₦airaland Forum

jerflakes:
How will your account get hacked if you click a video in YouTube?

DeathToAfonja is a collosal fool. You need to know by now.

Damn Brazilian ladies are beautiful, whether dark skin, light skin, majority of them are so down to earth.
mulher bonita

DeathToAfonja:
Different nonsense image


If u can't hack common my Nairaland account then you're doing rubbish

With all due respect I decline from hacking your online accounts, the reason for creating this thread is to share knowledge, and not to illegally hack accounts. The application and server used herein are in my possession. Hacking your accounts would be illegal.
Please learn to show some emotional intelligence.
Have a good day.

1st Image: Hashcat use some predefined text files to crack cryptographic hashes like MD5, and so I used the wordlists.txt file that comes with Kali.
2nd Image: Every time you start up hashcat, it displays helpful commands.
3rd Image: After scanning through the commands, I settled to use the --force.
4th Image: After some few milliseconds, hashcat displayed the cracked password.
( Depending on your machine configuration it might take millisecond to minutes to crack the hashes)

1st Image: Exposed card details(Note that these are not real card details).
.
Now that we have seen the power and disaster of SQLi vulnerability,the most question is, "How can you protect your assets from such attack? "

Another thing is most of the passwords show herein are plain text passwords, what if the passwords are encrypted?
Well if the passwords are SHA-256 encrypted, then you are relatively safe, but if the passwords are MD5 encrypted, then you are not safe at all, as it is very easy to crack MD5 encrypted files.

2nd Image: In order to demonstrate the vulnerability of MD5 hashes, I hacked into dvwa database.
3rd Image: I logged in using the charley password to test my exploit.
4th Image: I decided to use a tool called hashcat to know what hash the passwords are encrypted with. They are encrypted with MD5.

I promised yesterday to share how I hacked and exposed all the comments in the blog section of the OWASP10 Mutillidae App.
The power of SQL injection comes from the fact that once you have access to the database, you can view everything thing in the database, and for advanced hacker they can even wipe out information from the database, so it is very important that software developers sanitize ALL user inputs in their application.
1st Image: From prior executions I found out that there are six tables in the database, I had already exposed accounts table, and in this part I'll expose the blogs_table and credit card table. The first thing is to check the columns in the blogs_table table.
2nd Image: The command I executed to display all the columns in blogs_table table.
3rd Image: Exposed comments. You will notice the post I made yesterday anonymously was also exposed.
4th Image: I ran the following command to expose the credit card details of user.

OP please clarify something, "Are the organizers only chosing from select countries or are more countries still bringing their contestant?
If it is from select countries, then the organizers are partial, but if other countries are going to join, then let the game begin.
That Brazilian and Portuguese ladies are so hmm lala.
The rest should just pack there bags and go HOME.
Waiting for my African ladies to go show the world the physical demonstration of ASS.
#we_mueevee

1st Image: My account created.
2nd Image: Using the same technique as used earlier you can see that even with my supposedly strong password, all my credentials are EXPOSED.
The only systems that are safe are air gapped systems. That systems that are disconnected from a network
3rd Image: At this point I navigated to the blog post section of the application, and wrote some text anonymously.
4th Image: Some of the text I wrote.

Next I'll show how I can hack this part of the application to expose all these texts.

1st Image: The part of the application I decided to hack is Owasp10 > Injection > SQLi Extraction > User Info
2nd Image: The User Info Page. It request a Username and Password.
3rd Image: A likely question is, "How do I get the URL and cookie to initiate an attack?" I first of all inputted a wrong username and password, then I open the Developer Tool(Ctrl+Shift+I), then I sent the request, then I monitored the request and response from the Networks Tab under Headers in the Developer Tools. To get the URL I simply copied the URL after sending the request , I searched for the cookie value in Network > Cookie and copied the value. You will notice that the first GET is what I need.
4th Image: Now that I have hacked into the database, I decided to go extra step. I created some new accounts for myself, and I used the secure generated password from Firefox. Please not that no matter the level of security you might put in place, a vulnerable application kills all that effort. So you might have the best password in the world, but if that site is vulnerable, your passwords are USELESS

1st Image: At these point a lot more information at our disposal. I got the column names in the table, it's type, and I also got the name of the MySQL database which is owasp10.
2nd Image: At this point I can say that we have acquire much information, but the entire point of this injection is to get all the credentials stored in this database. In order words I want to be in control of the database. I will now display everything in the database by running this command.
3rd Image: Voila!!! We got everything from the database(accounts table), at this point I can log in as the admin and be a part controller of the application. From the image you'll see that there are 2 database administrator.
4th Image: Now let me rewind a little. The mutillidae application is complex, but vulnerable application built by the developers at OWASP. The image is showing the homepage of the application.

