Ligolo-ng: An advanced, yet simple, tunneling tool that uses a TUN interface.
https://www.reddit.com/r/redteamsec/comments/otagu1/ligolong_an_advanced_yet_simple_tunneling_tool/

submitted by /u/TNPitsecurity (https://www.reddit.com/user/TNPitsecurity)
[link] (https://github.com/tnpitsecurity/ligolo-ng) [comments] (https://www.reddit.com/r/redteamsec/comments/otagu1/ligolong_an_advanced_yet_simple_tunneling_tool/)

Good all in one source for walkthroughs on the latest Windows RCE and LPE exploits?
https://www.reddit.com/r/Pentesting/comments/ot86cr/good_all_in_one_source_for_walkthroughs_on_the/

<!-- SC_OFF -->I’ve got some free time over the next two days and need to catch up on the latest Windows RCE and LPE exploits. Anyone know of a good blogger or streamer that covers all/most of them with walkthroughs? Of course I can Google it, just wondering if anyone had found one good source of this type of thing vs wading through countless search results. <!-- SC_ON --> submitted by /u/subsonic68 (https://www.reddit.com/user/subsonic68)
[link] (https://www.reddit.com/r/Pentesting/comments/ot86cr/good_all_in_one_source_for_walkthroughs_on_the/) [comments] (https://www.reddit.com/r/Pentesting/comments/ot86cr/good_all_in_one_source_for_walkthroughs_on_the/)

Guide to Web Application Penetration Testing.
https://www.reddit.com/r/Pentesting/comments/ot8ncr/guide_to_web_application_penetration_testing/

<!-- SC_OFF -->We have covered the process of Penetration Testing in other articles, today we are taking a deeper look at an important type of Penetration testing which is Web Application Penetration Testing. Right from what it is to the steps and methods to perform it, here is your complete guide to Web Application Penetration Testing. ​ https://preview.redd.it/vmq9nqh83yd71.png?width=512&format=png&auto=webp&s=9637bc534d4962c6b36f9e0bdbeb0c9476d432dc Web Application Penetration Testing (https://www.vistainfosec.com/blog/guide-to-web-application-penetration-testing/) is a type of ethical hacking engagement which is designed to test the security, architecture, design and configuration of web applications. This process to the web application or the underlying web server / database identifies Cyber Security threats that could lead to unauthorized users gaining low-level access leading to confidential information being leaked. <!-- SC_ON --> submitted by /u/stephen90147 (https://www.reddit.com/user/stephen90147)
[link] (https://www.reddit.com/r/Pentesting/comments/ot8ncr/guide_to_web_application_penetration_testing/) [comments] (https://www.reddit.com/r/Pentesting/comments/ot8ncr/guide_to_web_application_penetration_testing/)

hacking: security in practice
Password cracking - sequential vs random

Is it generally faster to try to brute force a password sequentially (aaaaaaaa, aaaaaaab, etc.) or just randomly?

I'd have thought guessing randomly would be more likely to stumble on the correct password than sequentially doing so but haven't been able to find any info about this?

submitted by /u/53uhwGe6JGCw
[link] [comments]

hacking: security in practice
How to deaktivate Windows Defender

So I have this computer and I wanna get the admin password. I tryed to use a boot USB-Stick and change the utilman.exe with the cmd.exe, so i could change the password later on, as i did a few times before.

But the problem now is that Windows Defender blocks it. When i try to open it, Windows Defender delets the utilman.exe (cmd.exe copy). I tryed to change the register and set the CmdLine and the SetupType, but the pc won't start. I also tryed to edit utilman.exe over the registery, but when i do that and click on it, windows defender just deleats the dword. I realy ned help and sorry for my bad english

Edit: I also tryed secureboot, but when i do that, the consol will close it sealf again after 0,5-1s

submitted by /u/Inspector_Hairy
[link] [comments]

Cross Site Scripting (XSS)
https://akash-venky091.medium.com/cross-site-scripting-xss-c52256c2d7?source=rss------bug_bounty-5

Ethical hackingContinue reading on Medium » (https://akash-venky091.medium.com/cross-site-scripting-xss-c52256c2d7?source=rss------bug_bounty-5)

Answer to the XSS Trick
https://securitygoat.medium.com/answer-to-the-xss-trick-f6db5e5c94ad?source=rss------bug_bounty-5

Let’s learn an interesting XSS trick and why it works :) It will help you bypass WAFs for sure*! A star has to be there, for obvious…Continue reading on Medium » (https://securitygoat.medium.com/answer-to-the-xss-trick-f6db5e5c94ad?source=rss------bug_bounty-5)

Cross Site Scripting (XSS)

Ethical hackingContinue reading on Medium »
Read more...

