Hacking the dlink DIR-615 for fun and no profit Part 2: CVE-2020–10215
https://noob3xploiter.medium.com/hacking-the-dlink-dir-615-for-fun-and-no-profit-part-2-cve-2020-10215-586204d42bba?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi. This is my second writeup on my hacking the dlink dir-615 series as i try to get my first cve. I found more vulns and will also make a…Continue reading on Medium » (https://noob3xploiter.medium.com/hacking-the-dlink-dir-615-for-fun-and-no-profit-part-2-cve-2020-10215-586204d42bba?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What’s the general consensus here on hak5 and omglol hardware?

Just for a bit of background but I’ll try not to make this too long. TL:DR at the bottom.

I’m completely new to both hacking and programming, despite having worked in I.T for most of my working life (~14 years - all of the tools I used were company created so I never had a reason to learn programming to a deep extent, but now I’ve got the interest and desire to understand).

Currently, I’m working through a Kali tools (I know, I know) course and Python course simultaneously. I have no intention on being a script kiddie and have a huge amount of languages that I want to learn once I start to have a decent understanding of Python as well as plan on getting into CTF challenges shortly.

What I think I will struggle with most is hardware and circuit board building, so I have been checking out hak5 tools and omglol cables.

Through some older threads on here, there have been mixed messages with some products being really decent and others being overpriced.

So from your perspective, are there any tools that either of these companies provide that are worthwhile? Which would you recommend building myself vs finding cheap alternatives for such as badUSB’s?

I’m interested in trying lots of different hardware to discover my own vibe/art/style as I learn languages and pen testing skills so don’t have a specific attack or setup in mind - I know that’s vague but I honestly want to try a bit of everything.

Just wanted to get the 2021 opinions, especially since some new and updated products recently came out. Appreciate your thoughts in advance and sorry for the ramble.

TL:DR - What hak5 and omglol hardware is worth it (if any), and what cheap alternatives should I consider without having to do too much fiddling on circuits?

submitted by /u/FlyingWithAnimals
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Saudi Aramco encountered a massive Databreach; after 1TB of stolen data hosted on Darknet | Secure Blink

https://external-preview.redd.it/neTZm5Bs7e8qxpGkG_r9gypiGAhuQx1BOc--hhCN1Xc.jpg?width=640&crop=smart&auto=webp&s=9ee4e60c570727fd18d4e0e15f40de4c50859520 submitted by /u/vishalthevaxus
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

HTML Injection To Free Ticket Cyber Security Event

Hello everyone my name is Mohammad Alfin Hidayatullah, i am a junior bug hunter and i am from Indonesia.Continue reading on Medium »
Read more...

Exploit Collector
Microsoft Windows WFP Default Rules AppContainer Capability Bypass Privilege Escalation

https://3.bp.blogspot.com/-D2NV3HnXxpM/WWlu9YoBNhI/AAAAAAAAIJs/rLrqFdeLLWYSGUQPyN0O7DuhnXu7T_FjQCLcBGAs/s1600/h114.png
The default rules for the WFP connect layers permit certain executables to connect TCP sockets in AppContainers without capabilities leading to elevation of privilege.

MD5 | 37069deaf47980f1a4c39f62bc13ce25

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Webmin 1.973 Cross Site Request Forgery

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Concrete5 8.5.5 Phar Deserialization

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress KN Fix Your Title 1.0.1 Cross Site Scripting

https://3.bp.blogspot.com/-sRAbWielMtM/WWlvVvmDA-I/AAAAAAAAIN8/PunzJUFKKskcHl_zTOrA6xP6ETTvhbejQCLcBGAs/s1600/h46.png
WordPress KN Fix Your Title plugin version 1.0.1 suffers from a cross site scripting vulnerability.

MD5 | 563d1383d6850947d9ba0854d82026d7

Download
# Exploit Title: WordPress Plugin KN Fix Your Title 1.0.1 - 'Separator' Stored Cross-Site Scripting (XSS)
# Date: 19/07/2021
# Exploit Author: Aakash Choudhary
# Software Link: https://wordpress.org/plugins/kn-fix-your/
# Version: 1.0.1
# Category: Web Application
# Tested on Mac

How to Reproduce this Vulnerability:

1. Install WordPress 5.7.2
2. Install and activate KN Fix Your Title
3. Navigate to Fix Title under Settings Tab >> Click on I have done this and enter the XSS payload into the Separator input field.
4. Click Save Changes.
5. You will observe that the payload successfully got stored into the database and when you are triggering the same functionality at that time JavaScript payload is executing successfully and we are getting a pop-up.
6. Payload Used: ">

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

HTML Injection To Free Ticket Cyber Security Event
https://alpinnnnnn13.medium.com/html-injection-to-free-ticket-cyber-security-event-da1806934f88?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone my name is Mohammad Alfin Hidayatullah, i am a junior bug hunter and i am from Indonesia.Continue reading on Medium » (https://alpinnnnnn13.medium.com/html-injection-to-free-ticket-cyber-security-event-da1806934f88?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Exploit_Mitigations : Knowledge Base Of Exploit Mitigations Available Across Numerous Operating Systems, Architectures And Applications And Versions

Exploit_Mitigations goal is to list mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the following: Supported Targets We currently support the following operating systems: Microsoft Windows Linux Google […]

The post Exploit_Mitigations : Knowledge Base Of Exploit Mitigations Available Across Numerous Operating Systems, Architectures And Applications And Versions appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video