This thread is a sister thread to https://www.nairaland.com/6799302/master-x86-64-assembly-me-diffusing where I outlined x86-64 assembly.
Disclaimer: This information is for educational purpose only, I am NOT in ANYWAY liable to any misuse. If found guilty of misuse I am legally protected. This content is at readers discretion.
Objective of this thread.
* Use sqlmap to traige applications for any known vulnerability
* Use sqlmap to perform basic OSINT of applications
* Mastered important sqlmap commands.

Sqlmap is a free and open source tool used to triage applications for SQL injection vulnerability, it has being under active development since 2002.
What is SQL injection vulnerability?
SQL injection vulnerability occurs when developers incorrectly process user input(s) and use the unsanitized input(s) to generate SQL queries.
Types of SQL injection vulnerability
1. Error based injection
2. Timed based injection
3. Boolean based injection
4. Out-band injection
5. Blind injection
.
Tools used: sqlmap1.6 stable {you can download this from the GitHub releases page}, MousePad, Firefox, Kali Linux, Terminal, Metasploitable2, pfsense, virtual machine.

Quick Notes:
* Sqlmap comes pre-installed on Kali Linux, but I am using the latest stable release. I recommend downloading from GitHub
* The current sqlmap release comes with a repo of common text file to fine tune injections
* A proxy like Burp Suite or Owasp Zap can be used, but I defaulted to the browser since that is enough for now.
* Remember to always use common cyber security measures, I am using pfsense as my firewall.
.
With these in mind I'll share the commands and steps taken to ethically crack the OWASP Mutillidae Application.
.
1st Image: The first command I ran is to find out the tables where my input is being queried to. Now this is where the beauty of sqlmap comes into play, while executing this command, sqlmap displayed key information about the database management system, the Linux server operating system, the version of the database management system etc. The DBMS is MySQL, the version is MySQL > v4.1but less than v5.0 so I can also read up on vulnerabilities associated with this version of MySQL, the Linux server operating system is of version 8.1.
2nd Image: Those familiar with a sqlmap might wonder why the change of commands, the reason is, executing sqlmap commands that comes preinstalled on Kali is quite different from that which you downloaded. Since I had downloaded sqlmap from GitHub, the file comes with sqlmap.py script written entirely with python 3.
3rd Image: After executing the command, sqlmap showed me that the table my input is being queried against is the accounts table. I want to reiterate that sqlmap1.6 comes with a commons text file which helps in fine tuning your results, although there are other tables in the database, but sqlmap using the common text file was able to pin point the exact table my input is queried against. Commons text file, what is it? It is a file that contain common database tables and column names seen in popular applications.
4th Image: Now that I have gotten the table name, the next line of action is to get the column names in the table and it's type. For that I executed these command.

Supremedrizzy life itself is unfair, and so when disappointments comes you have to restrategize, plan, get up and keep moving.
Never Ever Pity Yourself.
I just want to let you know that failure is inevitable, but once you fail get up.
In addition to what other people might have told you I will like to share practical tips and advice with you.
My first advice is to FOCUS. Second, don't be too HARD on yourself. Third, always look at the big picture then narrow your view.
Now let me show you the way by means of these tips.
Tip1: If you want to be good at front end development, please please go to FreeCodeCamp. They have a very good curriculum you can learn with, infact you can use it as a reference. https://freecodecamp.org
Tip2: Try to complete those projects to earn a certificate, you can add those to your portfolio.
Tip3: Once you are done with the Responsive Web Development track, try to give yourself a day or two to assimilate what you learned.
Tip4: Learn JavaScript and the Algorithm and Data Structures, all these are in FreeCodeCamp curriculum, at these point if it seems hard, please relax. Take it a step at a time. Once again complete the project, build the palindrome, the cisear cipher, the word mixers all of them, if you have issues I'll share the code with you.
Tip5: Move to learning bootstrap, sass, react and redux, once again these are in freecodecamp curriculum, at these point complete the project, the projects want to test your understanding of UseState and UseEffect hooks.
Tip6: At these point relax and assimilate all what you have learned.
Tip7: Study Material UI, the goal of Material UI is to simplify your development experience, so study it. Look at all the various components.
Tip8: Try to replicate some open source projects from Material UI, of particular mention is RMUIF. You see this project has a lot of things to teach you, you will learn how to structure your code base, how to properly name variables, how to use your import and export, useContext hook, learn how to integrate firebase into your project, learn how to securely store your environment variables, learn how to authenticate users through firebase. At these point when you host on Netlify, you will research how to attach your environment variables.
All these looks buggy, but the only learning resources
are FreeCodeCamp and Material UI, then relax, don't say you will complete these in 1 week, because it is not possible, take your time and learn at your pace. And if frustration begins to kick in, guy man play music or better still find one strong gin drink, you no kill person.