Answer to the XSS Trick

Let’s learn an interesting XSS trick and why it works :) It will help you bypass WAFs for sure*! A star has to be there, for obvious…Continue reading on Medium »
Read more...

Exploit Collector
eGain Chat 15.5.5 Cross Site Scripting

https://4.bp.blogspot.com/-gp6vAY2GXMM/WWlvG3cWkQI/AAAAAAAAILY/aMDesAGFEocqJU-7SaIaO870_Bbf2ZUHACLcBGAs/s1600/h139.png
eGain Chat version 15.5.5 suffers from a cross site scripting vulnerability.

MD5 | 8f713683de3e61e3153e8052e40aa17b

Download
# Exploit Title: eGain Chat 15.5.5 Cross-Site Scripting
# Vendor Homepage: https://www.egain.com/
# Software Link: https://www.egain.com/chat-software/
# Exploit Authors: Brandon Ming Yang Ho (https://www.linkedin.com/in/minhobrandon/), Hassy Vinod Eshan (https://www.linkedin.com/in/hassy-vinod/)
# CVE: CVE-2020-15948

# Timeline

- June 2020: Initial vulnerability discovery
- July 2020: Reported to eGain Corporation
- August 2020: Fix/patch provided by eGain Corporation
- September 2020: Public disclosure notified to eGain Corporation
- July 2021: Published CVE-2020-15948

# 1. Introduction

eGain Chat is a real time chat assistance solution by eGain Corporation for website visitors to communicate with chat agents.

# 2. Vulnerability Details

eGain Chat version 15.5.5 is vulnerable to reflected Cross-Site Scripting (Reflected XSS).

The “Name” input field (full_name) does not fully sanitise user input for special characters such as “<”” and HTML attributes such as “”. It is possible for an attacker to bypass filtering and create malicious scripts. Once the response has been rendered, the malicious JavaScript code would be executed.

# 3. Proof of Concept

The “Name” input field (full_name) of the chat window can be injected with the following XSS payload as a Proof of Concept to execute a javascript alert popup.

Payload - click

# 4. Remediation

Apply the latest fix/patch from eGain Corporation.

# 5. Credits

- Brandon Ming Yang Ho (https://www.linkedin.com/in/minhobrandon/)
- Hassy Vinod Eshan (https://www.linkedin.com/in/hassy-vinod/)

Source:packetstormsecurity.com
➖ Sent by @TheFeedReaderBot ➖

Exploit Collector
TripSpark VEO Transportation SQL Injection

https://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png
TripSpark VEO Transportation suffers from a remote blind SQL injection vulnerability.

MD5 | 189e05e837b3360b20c7fe7a7553e8e5

Download
# Exploit Title: Splinterware System Scheduler Professional 5.30 - Unquoted Service Path
# Date: 2021-05-11
# Exploit Author: Andrea Intilangelo
# Vendor Homepage: https://www.splinterware.com
# Software Link: https://www.splinterware.com/download/ssproeval.exe
# Version: 5.30 Professional
# Tested on: Windows 10 Pro 20H2 x64

System Scheduler Professional 5.30 is subject to privilege escalation due to insecure file permissions, impacting
where the service 'WindowsScheduler' calls its executable. A non-privileged user could execute arbitrary code with
elevated privileges (system level privileges as "nt authority\system") since the service runs as Local System;
renaming the WService.exe file located in the software's path and replacing it with a malicious file, the new one
will be executed after a short while.

C:\Users\test>sc qc WindowsScheduler
[SC] QueryServiceConfig OPERAZIONI RIUSCITE

NOME_SERVIZIO: WindowsScheduler
TIPO : 10 WIN32_OWN_PROCESS
TIPO_AVVIO : 2 AUTO_START
CONTROLLO_ERRORE : 0 IGNORE
NOME_PERCORSO_BINARIO : C:\PROGRA~2\SYSTEM~1\WService.exe
GRUPPO_ORDINE_CARICAMENTO :
TAG : 0
NOME_VISUALIZZATO : System Scheduler Service
DIPENDENZE :
SERVICE_START_NAME : LocalSystem

C:\Users\test>icacls C:\PROGRA~2\SYSTEM~1\
C:\PROGRA~2\SYSTEM~1\ BUILTIN\Users:(RX,W)
BUILTIN\Users:(OI)(CI)(IO)(GR,GW,GE)
NT SERVICE\TrustedInstaller:(I)(F)
NT SERVICE\TrustedInstaller:(I
Source:packetstormsecurity.com
➖ Sent by @TheFeedReaderBot ➖