Solr-GRAB - Steal Apache Solr Instance Queries With Or Without A Username And Password
http://www.kitploit.com/2021/05/solr-grab-steal-apache-solr-instance.html

Steal Apache (https://www.kitploit.com/search/label/Apache) Solr instance Queries with or without a username and password. DISCLAIMER: This project should be used for authorized testing (https://www.kitploit.com/search/label/Testing) and educational purposes only.
Download
git clone https://github.com/GnosticPlayers/Solr-GRAB

Usage
You can search for Apache Solr Instances via Censys, with the dork (https://www.kitploit.com/search/label/Dork) "Welcome To Solr" or "Apache Solr Admin". To grab queries, simply go to the http access (https://www.kitploit.com/search/label/Access) point, sometimes being on port 80, 443 or 8080. Replace "http://URLHERE/ (http://urlhere/)" with a desired URL, such as "http://127.0.0.1/". Replace "PROJECTHERE/" with a desired project entry, such as a directory "users/". Replace "IDHERE" with an ID that is unique per entry in JSON (https://www.kitploit.com/search/label/JSON) on the apache solr query, such as "id" or "global_id". Lastly, replace "AMOUNTOFROWSHERE" with the amount of rows found in the query, such as "74332". Now execute it with: bash index.sh. Sometimes, you'll have an error where it's a 404 not found. If that's the case, add "/solr/" between "http://URLHERE/" & "PROJECTHERE", such as: https://127.0.0.1/solr/users/. This should fix the problem.
Author & Credits
Written by GnosticPlayers & g9648
g9648
Email: g9648@riseup.net (mailto:g9648@riseup.net)
Gnostic Contacts
Email: dreammarket@riseup.net (mailto:dreammarket@riseup.net)

Download Solr-GRAB (https://github.com/GnosticPlayers/Solr-GRAB)

hacking: security in practice
phone

can anyone try to hack into my phone i wanna know its secure enough and what you can see when you hack it

submitted by /u/Head-Suit-2756
[link] [comments]

hacking: security in practice
Got multiple texts regarding password resets at 4:30 this morning - what should I do?

I hope this is the right place to ask, apologies in advance if it isn't.

I got multiple texts at 4:30am this morning regarding 2FA codes for resetting passwords of multiple different accounts of mine... This ever happened to anyone else?

I reckon someone got their hands on my info...

I'm pretty sure all my stuff is safe because they wouldn't have been able to get into my accounts, but it's still strange all the same, and kinda annoying as I had 5 calls this morning from random businesses (only one of which I actually picked up - a Citroen dealership which isn't even near where I live 😂).

submitted by /u/Hydra822
[link] [comments]

Hacking on Medium
Cybersecurity trends for 2021

https://cdn-images-1.medium.com/max/1500/1*7sfG__VJcrIwPUVO4EFH6w.png
2020 has been a year that everyone, everywhere in the world, will remember forever, a year in which all aspects of our lives have been…

Continue reading on edataconsulting »

Hacking on Medium
SUBDOMAIN TAKEOVER FOR BUG BOUNTY

hey guys hackingcage is here, welcome to back again another post. A subdomain takeover is taken into account a high severity threat and…

Continue reading on Medium »

Hacking on Medium
Fake Copyright Infringement Warnings with Googlesites URL being Used to Spread Ransomware

https://cdn-images-1.medium.com/max/1054/1*r3gIIpJQpCsmoft_pV9TzQ.png
Ransomwares can be dreadful. It is one of the topics that gives sleepless nights to many businesses. A ransomware attack can lead to huge…

Continue reading on Medium »

Hacking on Medium
Intro to IOT Hardware Hacking

https://cdn-images-1.medium.com/max/600/0*h6B7h67o4tMDXEB4.jpeg
When we talk about hardware hacking — we have physical device as attack surface, we have embedded devices to pentest on, One may try to…

Continue reading on Medium »

Hacking on Medium
What you can do after you hacked a computer? (post-exploitation techniques part-2)

https://cdn-images-1.medium.com/max/1280/1*XZcCCIv-asAK9VG4WNPpMA.jpeg
Pivoting from a hacked device to another

Continue reading on Medium »

Hacking on Medium
What you can do after you hacked a computer? (post-exploitation techniques part-1)

https://cdn-images-1.medium.com/max/1280/1*XZcCCIv-asAK9VG4WNPpMA.jpeg
Post-exploitation covers everything that ought to be performed, following on from active target misuse. For instance, effective misuse may…

Continue reading on Medium »

Hacking on Medium
Want to be a Cyber Security Expert? Be an ethical hacker first.

https://cdn-images-1.medium.com/max/2600/0*3Ma7S-j2kNqZJ_FW
Why following your passion may not be so cliché after all…

Continue reading on Medium »