Account Takeover (User + Admin) Via Password Reset

Hello Everyone!
Read more...

P1: Easy Access to Grafana Dashboard

Hey folks,
Read more...

Hacking on Medium
HackTheBox — BountyHunter

https://cdn-images-1.medium.com/max/600/1*EB0GvJNmCH3NEXR0rwCtDw.png
So this is my write-up on one of the HackTheBox machines called BountyHunter. Let’s go!

Continue reading on Medium »

Hacking on Medium
What is Managed Detection and Response?

https://cdn-images-1.medium.com/max/1600/0*YXfkFoYDa2rBgE8e
The Benefits, How it’s Different, How to Choose a Vendor, and More

Continue reading on CyCraft »

Hacking on Medium
WriteUp — Hack The Box : Love

https://cdn-images-1.medium.com/max/1890/0*hXNLRySeMKEyp2v4
Hi readers, this is my first writeup for one of the machine on Hack The Box called Love. Hack The Box is an online cyber security training…

Continue reading on Medium »

Deep Web
One Question On Fake I.D.s

So I was wondering could I acquire a fake Driver license. You know for the occasional journey of life and when stopped by our wonderful law enforcers. Could there be an fake ID to creep under there scope.

Yeah yeah I know the bad and the ugly of the scenario but is it a possibility?

submitted by /u/wanna-be-bat
[link] [comments]

Black Hat Ethical Hacking
Critical Cisco Bug in VPN Routers Allows Remote Takeover

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Critical Cisco Bug in VPN Routers Allows Remote TakeoverPost Views: 82
Reading Time: 1 Minute
A critical security vulnerability in a subset of Cisco Systems’ small-business VPN routers could allow a remote, unauthenticated attacker to take over a device, and researchers said there are at least 8,800 vulnerable systems open to compromise.
Cisco addressed the bugs (CVE-2021-1609) as part of a slew of patches rolled out this week. In total, the fixes and affected products are as follows:

* Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnerabilities (advisory)
* Cisco Small Business RV160 and RV260 Series VPN Routers Remote Command Execution Vulnerability (advisory)
* Cisco Packet Tracer for Windows DLL Injection Vulnerability (advisory)
* Cisco Network Services Orchestrator CLI Secure Shell Server Privilege Escalation Vulnerability (advisory)
* ConfD CLI Secure Shell Server Privilege Escalation Vulnerability (advisory)
See Also: Black Hat: ‘I’m Calling About Your Car Warranty’, aka PII Hijinx Critical RCE Security Bug in Gigabit VPN RoutersThe critical bug affects the vendor’s Dual WAN Gigabit VPN routers. According to the advisory, CVE-2021-1609 exists in the web management interface for the devices, and carries a CVSSv3 vulnerability-severity score of 9.8. It arises due to improper validation of HTTP requests.

According to a Thursday analysis from Tenable, a remote, unauthenticated attacker could thus exploit the vulnerability by sending a specially crafted HTTP request to a vulnerable device, “resulting in arbitrary code-execution as well as the ability to reload the device, resulting in a denial of service (DoS).”

Remote management of these devices is disabled by default according to Cisco, which would thwart such attacks. However, researchers at Tenable found that more than 8,800 devices are publicly accessible and vulnerable to exploit.

Meanwhile, a second bug affecting the same devices, CVE-2021-1610, is a high-rated command-injection vulnerability in the same web management interface.

“While both flaws exist due to improper validation of HTTP requests and can be exploited by sending specially crafted HTTP requests, CVE-2021-1610 can only be exploited by an authenticated attacker with root privileges,” according to Tenable. “Successful exploitation would grant an attacker the ability to gain arbitrary command execution on the vulnerable device’s operating system.”

The web management interface for its small business VPN routers is available by default through local area network connections and can’t be disabled, Cisco noted, adding that that some versions of the router software may only be affected by one of the two vulnerabilities.
See Also: Offensive Security Tool: Mimikatz Though no in-the-wild exploitation has been seen thus far for the bugs, Tenable warned that this is likely to change.

“In January 2019, Cisco published advisories for two different vulnerabilities in its RV320 and RV325 WAN VPN routers,” according to the analysis. “A few days after the advisories were published, proof-of-concept exploit scripts for these flaws were published, which was followed by active scanning for vulnerable devices. Because of this historical precedent, we believe it is important that organizations patch these latest vulnerabilities as soon as possible.”

