Hacking Articles Tips Tricks Videos Tutorials
471 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
SAPSprint 7.60 Unquoted Service Path

https://1.bp.blogspot.com/-jW_VWiRlkJ4/WWlvh6QcNII/AAAAAAAAIQg/x12g-flM0hAb9z-fRCiW9Z3UAYaaFuf7ACLcBGAs/s1600/h9.png
SAPSprint version 7.60 suffers from an unquoted service path vulnerability.

MD5 | ae47ef8f34c49cafe177bc1f46014831

Download
# Exploit Title: SAPSprint 7.60 - 'SAPSprint' Unquoted Service Path
# Discovery by: Brian Rodriguez
# Date: 21-06-2021
# Vendor Homepage: https://brother.com/
# Tested Version: 7.60
# Vulnerability Type: Unquoted Service Path
# Tested on: Windows 10 Enterprise 64 bits

# Step to discover Unquoted Service Path:

C:\>wmic service get name,displayname,pathname,startmode |findstr /i "auto" |findstr /i /v "c:\windows\\" |findstr /i /v """

SAPSprint SAPSprint C:\Program Files\SAP\SAPSprint\sapsprint.exe Auto

C:\>sc qc SAPSprint
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: SAPSprint
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME: C:\Program Files\SAP\SAPSprint\sapsprint.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : SAPSprint
DEPENDENCIES : Spooler
SERVICE_START_NAME: LocalSystem

Source:packetstormsecurity.com
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
pyWhat : Identify Anything. Easily Lets You Identify Emails, IP Addresses, And More…

pyWhat is the easiest way to identify anything. pip3 install pywhat && pywhat –help What is this? Imagine this: You come across some mysterious text 🧙‍♂️ 5f4dcc3b5aa765d61d8327deb882cf99 and you wonder what it is. What do you do? Well, with what all you have to do is ask what "5f4dcc3b5aa765d61d8327deb882cf99" and what will tell you! what‘s job is to identify what something is. Whether it be a file or text! […]

The post pyWhat : Identify Anything. Easily Lets You Identify Emails, IP Addresses, And More… appeared first on Kali Linux Tutorials.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TryHackMe — Basic Pentesting Writeup

https://cdn-images-1.medium.com/max/600/1*1SkYGPNJIU6Niewh74OQpw.png
TL&DR; This is a Linux box with a webserver and SMB that reveal usernames. We can use this to brute force Jan’s password and log in using…

Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
5 Practical Cybersecurity Tips for Everyday People

https://cdn-images-1.medium.com/max/2600/1*QRYrbCDXcDmUU9fK66YgAA.jpeg
Ever feel like websites are constantly bugging you to update your password? And when it’s not your password, they’re asking you to give…

Continue reading on Medium »