Valueson I really appreciate the facts you wrote in this thread, especially when you typed "See before grace works for you, a working system would have made you rich and comfortable by now". I agree with that statement 100%. Just this past Saturday a moniker created a controversial thread stylishly discouraging people from travelling out of Nigeria, another moniker was even encouraging to instead start an agricultural processing business as if it is easy to do business in Nigeria coupled with the bad security situations in the country. Some people were giving the narratives that the citizens of those developed countries stayed back to develop there country, but they are forgeting that the government of those countries already built infrastructures to aid development infact most government institutions were all functional.
Lets take a look at the history of the Japanese miracle. Japan is one of the few countries that was not colonized they had their issues, but it got to a point that the government started devising plans to boost there economy. What did the Japanese government do?
They made sure they had good educational system. Electricity was improved. Transportation infrastructure was being built to ensure easy transport of raw materials. Theses are few of the many things the government did, and guess what? Japan went from a small GDP country to becoming the 3rd biggest economy today. The Japanese educational system is still top notch today, they are the best in precision system engineering, robotics and stem cell development. What is my point here? My point is the government already created a level playing field for her citizen, then her citizen built on top of that to promote her economy.
Using these simple analogy, imagine a parent that didn't cater for his/her child, now the parent is now expecting blessings from such child. Is that possible? Well No. Nigeria is the parent, we the common citizen are like the child, Nigeria didn't give us anything, and so it is very unlikely for Nigeria to expect anything from us.
Using another analogy, imagine a parent wanting to enroll his or her child at a school. This parent goes to a school where the environment is not conducive, the teachers are inexperienced, the curriculum in use is outdated, there are not rules and regulations in the school premises, do you think a sreasonable parent will enroll his/her child? No. Now another scenerio, a parent is then told of a school that has everything the other school lack, these parent went there and saw for himself/herself, but was told that the school fees is higher than that of the other school, you will agree with me that even though the few might be high, these parent will still enroll his child because he wants the best for his child. Nigeria is like that dilapidated school, we the citizens are like the parent, the child is like our ideas, invention, sanity etc, the good school is like progressive countries.
Just as you would enroll your child in the good school is the same way reasoning Nigerians wants to go to a progressive country where the can maintain there sanity, work on there ideas, get fundings for there innovation etc.
Nigeria is gone, and anybody still hoping on this country is a big FOOL.
Anybody that might want to argue with me let me let you know that I don't like vawulence, all my assertions are all backed by undeniable proof. I gat no time to dabble into useless argument, this is 2022 and so "we move"

Rahkman:
Op no even post the babe pics well....the babe set wella ....Chinese babes are built like sex dolls and they moan loud when u pound them....especially with large African cocks. if i catch this babe ehn I go break her with deadly pounding

Hmm welldone by the time Xi Jinping arrange your arrest upon say you go break person pikin bone, nah that time your eye go clear.
But no lies, the girl set DIEE.
.
I am waiting for Ghana and South African version.
Ghana ladies get yansh nor be small.
SA ladies have some banging curves.

Englishisamust:
If you Bleep this type of girls your life can never remain the same. People will just be chasing big ass, big boobs every where. Not knowing the joy wey dey fucking slim girls with moderate ass and boobs like this. If I catch this girl for bed na every style I go experiment with aaam even dem no go tell me before I start to dey lick her pussy, see how babe clean not the girls we have in Nigeria and nairaland here make we no mention them try aam with them, Na virus go full Ur mouth . Slim girls all the way

Agba I doff my hat. Nah you Dem suppose dey call bang ali.
E good as you no mention there name, one was already calling me a coon.

I am not impress with these yanshes.
Which kain nonsense yansh be all these one?
Make them go sidon one place jare.

walkbrazil4k please ignore them idiots, they will only waste time and energy.

Datboredberri:
It these were Nigerian or black women, the redpillers would gather here like the retārds to slut-shame them... But I expect the coons to sing the praises of these Brazilian women...

