Loading video...

Video Failed to Load

Go Home

HBSQLI Automated Tool for Testing Header Based Blind SQL Injection. #infosec #pentesting #bugbounty

hack_git's profile picture

HackGit

53,883 subscribers

37,399 views • 3 years ago •via X (Twitter)

#infosec#pentesting#bugbounty
LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

🔐 Certificate Ripper A CLI tool to extract server certificates #cybersecurity #pentesting #bugbounty
0:12

🔐 Certificate Ripper A CLI tool to extract server certificates #cybersecurity #pentesting #bugbounty

HackGit

96,352 views • 2 years ago

Offensive Security Tool: SQLMutant SQLMutant is written by Chris Abou-Chabké from Black Hat Ethical Hacking and its a comprehensive SQL injection tool. It uses a variety of techniques to detect vulnerabilities, including pattern matching, error analysis, and timing attacks, ensuring that no stone is left unturned. In addition to its powerful features, SQLMutant also integrates with Waybackurls and Arjun, enabling it to find even more parameters and merge all results together. This integration is highly beneficial as it provides automated subdomain enumeration and SQL injection testing capabilities. Requirements: To use SQLMutant, you need to have the following tools installed: figlet & lolcat: pip install lolcat & apt-get install figlet Waybackurls : go install Arjun: pip install arjun SQLMap: git clone --depth 1 sqlmap-dev Installation git clone cd SQLMutant chmod +x ./SQLMutant.sh Read the full post: #sqli #sqlinjection #hacking #bugbounty #pentesting #infosec #informationsecurity #offensivesecurity #redteam
0:15

Offensive Security Tool: SQLMutant SQLMutant is written by Chris Abou-Chabké from Black Hat Ethical Hacking and its a comprehensive SQL injection tool. It uses a variety of techniques to detect vulnerabilities, including pattern matching, error analysis, and timing attacks, ensuring that no stone is left unturned. In addition to its powerful features, SQLMutant also integrates with Waybackurls and Arjun, enabling it to find even more parameters and merge all results together. This integration is highly beneficial as it provides automated subdomain enumeration and SQL injection testing capabilities. Requirements: To use SQLMutant, you need to have the following tools installed: figlet & lolcat: pip install lolcat & apt-get install figlet Waybackurls : go install Arjun: pip install arjun SQLMap: git clone --depth 1 sqlmap-dev Installation git clone cd SQLMutant chmod +x ./SQLMutant.sh Read the full post: #sqli #sqlinjection #hacking #bugbounty #pentesting #infosec #informationsecurity #offensivesecurity #redteam

X

42,587 views • 1 year ago

Fake-SMS A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy. #cybersecurity #infosec #pentesting
0:15

Fake-SMS A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy. #cybersecurity #infosec #pentesting

HackGit

227,159 views • 2 years ago

🚀 Google Recaptcha Solver A Python script to solve Google reCAPTCHA using the DrissionPage library. #cybersecurity #infosec #bugbounty
0:10

🚀 Google Recaptcha Solver A Python script to solve Google reCAPTCHA using the DrissionPage library. #cybersecurity #infosec #bugbounty

HackGit

32,691 views • 2 years ago

Offensive Security Tool: TerminatorZ TerminatorZ is developed by Chris Abou-Chabké from Black Hat Ethical Hacking and is an efficient web security tool designed to scan for potential vulnerabilities in your web applications. It uses a combination of advanced techniques and popular tools like 'waybackurls' and 'curl', to perform passive and quick scans, providing a rapid overview of potential issues. The results are displayed in an easy-to-read format in the terminal, with only the vulnerable findings saved for further investigation. 🟢New Version 2.0 Released! This update includes 8 NEW Proofs of Concept (POCs), bringing the total to 24 POCs, along with several other enhancements. ➡️New POCs: ◾File Upload Vulnerability ◾Command Injection ◾Host Header Injection ◾HTTP Parameter Pollution (HPP) ◾Clickjacking ◾CORS Misconfiguration ◾Sensitive Data Exposure ◾Session Fixation Read the post: Installation git clone cd TerminatorZ chmod +x ./TerminatorZ ⁠#securityassessments #pentesting #bugbounty #hacking #infosec #informationsecurity #cybersecurity #offensivesecurity #redteam
0:15

