FireStorePwn - Firestore Database Vulnerability Scanner Using APKs
http://www.kitploit.com/2021/05/firestorepwn-firestore-database.html

___________________________
@hacking_Attack
@Hacking_Video

fsp scans an APK and checks the Firestore database for rules that are not secure, testing (https://www.kitploit.com/search/label/Testing) with or without authentication. If there are problems with the security rules, attackers could steal, modify or delete data and raise the bill.Install fsp
sudo wget https://raw.githubusercontent.com/takito1812/FireStorePwn/main/fsp -O /bin/fsp
sudo chmod +x /bin/fsp
Running fsp

Scanning an APK without authentication
fsp app.apk
Scanning an APK with authentication
With email (https://www.kitploit.com/search/label/Email) and password. fsp app.apk test@test.com:123456 With a token. fsp app.apk eyJhbGciO...

Download FireStorePwn (https://github.com/takito1812/FireStorePwn)

___________________________
@hacking_Attack
@Hacking_Video

FireStorePwn - Firestore Database Vulnerability Scanner Using APKs

fsp scans an APK and checks the Firestore database for rules that are not secure, testing with or without authentication. If there are problems with the security rules, attackers could steal, modify or delete data and raise the bill.Install fsp sudo wget https://raw.githubusercontent.com/takito1812/FireStorePwn/main/fsp -O /bin/fspsudo chmod +x /bin/fsp Running fsp Scanning an APK without authentication fsp app.apk Scanning an APK with authentication With email and password. fsp app.apk test@test.com:123456 With a token. fsp app.apk eyJhbGciO... Download FireStorePwn
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles
Anonymous Logins for Pentesters

In this article, we will focus on the various services that support the Anonymous Logins. We will be understanding the process to setup those service on your local target system and then using Kali Linux to access them or attack them. Table of Content Introduction Setting up Anonymous FTP Attacking

The post Anonymous Logins for Pentesters appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
FireStorePwn - Firestore Database Vulnerability Scanner Using APKs

https://1.bp.blogspot.com/-mL438l63hTg/YKrzEkXE_-I/AAAAAAAAWRI/87DCc19R3mkIcrf4T7PdNh_tcQ6UoYWVACNcBGAsYHQ/w626-h640/FireStorePwn_1.png
fsp scans an APK and checks the Firestore database for rules that are not secure, testing with or without authentication.

If there are problems with the security rules, attackers could steal, modify or delete data and raise the bill.

Install fsp

sudo wget https://raw.githubusercontent.com/takito1812/FireStorePwn/main/fsp -O /bin/fsp
sudo chmod +x /bin/fsp

Running fsp

Scanning an APK without authentication

fsp app.apk

Scanning an APK with authentication


With email and password.

fsp app.apk test@test.com:123456

With a token.

fsp app.apk eyJhbGciO...
Download FireStorePwn

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Opening an old, locked MacBook Pro

My old job went out of business. They had issued me a 2019 MacBook Pro. When the company shut down, they never took it back. It's been sitting around untouched for a year as I was waiting for someone to ask for it back. I am assuming that day will never happen.

So what do I do with it now? I am not an admin on the machine, is there a way to wipe it clean and start over with it?

submitted by /u/destroydesigns
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
QT PNG ICC Processing Out-Of-Bounds Read

https://2.bp.blogspot.com/-DNFQNR6e8p4/WWlvIe_2SVI/AAAAAAAAILs/sd08rXaHefk0y1DdsYY6dPeiz0i718ntQCLcBGAs/s1600/h143.png
The QImage class can read out-of-bounds when reading a specially-crafted PNG file, where a tag byte offset goes out of bounds. This could potentially allow an attacker to determine values in memory based on the QImage pixels, if QT is used to process untrusted images.

MD5 | 26119d4fbb3aaf3d523b1a23162d477b

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
CommScope Ruckus IoT Controller 1.7.1.0 Hard-Coded System Passwords

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
CommScope Ruckus IoT Controller 1.7.1.0 Web Application Directory Traversal

___________________________
@hacking_Attack
@Hacking_Video