All I know is I am not a coon.
.
But once again Brazilian ladies are the epitome of figure 8, damn.

Datboredberri:
And I like that... That's not the issue though... That Nigerian men are coons, that's what's sad... I wonder why they aren't here already worhipping these 'hot' Latinas... Shame?

Lol... You're very smart...

You yourself affirmed to the fact that the Brazilian ladies in the photo are hot, and yes you are right, they are hot. I am beginning to sense jealousy in your choice of words.
You see the vast majority of Nigerian ladies don't have good shape, thereby being less attractive.

Hisbah21:
this tiny snake that you should take as ur pet

Are you fucking sé yeye me nibibayi sir?
Snake as pet? Is as if you want my parents to arrange family meeting ontop my matter.

.

So today after I came back from my normal outings, I reclined on my couch, lo and behold, I saw a snake crawling out of a Ghana must go bag where my cloths are, I couldn't believe my sight. Immediately I grab a mopping stick in close proximity to where I am to try to take it out, but suddenly the snack glided to another spot, chai I fell to the ground and screamed, thankfully a neighbor came in, at this point my morale boosted at least we gather dey to killl the snake. In one swift swing, I targeted the middle of the snake's head, and I downed the snake.
Lalasticala let's take this to the promised Land.

So today I came back from my normal outings, as I reclined to my couch to relax and play some games on my device, lo and behold I saw a snake coming out of one Ghana must go sack where I kept some of my cloth. I was terrified by the sight, I couldn't believe my eye, I decided to man up and use the mopping stick that was very close to me to try to lead the snack out of my room, but as I was about placing the mopping on the snake, fiam the snake glided to a different spot on the wall. I tripped to the floor gasping like say tomorrow nor dey.
I immediately went to grab a machete and went back, I targeted the head of the snake, and in one swing, I downed the snake.
NB: My neighbor was with me during the entire time, bacause I screamed like a girl make I nor lie, but the God I served was with me the whole time(lol).
Lalasticala abeg let's move this to the promise Land.

I have been keeping my cool for the most part regarding what is happening, and I must say that history is most likely correct. I am happy that I experienced this situation, I will talk about this further.
I have come to realise that most of the so called war analyst on Nairaland don't know how this world works, to every person reading this know today that this world is deep. A lot of things happen that most people don't understand.
I will mention some things that history has written.
1. You cant know some certain things unless what they(world powers) want you to know: You see the UN Security Council members have a lot of classified information that no other government in the world have access to, the information you know is what they want you to know. In fact the UN resolution to forming an independent country is that the country must not be influenced or under control of the 5 UN Sec Council member countries. Why? Once again the matter deep, which brings me back to the point that these guys know things no other government of the world knows about.
2. No UN[formerly League of Nations] Security Member country can war against themselves, but there may be truce and dispute amongst themselves: The UN Security Council member country cant break an all out war as that will contradict the main article as designated in the ratified treaty. The undiluted treaty no one except the sec members have it, the treaty read by the public is what they want us to see, but again these members cant go to war amongst themselves, Hong Kong proved it, Crimea proved it, Vietnam proved it, hopeful this Ukraine situation will prove it.
3. The UN Security Council Members have other countries by the balls: Russia have Glonass, China have Baidu, USA has GPS, Britain and France have Euro satellite. Most of them have hypersonic capability, it begins to feel that the Security Member countries have weapons that are scary to keep other countries at check, amongst themselves they also have treaty to cage there aggression, remember the INF Treaty amongst Russia and USA.
4. Every country in the world fights for her interest: Times and times again countries and government around the world has fought for there interest overtly or covertly.

Only those that understand the above will know what might have happened from the onset of the Ukraine situation. If you don't understand the politics of UN, and the secrets kept by these government, you wont understand that truly this world is deep. History for the most part has some truths.

Nairobi33:
Do you know how many civilians & children bombed to pieces by America in Iraq & Syria? Millions.

.
I have said it many many times that the psychology the British played on Africa especially Nigeria is still working. If there is any war I have followed, it should be the UKUSA vs Iraqi war.
How will you go to war against a country simply because you THOUGHT they have weapons of mass destruction?
Infact UKUSA bypass UN security vote to fight Iraq, after the war UKUSA found nothing, yet no apologies.
US & NATO became afraid of Ghadaffi because he wanted pan arabism, he wanted to use Libyan gold and oil wealth to created a unified currency. He sent away the US military base in his country, but then NATO plotted against him, killed him and installed a pro Western government and the Libya has never remained the same again.
US and NATO are terrible entities, they destabilize and conquer, most people don't see this, yet blame Russia like no tomorrow.
No country is a saint, every country fight for there interest.

