EyeWitness - take screenshots of websites

EyeWitness - take screenshots of websites

How to install GoLang & Httprobe

How to install GoLang & Httprobe

Node1 Walkthrough | Vulnhub CTF

Node1 Walkthrough | Vulnhub CTF

Linux Local Privilege Escalation - Node: 1 CTF Demo

Linux Local Privilege Escalation - Node: 1 CTF Demo

Certified Ethical Hacker - Thanks to Sir Ali Tabish

Certified Ethical Hacker - Thanks to Sir Ali Tabish

External XML Entity | Walkthrough | Vulnhub CTF

External XML Entity | Walkthrough | Vulnhub CTF

BlueKeep CVE-2019-0708 - Crashed Windows 7

BlueKeep CVE-2019-0708 - Crashed Windows 7

BlueKeep CVE-2019-0708 - Crashed Windows Server 2008 R2

BlueKeep CVE-2019-0708 - Crashed Windows Server 2008 R2

XXE - XML External Entity - Complete Tutorial

XXE - XML External Entity - Complete Tutorial

XML External Entity - XXE Demo

XML External Entity - XXE Demo

Webmin 1.920 Remote Code Execution

Webmin 1.920 Remote Code Execution

Nezuko Walkthrough | Vulnhub CTF

Nezuko Walkthrough | Vulnhub CTF

LFI TO RCE - Abusing SSH Logs

LFI TO RCE - Abusing SSH Logs

Thank You - 1K Subscribers :)

Thank You - 1K Subscribers :)

LFI TO RCE

LFI TO RCE

DNS Zone Transfer

DNS Zone Transfer

Burp Collaborator - How to use

Burp Collaborator - How to use

Eid ul Adha Mubarak

Eid ul Adha Mubarak

SSRF (Server Side Request Forgery)

SSRF (Server Side Request Forgery)

SSRF Blind - Demo

SSRF Blind - Demo

SSRF Generic - Demo

SSRF Generic - Demo

Webinar By SCSP - 4th August 2019 - Topic SSRF

Webinar By SCSP - 4th August 2019 - Topic SSRF

Linux Local Root Exploit - CVE-2019-13272

Linux Local Root Exploit - CVE-2019-13272

HACKING IS ALL ABOUT DEDICATION

HACKING IS ALL ABOUT DEDICATION

Brute Force Login Page with Hydra | Detailed Explanation

Brute Force Login Page with Hydra | Detailed Explanation

Wordpress Setup | Bitnami VM

Wordpress Setup | Bitnami VM

Wakanda-1 Walkthrough | Vulnhub CTF

Wakanda-1 Walkthrough | Vulnhub CTF

Proxychains Setup in Kali Linux - Stay Anonymous

Proxychains Setup in Kali Linux - Stay Anonymous

Openvas Vulnerability Analysis

Openvas Vulnerability Analysis

Openvas Complete Installation

Openvas Complete Installation

How To Secure Wi-Fi/Wireless Networks From Hackers

How To Secure Wi-Fi/Wireless Networks From Hackers

Beginners Guide to Port Forwarding

Beginners Guide to Port Forwarding

Remote File Inclusion | Explanation

Remote File Inclusion | Explanation

SMB (Server Message Block) - Misconfiguration | Port 445

SMB (Server Message Block) - Misconfiguration | Port 445

Lazy Sys Admin Walkthrough | Vulnhub CTF

Lazy Sys Admin Walkthrough | Vulnhub CTF

India vs Pakistan - Worldcup 2019 - Best will win

India vs Pakistan - Worldcup 2019 - Best will win

Eid Mubarak to you all - Spread Happiness

Eid Mubarak to you all - Spread Happiness

Nikto - Web Server Vulnerability Scanner

Nikto - Web Server Vulnerability Scanner

CTF Walkthrough | Unknowndevice64 Vulnhub | Boot-To-Root

CTF Walkthrough | Unknowndevice64 Vulnhub | Boot-To-Root

Web Dav/2 | Misconfiguration

Web Dav/2 | Misconfiguration

Google Dorking

Google Dorking

File Upload Vulnerability - Possible ways to Detect

File Upload Vulnerability - Possible ways to Detect

Crack Protected ZIP/RAR file Password

Crack Protected ZIP/RAR file Password

Content Discovery - DirSearch tool

Content Discovery - DirSearch tool

Tor Service | Tor Browser | Hide Identity

Tor Service | Tor Browser | Hide Identity

Web Server Testing - Open Ports & Services

Web Server Testing - Open Ports & Services

Shodan API Integration with Metasploit

Shodan API Integration with Metasploit

Netcat Tutorial - The Swiss Army Knife of Network Tools

Netcat Tutorial - The Swiss Army Knife of Network Tools

Find Sub-domains with Dmitry - Kali Linux

Find Sub-domains with Dmitry - Kali Linux

Nmap Tutorial - Urdu/Hindi

Nmap Tutorial - Urdu/Hindi

Foot-printing - Information Gathering tools & Usage

Foot-printing - Information Gathering tools & Usage

Information Gathering - Fingerprinting - Hindi/Urdu

Information Gathering - Fingerprinting - Hindi/Urdu

Web Crawler - Python

Web Crawler - Python

recon ng - Information Gathering

recon ng - Information Gathering

TheBookStore - Django - Python Project

TheBookStore - Django - Python Project

Python Project - Calculator

Python Project - Calculator