Exploit Collector
OpenEMR 6.0.0 Insecure Direct Object Reference

https://4.bp.blogspot.com/-gQsa2Au6OFw/WWlvKe9cGFI/AAAAAAAAIME/7MuhuX3Jqy0CeEu0oyVXmXST8BDpKvIGgCLcBGAs/s1600/h15.png
OpenEMR version 6.0.0 suffers from an insecure direct object reference vulnerability.

MD5 | cfdad061a5f147865a0eb5338656760f

Download
# Exploit Title: Openemr 6.0.0 - Insecure direct object references
# Date: 31/8/2021
# Exploit Author: Allen Enosh Upputori
# Vendor Homepage: https://community.open-emr.org
# Version: 6.0.0
# Tested on: Linux
# CVE: 2021-40352

PoC: An attacker who has Physician Access can read messages with were sent to others members including admin messages the vulnerability exits in the print message feature = "pnotes_print.php?noteid=16" changing the "noteid=" to any other number will reveal the messages of everyone

https://github.com/allenenosh/CVE-2021-40352


Source:packetstormsecurity.com

hacking: security in practice
Cisco Equipment Useful In Ethical Hacking?

To summarize, I got my CCNA for a good foundation, and on my study journey I purchased a rack of 6 Cisco Devices (Catalyst 3750 Switches & 1841 Routers, 3 of each). But now I want to become a Pen Tester and I am working on Security + then probably onto CEH once I'm done.

I want to know, should I sell this Cisco hardware for some spare cash? Or would it be useful to keep and use for labs in my Pen Tester journey? I am planning on doing a Security lab with my PC with VM's to practice hacking on. I'm just not sure if this Cisco hardware is worth holding onto while I aim for Pen Tester in my future.

Any feedback will be greatly appreciated, thank you in advance.

submitted by /u/xkayzz
[link] [comments]

hacking: security in practice
A bad-usb but (hopefully) with a twist

Hello all!

​

I've been wondering for a while now if it's possible to create a script or code that you can plant inside a usb to turn into a bad usb which in turn when connected to a computer copies over or downloads all/some files, folders from a certain directory.

For example I connect said usb to a computer and it automatically downloads all files from a certain directory of choice.

​

Question is here ; is it possible but most importantly is it doable?

​

PS: If you couldn't tell I'm an absolute beginner and newb at coding,hacking ,and anything related so please go easy lol.

​

Thank you all in advance!

​

-TJ

submitted by /u/TheJinn2614
[link] [comments]

https://external-preview.redd.it/ciAIzO2b3N-QonHc_Itl9SLWaDZHmjYkal5yIDv6BA8.jpg?width=640&crop=smart&auto=webp&s=21a92ba61ccebf0d749f95ef45bead0760634371 "In 1973, ARPA funds the outfitting of a packet radio research van at SRI to develop standards for a Packet Radio Network (PRNET). As the unmarked van drives through the San Francisco Bay Area, stuffed full of hackers and sometimes uniformed generals, it is pioneering wireless, packet-switched digital networks, including the kind your mobile phone uses today. A related set of experiments test out Voice Over IP (like the later Skype). The van will also play a huge role in 1977 as a major birthplace of the Internet."

https://preview.redd.it/ct4m0nkukxk71.jpg?width=800&format=pjpg&auto=webp&s=65ddbc7cc9f68337f8d1fecd66c61d66044e1a24

https://www.computerhistory.org/timeline/networking-the-web/

Beware: This is a productivity killing rabbit hole of fun images and history.

submitted by /u/BuchoVagabond
[link] [comments]

hacking: security in practice
Raspberry Pi 32-Bit ARM Assembly - Hacking Int #radare2

https://external-preview.redd.it/902Cgj7PiTuGDW-fC4LAgs-RHU2ao-7YvMxO870z6-w.jpg?width=640&crop=smart&auto=webp&s=37dad52bef7097112c2232341de53a8fad93c2e4 submitted by /u/mytechnotalent_com
[link] [comments]

hacking: security in practice
Zoom camera enabler

Is it possible for a host to enable audio and video in a zoom meeting using 3erd party programs, even if the members of the meeting have their audio and video disabled through Zoom?

submitted by /u/Hawk2057
[link] [comments]

Hacking on Medium
Ice — TryHackMe Walkthrough in easy steps using Metasploit

https://cdn-images-1.medium.com/max/1017/1*pwEM3f4QtIxcAcMgRPzK1A.png
Hey, I am Rahul Bhichher a noob in Cyber Security same like you! This is my first write-up about TryHackMe rooms.