If patching isn’t possible, users should make sure that remote web management is disabled, the firm added. High-Severity Cisco Security BugsCisco also addressed severa[...]

hacking: security in practice
Chanel Korea issues apology over customer data leak

https://external-preview.redd.it/7vxqj9UpWIiwsIKVtUCJ3MuslTcknP7Y7-VOZAWVvSo.jpg?width=320&crop=smart&auto=webp&s=d1001e8941de79c6b2a0acb501b161970356fd7b submitted by /u/kimchifriedhard
[link] [comments]

Find XSS in wide scope with kxss

in this article we talk about automated testing to find xssContinue reading on Medium »
Read more...

KitPloit - PenTest Tools!
Sigurlfind3R - A Reconnaissance Tool, It Fetches URLs From AlienVault's OTX, Common Crawl, URLScan, Github And The Wayback Machine

https://1.bp.blogspot.com/-6OPBPLmRp2w/YRCq1Im8lOI/AAAAAAAApr0/igeIZQYnNN4TnM-XCi_fJl2lb6d6jetcwCNcBGAsYHQ/w640-h446/sigurlfind3r.png
sigurlfind3r is a passive reconnaissance tool, it fetches known URLs from AlienVault's OTX, Common Crawl, URLScan, Github and the Wayback Machine.

DiSCLAIMER: fetching urls from github is a bit slow.
Usage

sigurlfind3r -h

This will display help for the tool.

_ _ __ _ _ _____
___(_) __ _ _ _ _ __| |/ _(_)_ __ __| |___ / _ __
/ __| |/ _` | | | | '__| | |_| | '_ \ / _` | |_ \| '__|
\__ \ | (_| | |_| | | | | _| | | | | (_| |___) | |
|___/_|\__, |\__,_|_| |_|_| |_|_| |_|\__,_|____/|_| v1.2.0
|___/

USAGE:
sigurlfind3r [OPTIONS]

OPTIONS:
-d, --domain domain to fetch urls for
-eS, --exclude-sources comma(,) separated list of sources to exclude
-f, --filter URL filtering regex
-iS, --include-subs include subdomains' urls
-lS, --list-sources list all the available sources
-nC, --no-color no color mode
-s --silent silent mode: output urls only
-uS, --use-sources comma(,) separated list of sources to use


Examples

Basic

sigurlfind3r -d tesla.com

Include Subdomains

sigurlfind3r -d tesla.com -is

Regex filter out URLs

sigurlfind3r -d tesla.com -f ".(jpg|jpeg|gif|png|ico|css|eot|tif|tiff|ttf|woff|woff2)"

Installation

From Binary

You can download the pre-built binary for your platform from this repository's releases page, extract, then move it to your $PATHand you're ready to go.

From Source

sigurlfind3r requires go1.14+ to install successfully. Run the following command to get the repo

GO111MODULE=on go get -u -v github.com/signedsecurity/sigurlfind3r/cmd/sigurlfind3r

From Github

git clone https://github.com/signedsecurity/sigurlfind3r.git && \
cd sigurlfind3r/cmd/sigurlfind3r/ && \
go build; mv sigurlfind3r /usr/local/bin/ && \
sigurlfind3r -h

Post Installation

sigurlfind3r will work after installation. However, to configure sigurlfind3r to work with certain services - currently github - you will need to have setup API keys. The API keys are stored in the $HOME/.config/sigurlfind3r/conf.yamlfile - created upon first run - and uses the YAML format. Multiple API keys can be specified for each of these services.

Example:

version: 1.1.0
sources:
- commoncrawl
- github
- otx
- urlscan
- wayback
keys:
github:
- d23a554bbc1aabb208c9acfbd2dd41ce7fc9db39
- asdsd54bbc1aabb208c9acfbd2dd41ce7fc9db39

Contribution

Issues and Pull Requests are welcome!
Download Sigurlfind3R

Hacking on Medium
“Làm việc với … kiểu gì cũng lên chức đã là truyền thống”

Bài này nói về một sự kiện một công ty an ninh mạng hàng đầu của một nước bị hack. Câu trên là của vị Tổng giám đốc công ty đó, khi chat…

Continue reading on Medium »

Hacking on Medium
Prevention is the only cure to stay digitally safe…!!!

https://cdn-images-1.medium.com/max/600/1*Dd9UpvopmsZHHvxpjKjA9w.jpeg
Hello Readers, I am Prinal back again with the most vital topic i.e. Mobile Safety.

Continue reading on Medium »