Forwarded from The Hacker News
Apple releases urgent updates for iOS and macOS to patch 3 new 0-day flaws actively exploited in the wild.
Attacks involve:
CVE-2021-30860 — maliciously crafted PDFs
CVE-2021-30858 — maliciously crafted web content
CVE-2021-30869 — malicious app
https://thehackernews.com/2021/09/urgent-apple-ios-and-macos-updates.html
Attacks involve:
CVE-2021-30860 — maliciously crafted PDFs
CVE-2021-30858 — maliciously crafted web content
CVE-2021-30869 — malicious app
https://thehackernews.com/2021/09/urgent-apple-ios-and-macos-updates.html
Forwarded from SecuriXy.kz
Надеюсь все обновились от #VMWare vCenter Server File Upload to #RCE #CVE-2021-22005
как проверить:
как проверить:
cat vmware_centers.txt | while read S do; do curl --connect-timeout 15 --max-time 30 --silent --insecure --user-agent "vAPI/2.100.0 Java/1.8.0_261 (Linux; 4.19.160-6.ph3; amd64)" -X POST "https://$S/analytics/telemetry/ph/api/hyper/send?_c&_i=test" -d "lorem ipsum" -H "Content-Type: application/json" -L --stderr - -v | tac | grep -q "HTTP/1.1 201" && printf "$S \033[1;35mVulnerable\e[0m\n" || printf "$S \033[1;32mPatched\e[0m\n"; done;Если есть:
1. прямой доступ к системе (445 open)
2. File upload
Можете загрузить scf файл и словить ntlm хеш с помощью responder.
#smb #responder #windows #redteam
https://pentestlab.blog/2017/12/13/smb-share-scf-file-attacks/
1. прямой доступ к системе (445 open)
2. File upload
Можете загрузить scf файл и словить ntlm хеш с помощью responder.
#smb #responder #windows #redteam
https://pentestlab.blog/2017/12/13/smb-share-scf-file-attacks/
Penetration Testing Lab
SMB Share – SCF File Attacks
SMB is a protocol which is widely used across organisations for file sharing purposes. It is not uncommon during internal penetration tests to discover a file share which contains sensitive informa…