Continue reading on NetworkingSec »

Hacking on Medium
Explicando o csrf(Cross-site Request Forgery), o’que e? Como executar? E etc

https://cdn-images-1.medium.com/max/849/1*mgHzeEcVexyTBm_6ZcceaA.png
Nesse artigo explicarei como funciona um csrf e como se faz a verificação de tal falha de segurança.

Continue reading on Medium »

403Bypasser - Automates The Techniques Used To Circumvent Access Control Restrictions On Target Pages
http://www.kitploit.com/2021/09/403bypasser-automates-techniques-used.html

403bypasser automates the techniques used to circumvent access control restrictions (https://www.kitploit.com/search/label/Restrictions) on target pages. 403bypasser will continue to be improved and it is open to contributions.
Installation
Clone the repository to your machine. git clone https://github.com/yunemse48/403bypasser.git Install required modules by running the code pip install -r requirements.txt READY!
Usage
Arguments:
Argument Description Examples Note -u single URL to scan http://example.com (http://example.com/) or http://example.com/ All these example usages are interpreted in the same way -U path to list of URLs ./urllist.txt, ../../urllist.txt, etc. Just provide the path where the file is located :) -d single directory to scan admin or /admin or admin/ or /admin/ All these example usages are interpreted in the same way -D path to list of directories ./dirlist.txt, ../../dirlist.txt, etc. Just provide the path where the file is located :) Usage 1: python3 403bypasser.py -u https://example.com -d /secret
Usage 2: python3 403bypasser.py -u https://example.com -D dirlist.txt
Usage 3: python3 403bypasser.py -U urllist.txt -d /secret
Usage 4: python3 403bypasser.py -U urllist.txt -D dirlist.txt
IMPORTANT NOTE: All the followings are interpreted the same. Therefore, which pattern you use is just a matter of preference. python3 403bypasser.py -u https://example.com -d secret
python3 403bypasser.py -u https://example.com -d /secret
python3 403bypasser.py -u https://example.com -d /secret/
python3 403bypasser.py -u https://example.com -d secret/
python3 403bypasser.py -u https://example.com/ -d secret
ALL THE SAME! Since Python is a cross-platform language, one can run this program on different operating systems.
Output
The output of the program is saved (in the current directory) in a file with the name of the domain name given as input.
For example:
python3 403bypasser.py -u https://example.com -d /secret is given. Then the output is saved to example.txt in the current directory.
Release Notes
Changes in v2.0: Considerable changes have been done in this version. The project is completely moved to Python 3 (https://www.kitploit.com/search/label/Python%203) from Bash. New and wide variety of techniques have been added.

Changes in v1.1: It's now possible to pass files (lists) to 403bypasser (https://www.kitploit.com/search/label/403Bypasser) as input via arguments. Furthermore, two more test cases added: poisoning with 1)X-Original-URL and 2)X-Rewrite-URL headers.
To-Do List
GUI Add Rate-Limit / Threads Option Add an Option for Scan Types (fast, normal, aggressive or only path manipulation (https://www.kitploit.com/search/label/Manipulation) / header manipulation) Export cURL Command for Each Request Add Parameters to Save Output According to HTTP Status Codes Add Parameters to Save Output According to Page Size Anomalies
Which Cases Does This Tool Check?

1. Request Method Manipulation
Convert GET request to POST request
2. Path Manipulation
/%2e/secret /secret/ /secret..;/ /secret/..;/ /secret%20 /secret%09 /secret%00 /secret.json /secret.css /secret.html /secret? /secret?? /secret??? /secret?testparam /secret# /secret#test /secret/. //secret// /./secret/./
3. Overriding the Target URL via Non-Standard Headers
X-Original-URL: /secret X-Rewrite-URL: /secret
4. Other Headers (https://www.kitploit.com/search/label/Headers) & Values
Headers: X-Custom-IP-Authorization X-Forwarded-For X-Forward-For X-Remote-IP X-Originating-IP X-Remote-Addr X-Client-IP X-Real-IP Values: localhost localhost:80 localhost:443 127.0.0.1 127.0.0.1:80 127.0.0.1:443 2130706433 0x7F000001 0177.0000.0000.0001 0 127.1 10.0.0.0 10.0.0.1 172.16.0.0 172.16.0.1 192.168.1.0 192.168.1.1