Offensive Security Tool: TerminatorZ TerminatorZ is developed by Chris Abou-Chabké from Black Hat Ethical Hacking and is an efficient web security tool designed to scan for potential vulnerabilities in your web applications. It uses a combination of advanced techniques and popular tools like 'waybackurls' and 'curl', to perform passive and quick scans, providing a rapid overview of potential issues. The results are displayed in an easy-to-read format in the terminal, with only the vulnerable findings saved for further investigation. 🟢New Version 2.0 Released! This update includes 8 NEW Proofs of Concept (POCs), bringing the total to 24 POCs, along with several other enhancements. ➡️New POCs: ◾File Upload Vulnerability ◾Command Injection ◾Host Header Injection ◾HTTP Parameter Pollution (HPP) ◾Clickjacking ◾CORS Misconfiguration ◾Sensitive Data Exposure ◾Session Fixation Read the post: Installation git clone cd TerminatorZ chmod +x ./TerminatorZ ⁠#securityassessments #pentesting #bugbounty #hacking #infosec #informationsecurity #cybersecurity #offensivesecurity #redteam

X

77,269 views • 1 year ago

One of the most basic ways to look for SQL injection vulns using Github Code Search 👇
0:14

One of the most basic ways to look for SQL injection vulns using Github Code Search 👇

Luke Stephens (hakluke)

115,069 views • 1 year ago

Race Condition + Host Header Injection + Redis(Cache)= Zero Click XSS The first attempts were not successful and the reflect was not observed, but using the RACE, I saw that my sampler is displayed for the rest of the users 🫥 I will publish it after permission. #BugBounty
0:17

Race Condition + Host Header Injection + Redis(Cache)= Zero Click XSS The first attempts were not successful and the reflect was not observed, but using the RACE, I saw that my sampler is displayed for the rest of the users 🫥 I will publish it after permission. #BugBounty

Sina

24,139 views • 1 year ago

URL validation holding you back? Don't stress, we've got your back! Our URL Validation Bypass Cheat Sheet has 200+ Payloads for all occasions! Check it out: #burpsuite #hacking #bugbounty #pentesting #cybersecurity
0:15

URL validation holding you back? Don't stress, we've got your back! Our URL Validation Bypass Cheat Sheet has 200+ Payloads for all occasions! Check it out: #burpsuite #hacking #bugbounty #pentesting #cybersecurity

Web Security Academy

34,463 views • 1 year ago

Kraken A powerful Python-based tool designed to centralize and streamline brute-forcing tasks. Kraken provides a suite of tools for #cybersecurity professionals to efficiently perform brute-force attacks across various protocols and services. #bugbounty
0:14

Kraken A powerful Python-based tool designed to centralize and streamline brute-forcing tasks. Kraken provides a suite of tools for #cybersecurity professionals to efficiently perform brute-force attacks across various protocols and services. #bugbounty

HackGit

44,888 views • 1 year ago

*** KNOXSS GIVEAWAY June 2025 *** Directions: 1. Like 2. Share 3. Be a follower Prize: KNOXSS Pro for 1 Month Results: June 10th Number of Winners: 3 Good luck! 😀 - #XSS for pros. #BugBounty #PenTesting
0:11

*** KNOXSS GIVEAWAY June 2025 *** Directions: 1. Like 2. Share 3. Be a follower Prize: KNOXSS Pro for 1 Month Results: June 10th Number of Winners: 3 Good luck! 😀 - #XSS for pros. #BugBounty #PenTesting

KNOXSS

21,722 views • 1 year ago

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbounty
0:14

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbounty

HackGit

26,398 views • 2 years ago

Testing the the new puppet warp tool
0:12

Testing the the new puppet warp tool

mats 🃏🍥

14,714 views • 1 year ago

Testing out Pendulum Chain based eye blink wobble in #VNyan
0:15

Testing out Pendulum Chain based eye blink wobble in #VNyan

Suvidriel 🌸🐈🇫🇮 VTuber Tutorial Lady

52,377 views • 3 years ago

Based on our initial testing, contains might actually be too good:
0:16

Based on our initial testing, contains might actually be too good:

Huddle.gg

49,896 views • 6 months ago

Beta testing for Wonder Studio on 3D software is already underway! It outshines any video-to-video tool, delivering fantastic results with precise control!
0:15

Beta testing for Wonder Studio on 3D software is already underway! It outshines any video-to-video tool, delivering fantastic results with precise control!

el.cine

45,231 views • 1 year ago

2. The SQL Murder Mystery Learn SQL concepts and commands while solving a crime.
0:11

2. The SQL Murder Mystery Learn SQL concepts and commands while solving a crime.

Jami

18,717 views • 1 year ago

Sticky header that updates based on the active top section. Months animate in from left/right depending on the scroll direction
0:15

Sticky header that updates based on the active top section. Months animate in from left/right depending on the scroll direction

Mery

34,100 views • 9 months ago