Thread It seems boring.

10 messages · 13:42–17:03

It seems boring. But it's still working and gives access to private information such as: - Full name - Address - Phone number - Other personal private information...

13:42

A
Aslekar
by the way, you can search for other databases and this bug may also exist on other databases on that site and obtain sensitive and useful information for a stronger and better penetration.
15:01
1. M
  Mohsen HN
  My recon capabilities are not enough, I used some automation tools like nmap and the other app with spartan icon, but both get Firewall banned in a few attempts, even if I set T to 0 and set everything to slow and stealth. Should I use multiple proxies for distributied scanning? Or there is a better way?
  15:42
  1. A
    Aslekar
    In fact, you will encounter waf/cdn and you should bypass it. In most cases, even if you reduce the scanning speed, it will not help.
    16:06
  2. A
    Aslekar
    read the rules for that site's domain carefully and if that address is in the waf/cdn domain, you should bypass it.
    16:08
  3. A
    Aslekar
    and you need to see what you are looking for and change your scan pattern to what you need. this way, you will be less likely to get blocked. you should not scan everything at once example: when you use nmap, you should not scan all the ports of that server, it will waste time and cause problems. scan only those ports that are useful and useful to you and avoid sensitive ports, it will cause blocking.
    16:13
  4. A
    Aslekar
    and always save port scanning for last, scan the entire site first and then scan the ports. In your scanning with tools, you should perform the scan like a human. however, some sites are very sensitive and yes, you should use a proxy or VPN to change your IP.
    👌1
    16:18
  5. A
    Aslekar
    Link
    click to show
    and you can also use the tool we developed to find the IP behind the CDN and it is very useful. https://t.me/BugCod3/1226
    16:31
    1. M
      Mohsen HN
      Thanks, it is not behind CDN, I am passed that. The thing is, there are so many ports and services running on it, including the one I have breached into, that I don't know which one to pick to focus on 😵‍💫 Therefore I tired to scan them all to pick one, yet never finished scanning. I will try to narrow down my search for the next time and only focus on one port.
      16:41
      1. A
        Aslekar
        web/ web application 80 443 8000 8008 8080 8081 8088 8443 8888 9000 9001 3000 3001 5000 5001 4200 7001 Database 3306 5432 27017 6379 9200 9300 11211 5984 system service & remote 22 23 3389 5900 5985 5986 445 139 network service & email 25 110 143 465 587 993 995 53 service Dev / Admin / Panel 2082 2083 2086 2087 2095 2096 10000 15672 25672 service API / Microservices / Cloud-ish 5000 5001 6000 7000 7001 8000 8080 8888 9000
        🙏1
        17:03