mirror of
https://github.com/carlospolop/hacktricks
synced 2024-11-15 01:17:36 +00:00
GitBook: [#3033] No subject
This commit is contained in:
parent
626259908b
commit
bb39acf9e1
3 changed files with 9 additions and 10 deletions
|
@ -31,7 +31,7 @@ gcloud spanner databases list --instance [INSTANCE]
|
|||
gcloud spanner backups list --instance [INSTANCE]
|
||||
```
|
||||
|
||||
### [Cloud Bigtable](https://cloud.google.com/sdk/gcloud/reference/bigtable/) <a href="cloud-bigtable" id="cloud-bigtable"></a>
|
||||
### [Cloud Bigtable](https://cloud.google.com/sdk/gcloud/reference/bigtable/) <a href="#cloud-bigtable" id="cloud-bigtable"></a>
|
||||
|
||||
A fully managed, scalable NoSQL database service for large analytical and operational workloads with up to 99.999% availability. [Learn more](https://cloud.google.com/bigtable).
|
||||
|
||||
|
@ -89,3 +89,5 @@ bq query '<query>' #Query inside the dataset
|
|||
bq extract ds.table gs://mybucket/table.csv
|
||||
bq extract -m ds.model gs://mybucket/model
|
||||
```
|
||||
|
||||
Big query SQL Injection: [https://ozguralp.medium.com/bigquery-sql-injection-cheat-sheet-65ad70e11eac](https://ozguralp.medium.com/bigquery-sql-injection-cheat-sheet-65ad70e11eac)
|
||||
|
|
|
@ -220,10 +220,10 @@ Thanks to the ADB connection you can use **Drozer** and **Frida** inside the emu
|
|||
|
||||
You can use some **emulator** like:
|
||||
|
||||
* [**Android Studio**](https://developer.android.com/studio) (You can create **x86** and **arm** devices, and according to [**this** ](https://android-developers.googleblog.com/2020/03/run-arm-apps-on-android-emulator.html)**latest x86** versions **support ARM libraries** without needing an slow arm emulator).
|
||||
* [**Android Studio**](https://developer.android.com/studio) \*\*(\*\*You can create **x86** and **arm** devices, and according to [**this** ](https://android-developers.googleblog.com/2020/03/run-arm-apps-on-android-emulator.html)**latest x86** versions **support ARM libraries** without needing an slow arm emulator).
|
||||
* If you want to try to **install** an **image** and then you want to **delete it** you can do that on Windows:`C:\Users\<User>\AppData\Local\Android\sdk\system-images\` or Mac: `/Users/myeongsic/Library/Android/sdk/system-image`
|
||||
* This is the **main emulator I recommend to use and you can**[ **learn to set it up in this page**](avd-android-virtual-device.md).
|
||||
* [**Genymotion**](https://www.genymotion.com/fun-zone/) **(Free version:** Personal Edition, you need to create an account.)
|
||||
* [**Genymotion**](https://www.genymotion.com/fun-zone/) **(\_Free version:** Personal Edition\*\*, you need to\*\* create **an** account.\_)
|
||||
* [Nox](https://es.bignox.com) (Free, but it doesn't support Frida or Drozer).
|
||||
|
||||
{% hint style="info" %}
|
||||
|
|
|
@ -7,10 +7,7 @@ If you find a login page, here you can find some techniques to try to bypass it:
|
|||
* Check for **comments** inside the page (scroll down and to the right?)
|
||||
* Check if you can **directly access the restricted pages**
|
||||
* Check to **not send the parameters** (do not send any or only 1)
|
||||
* Check the **PHP comparisons error:** `user[]=a&pwd=b` , `user=a&pwd[]=b` , `user[]=a&pwd[]=b`
|
||||
* Check nodejs potential parsing error (read [**this**](https://flattsecurity.medium.com/finding-an-unseen-sql-injection-by-bypassing-escape-functions-in-mysqljs-mysql-90b27f6542b4)): `password[password]=1`
|
||||
* Nodejs will transform that payload to a query similar to the following one: `SELECT id, username, left(password, 8) AS snipped_password, email FROM accounts WHERE username='admin' AND`` `**`password=password=1`**`;` which makes the password bit to be always true.
|
||||
* Adding `"stringifyObjects":true` option when calling `mysql.createConnection` will eventually block all unexpected behaviours when `Object` is passed in the parameter.
|
||||
* Check the **PHP comparisons error:** _user\[]=a\&pwd=b_ , _user=a\&pwd\[]=b_ , _user\[]=a\&pwd\[]=b_
|
||||
* Check credentials:
|
||||
* [**Default credentials**](../../brute-force.md#default-credentials) of the technology/platform used
|
||||
* **Common combinations** (root, admin, password, name of the tech, default user with one of these passwords).
|
||||
|
@ -29,13 +26,13 @@ In the following page you can find a **custom list to try to bypass login** via
|
|||
|
||||
### No SQL Injection authentication bypass
|
||||
|
||||
[Here you can find several tricks to bypass the login via **No SQL Injections**](../nosql-injection.md#basic-authentication-bypass)**.**
|
||||
[Here you can find several tricks to bypass the login via **No SQL Injections.**](../nosql-injection.md#basic-authentication-bypass)****
|
||||
|
||||
As the NoSQL Injections requires to change the parameters value, you will need to test them manually.
|
||||
|
||||
### XPath Injection authentication bypass
|
||||
|
||||
[Here you can find several tricks to bypass the login via **XPath Injection.**](../xpath-injection.md#authentication-bypass)
|
||||
[Here you can find several tricks to bypass the login via **XPath Injection.**](../xpath-injection.md#authentication-bypass)****
|
||||
|
||||
```
|
||||
' or '1'='1
|
||||
|
@ -55,7 +52,7 @@ admin' or '1'='2
|
|||
|
||||
### LDAP Injection authentication bypass
|
||||
|
||||
[Here you can find several tricks to bypass the login via **LDAP Injection.**](../ldap-injection.md#login-bypass)
|
||||
[Here you can find several tricks to bypass the login via **LDAP Injection.**](../ldap-injection.md#login-bypass)****
|
||||
|
||||
```
|
||||
*
|
||||
|
|
Loading…
Reference in a new issue