Download 403Bypasser (https://github.com/yunemse48/403bypasser)

403Bypasser - Automates The Techniques Used To Circumvent Access Control Restrictions On Target Pages

403bypasser automates the techniques used to circumvent access control restrictions on target pages. 403bypasser will continue to be improved and it is open to contributions.Installation Clone the repository to your machine. git clone https://github.com/yunemse48/403bypasser.git Install required modules by running the code pip install -r requirements.txt READY! Usage Arguments: Argument Description Examples Note -u single URL to scan http://example.com or http://example.com/ All these example usages are interpreted in the same way -U path to list of URLs ./urllist.txt, ../../urllist.txt, etc. Just provide the path where the file is located :) -d single directory to scan admin or /admin or admin/ or /admin/ All these example usages are interpreted in the same way -D path to list of directories ./dirlist.txt, ../../dirlist.txt, etc. Just provide the path where the file is located :) Usage 1: python3 403bypasser.py -u https://example.com -d /secret Usage 2: python3 403bypasser.py -u https://example.com -D dirlist.txt Usage 3: python3 403bypasser.py -U urllist.txt -d /secret Usage 4: python3 403bypasser.py -U urllist.txt -D dirlist.txt IMPORTANT NOTE: All the followings are interpreted the same. Therefore, which pattern you use is just a matter of preference. python3 403bypasser.py -u https://example.com -d secret python3 403bypasser.py -u https://example.com -d /secret python3 403bypasser.py -u https://example.com -d /secret/ python3 403bypasser.py -u https://example.com -d secret/ python3 403bypasser.py -u https://example.com/ -d secret ALL THE SAME! Since Python is a cross-platform language, one can run this program on different operating systems. Output The output of the program is saved (in the current directory) in a file with the name of the domain name given as input. For example: python3 403bypasser.py -u https://example.com -d /secret is given. Then the output is saved to example.txt in the current directory. Release Notes Changes in v2.0: Considerable changes have been done in this version. The project is completely moved to Python 3 from Bash. New and wide variety of techniques have been added. Changes in v1.1: It's now possible to pass files (lists) to 403bypasser as input via arguments. Furthermore, two more test cases added: poisoning with 1)X-Original-URL and 2)X-Rewrite-URL headers. To-Do List GUI Add Rate-Limit / Threads Option Add an Option for Scan Types (fast, normal, aggressive or only path manipulation / header manipulation) Export cURL Command for Each Request Add Parameters to Save Output According to HTTP Status Codes Add Parameters to Save Output According to Page Size Anomalies Which Cases Does This Tool Check? 1. Request Method Manipulation Convert GET request to POST request 2. Path Manipulation /%2e/secret /secret/ /secret..;/ /secret/..;/ /secret%20 /secret%09 /secret%00 /secret.json /secret.css /secret.html /secret? /secret?? /secret??? /secret?testparam /secret# /secret#test /secret/. //secret// /./secret/./ 3. Overriding the Target URL via Non-Standard Headers X-Original-URL: /secret X-Rewrite-URL: /secret 4. Other Headers & Values Headers: X-Custom-IP-Authorization X-Forwarded-For X-Forward-For X-Remote-IP X-Originating-IP X-Remote-Addr X-Client-IP X-Real-IP Values: localhost localhost:80 localhost:443 127.0.0.1 127.0.0.1:80 127.0.0.1:443 2130706433 0x7F000001 0177.0000.0000.0001 0 127.1 10.0.0.0 10.0.0.1 172.16.0.0 172.16.0.1 192.168.1.0 192.168.1.1 Download 403Bypasser
Read more...

hacking: security in practice
My pc might have a virus

So about a month ago I invited some friends over I got really drunk and my dumbass decided to launch tor and browse the dark web a little while I was pretty drunk, I don't remember a lot what I did on there but I browsed a little. Now every time load my pc up command prompt pops up for a few seconds then disappears. Am I doomed?

submitted by /u/-GalaxySushi-
[link] [comments]