Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
CKEditor 3 Server-Side Request Forgery

https://4.bp.blogspot.com/-qWHV3SrNBkU/WWlu99WsXjI/AAAAAAAAIJ4/a1ff3k5st1g65kjfNuwTJpgcbLEB4bHEACLcBGAs/s1600/h116.png
CKEditor 3 suffers from a server-side request forgery vulnerability.

MD5 | b2291bef225867993743756fb70a8277

Download

# Exploit Title: CKEditor 3 - Server-Side Request Forgery (SSRF)
# Google Dorks : inurl /editor/filemanager/connectors/uploadtest.html
# Date: 12-6-2021
# Exploit Author: Blackangel
# Software Link: https://ckeditor.com/
# Version:all version under 4 (1,2,3)
# Tested on: windows 7

Steps of Exploit:-

1-using google dorks

inurl /editor/filemanager/connectors/uploadtest.html

2-after going to vulnerable page you will find filed “Custom Uploader URL: ”

3-right click then choose inspect element, click on pick an element from
the page , select field Custom Uploader URL:

4-in elements “
BACKGROUND-COLOR: #dcdcdc” disabled=”” type=”text”>”

delete disabled=””

5-now you can put url start with any protocal

6-send it to the server as you see website that you have entered link

is appear into page .

what this mean??!!1

you send request to server using vulnerable website

you can said i used it as proxy

hackers >>> vulnerable website >>> http:/xx.com

so in http://xx.com logs requests come from vulnerable website

impact:-

1-that allows an attacker to induce the server-side application to make
HTTP requests to an arbitrary domain of the attacker’s choosing. if there
is big company use old version hackers can send request via there websites
and this not good for reputation of company

2-put big company website in blacklist of websites cause i hackers can send
many of request via vulnerable website

Mitigation:-

Remove the uploadtest.html file as it is not used by the application.

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

CKEditor 3 Server-Side Request Forgery

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

10 viewsedited 18:53

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Email-Worm.Win32.Kipis.a Code Execution

https://1.bp.blogspot.com/-CxGUMLkxSaY/WWlvcQOBNxI/AAAAAAAAIPc/zOKm_r-QYksdaJn5z44Zj2ZlNH1F7PBGQCLcBGAs/s1600/h75.png
Email-Worm.Win32.Kipis.a malware suffers from a code execution vulnerability.

MD5 | 5f9909702c2a22a76b31c1b64ddf1721

Download

Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/aa703bc17e3177d3b24a57c5d2a91a0c.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Email-Worm.Win32.Kipis.a
Vulnerability: Unauthenticated Remote Code Execution
Description: The malware listens on TCP port 1029 and writes incoming packets to an executable file that is renamed as "winlogins.exe". Third-party attackers who can reach the infected host can use socket utils like netcat to transfer files which get stored in the Windows\SysWOW64 dir, this may result in remote code execution.
Type: PE32
MD5: aa703bc17e3177d3b24a57c5d2a91a0c
Vuln ID: MVID-2021-0250
Dropped files: svchost.exe, Jpg.bmp, winlogins.exe
Disclosure: 06/16/2021
Exploit/PoC:
nc64.exe -c   x.x.x.x  1029  < DOOM.exe
++ Ok ++
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Email-Worm.Win32.Kipis.a Code Execution

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

9 viewsedited 18:53

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
Teachers Record Management System 1.0 SQL Injection

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Teachers Record Management System 1.0 SQL Injection

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

6 viewsedited 18:53

Hacking Articles Tips Tricks Videos Tutorials

linux audit
https://www.reddit.com/r/Pentesting/comments/o24ode/linux_audit/

Hi all, Could someone please advise on how I can process rpm -qa output of package list to find vulnerabilities and is there something that I can use to scan through etc folder to find issues. Background: I got an opportunity to work as an intern to do configuration review of a linux server and what I received is a bunch of files from etc folder, their permissions and "rpm -qa" output in a file. Please note, I do not have access to the servers. What did I do so far? I am able to manually go through ssh config, unusual commands in /etc/system.d, run commands in /etc/rc.* and /etc/init.*. For RPM output, I am manually searching for any know CVE's or any updated packages. submitted by /u/MindisaMistry (https://www.reddit.com/user/MindisaMistry)
[link] (https://www.reddit.com/r/Pentesting/comments/o24ode/linux_audit/) [comments] (https://www.reddit.com/r/Pentesting/comments/o24ode/linux_audit/)

___________________________
@hacking_Attack
@Hacking_Video

linux audit

Hi all, Could someone please advise on how I can process rpm -qa output of package list to find vulnerabilities and is there something that I...

6 viewsedited 18:56

Hacking Articles Tips Tricks Videos Tutorials

7 views19:00

Hacking Articles Tips Tricks Videos Tutorials

Photo

Dark Reading: Attacks/Breaches
Cyberattacks Are Tailored to Employees ... Why Isn't Security Training?

Consider four factors and behaviors that impact a particular employee's risk, and how security training should take them into account.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading

Cyberattacks Are Tailored to Employees ... Why Isn't Security Training?

Consider four factors and behaviors that impact a particular employee's risk, and how security training should take them into account.

7 viewsedited 19:00

Hacking Articles Tips Tricks Videos Tutorials

6 views19:07

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
TryHackMe write-up: Res

https://cdn-images-1.medium.com/max/610/0*cbCq1l9XAKIfYEJX.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

TryHackMe write-up: Res

Introduction