Chiggsglover what you wrote up there is common sense, but then believe me when I tell you that if you try that in Nigeria the system will frustrate you.
The way of life in Ireland is completely different from Nigeria, and never make the mistake of coming back to Nigeria, we are going through trying times now.
These current fuel scarcity is the worst I have seen.
I was at a Mobil petrol station yesterday one man nearly naked himself simply because his keg of 25liter fuel was stolen inside that same fuel station. Things dey happen for Naija oo.

Enough of all this blame game, yes I am a youth, but then we can't keep blaming and blaming because we won't find a way forward.
I am not condoling the dirty character of the current young generation , but the old generation were not saint either, and by virtue of logical thinking, the old generation is part of the cause of the problem(s), I will explain this in a little while.
Let's ask ourselves, during the First, Second and Third republic of Nigeria, was there not coups, corruption, nepotism etc? That was the stupid legacy of the old generation.
Is it not the self acclaimed sainty old generation that is doing charms and Voodoo for the young generation?
Is it not the old generation that trained these present young generation? What training was given?
The old generations also have there comma, and referring to the young generation as hopeless is a faux pas.
Social media craze, frivolity, sex is rampant amongst present generation, but old generation are not the saint they proscribe themselves to be.
.
Babaginda wanted free money thereby becoming the founder of Nigerians corruption, through reading Nigeria's history I call Babaginda the founder of modern corruption in Nigeria.
Abacha use Nigeria catch cruise and vibe thereby stealing and raping the precious resources of these country.
Gowon wanted free money by being a chief manipulator of some CBN policies during his tenure to cart away money for him self.
Our politician like sex like crazy, if not why are they marrying like there is no tomorrow, no be to knack pussy?

Angelfrost:
Oga, I have been privileged to grow up and dwell within two generations (90s and this 21st century)... Deji said it all!

No need for defensiveness... This current generation of Nigerians are beyond pathetic when it comes to political objectivity, all round maturity, decisiveness, responsibility, hard work, leadership, etc...

Pretending will not get us anywhere!!!

I see you as a reasonable person so I decided to quote you. First of all, terming these generation as hopeless is wrong, and I am sure you know that. Secondly generalizing all Nigerian youth is also wrong, because not all Nigerian youths are pathetic. Some are actually mature and responsible.
It is good the reasoning populace of Nigeria is aware of a common enemy amongst the current Nigerian youth, and that enemy(mies) are get rich quick mentality, laziness, social media craze, flaunting, zero value for education etc.
Now as a concerned Nigerian youth I am, I think that instead of castigating solutions should be offered, you see when there is an issue, solution is the way forward. I don't normally concern myself with topics like this, but I can't take it for someone to call me hopeless and pathetic, that is why I decided to air my opinion unbiased, as I have said, I will never ever condole the stupid behaviour of the unreasoning youths.
Now that we know the enemy, what is the way forward?
1. Get Rich Quick Mentality: Education and Orientation are the 2 biggest weapon to fight this societal menace, a lot of Nigerian youth needs to understand that hardwork plus commitment plus proper vision is needed for success, but unfortunately there is no provision for educating the Nigerian youth. Government, parents, community rulers needs to work in unison to educate young ones. Government should provision laws that frown on fraud, and political official that engage in embezzlement should be duly sanctioned.
2. Laziness: Government can begin to build Vocational Training centers across every LGAs in the country that can be freely accessible by the youth, but it is quite unfortunate we aren't seeing this in the country. Government can set up funds to promote innovative in the country, but we are not seeing this happen in the country.
3. Social Media Craze: Once again education is a big player on this one.
4. Flaunting: Just like China our Government can also frown upon flaunting of wealth on the internet, even if you are in government the rule applies to you.
5. Zero Value for Education: in short our educational system needs to be updated, to become an all inclusive, practical based, research based educational system.
I am sure that once some of these steps are taken we van begin to steer the ship in the right direction, but once again all theses aren't put in place.
I know that you might critic some parts of my write up, but then again the current behavior amongst the youth is just a bomb that just exploded now. Solutions is the way forward not blaming

1st Image: Viola the two paths are shown and finally the correct path(or input) to crack the challenge.

1st Image: Starting now I'll need to get the strings in the crackeme2 file. String is one of the best first step with analysis. You will notice that this is an IOLI crackme challenge.
2nd Image: Next up is to know what is the file format of the binary. Guesses correct; it is an elf file.
3rd Image: Unfortunately GDB doesn't come pre-installed on Kali so I had to install it.
4th Image: After some little debugging now comes the time to write Angr script. The script shows two possible paths(or inputs) to crack the crackme.

tarantino1:
He never tried to scam anyone. He showed the bank how easy it was to hack and for them to up their security.

That boy is a big time fool.
If truly he wanted show the bank how vulnerable the system is, then he should have followed due process.
First get a lawyer (corporate lawyer) that understand banking law in Nigeria. Then you report your findings to the appropriate department in the bank. Then you keep your mouth shut and only discuss with the parties concerned.
But that fool went ahead to post videos, and even when his residence was raided, they found incriminating things.
On a serious note, that man is a mumu man.

I finally downloaded the crackmes and the repository.
1st Image: Crackmes and a binary bomb file
2 Image: The Angr CTF repo
3rd Image: Reverse Engineering tasks involves a lot of repetition, and so have a file that aids automation is key. I always have a gdb configuration file to assist with debugging with GDB. I decided to use GDB in sync with Angr to get the full picture of the file. GDB will execute at root level while Angr will execute at venv level.
4th Image: (Optional) I created a file to store list of Flags Captured. I stored this file in the Desktop folder for quick access.

Ceteris Paribus keep your friendship circle to the minimum, too much friends sef nah wahala.
Awon oloriburuku friends them.
.

uthlaw:
Why you will be spending your money for them to flex,when you have important issue to sut out,na you no get sense,don't use those friends as excuse!

Your perception level is very shabby. Did OP write that he was a victim of such circumstance?
Learn to read before commenting, so as not to sound stupid.
��

uthlaw:
even if he is not a victim,what is said is exactly what I comment about,read and understand before you comment with your stupidity!

You see what I was saying? Your tone is misplaced, the way you crafted your initial writeup as if OP was a victim is what I am telling you about.
If you don't understand me, please let's not drag this shit, let it end here.

JJOF:
My LinkedIn only shows me offers from Nigeria, how can I set it to show me offers from other countries, because I'll soon be looking for internship. Also, how feasible is it to be running NYSC and tech internship?

Why not try for Indeed or ZipRecruiter, based on your applications, these websites will bring pop ups asking if you want to keep getting notifications.
For LinkedIn maybe you can search for a job title then change the location to your preferred country, you will see a list of those jobs.

Dear fellow Nairalanders, this moniker Keinbock is a sham, don't believe anything coming from this unverified moniker.
Try to answer this question:
Why hasn't Keinbock posted info for over 2 days or 48 hours now?
Is he having connection issues or is he piling up lies to feed us with?
Anything new moniker, one must be very careful.

Keinbock:
Kein Bock has a real job and doesnt sit all day on her pc , waiting for people to post. She comes online when she has the ime.

Bitteschön1

Keinboch I appreciate your reply, thanks for making out time.
You said that the aim of your thread is to help Nigerians in Germany know how to get there German citizenship, but when I read that timeline of yours I couldn't wrap my head around how you want to help Nigerians get there German citizenship, you only talked about yourself not on information that could fast track citizenship acquisition.
In addition, let me tell you that even after marrying a German citizen, you as a foreign spouse might not get the citizenship during that duration, I have read official articles from German Immigration, you see if your civil records are not clean or if your stay in Germany is not consistent or if you aren't earning enough, even after the marriage you will not get the citizenship.
Also note that even after applying for citizenship it can take months and even years for you to finally get the citizenship, so in essence just because you got yours in little over 3 years that doesn't mean it will be same for others.
Everybody knew from the onset that you used marriage to fast track your citizenship process, but you didn't tell us if your marriage is arranged, on a contract or if it is a marriage of convenience.
Matters like this is subject to change and reforms so the best you can do is leave everyone with there own choice, once again congratulations.

1st Image: After running Angr against the script, the base address of the program is shown as well as the password.
2nd Image: Viola the password is shown. I CTF.
.
I decided to make some detour, I setup the popular Metasploitable VM, which is a vulnerable Linux server, to see what I can glean.
3rd Image: Metasploitable VM
4th Image: I was able to remotely access the Server from Kali. The server + Kali all work in a LAN, so I hacked the IP address using netdiscover command. I also activated some shell commands(script) to remotely reboot and shut down the server.