hacking: security in practice
Can't get PCUnlocker to boot

I'm trying to unlock a forgotten password Windows 10 machine. I tried using Ubuntu live, but ran into road blocks and caved and bought PCUnlocker. Thing is, the PC is resisting to boot to the USB drive with the iso on it. I've screwed around with the various BIOS settings related to secure boot, UEFI vs legacy, etc, but nothing seems to work. Any suggestions?

submitted by /u/Mastiff37
[link] [comments]

Deep Web
Chainalysis is using walletexplorer.com honeypot to track and arrest bitcoin users - DarkWebLink

https://external-preview.redd.it/p860tkD8V9hiEjIBLMT-fn2NP4q7visageumGLwx4Hs.jpg?width=320&crop=smart&auto=webp&s=d6a5154084a57db873b643a8aef017c1dd5e771f submitted by /u/Demslo
[link] [comments]

Hacking on Medium
Common Cyber Security Threats, And How To Protect Yourself

https://cdn-images-1.medium.com/max/600/0*DfkEqx7_ck2G6CAh.jpg
Naturally devices which are constantly connected to the internet and sending information to one-another and to you wherever you are in the…

Continue reading on Medium »

Hacking on Medium
Hack This Site: Basic Web Challenges — Level 7

https://cdn-images-1.medium.com/max/1237/1*pnP2DHhY5fv1ZIZoJQ-RZw.png
Today we’re looking at Hack This Site Basic Web Challenge 7. This challenge requires performing command injection to complete it. If you…

Continue reading on Medium »

Hacking on Medium
Microsoft advierte sobre una operación de suplantación de identidad como servicio a gran escala

https://cdn-images-1.medium.com/max/944/0*4VArZHqZGCyzp_kO
PUBLICADO EN 23 SEPTIEMBRE, 2021POR EHACKING

Continue reading on Medium »

Hacking on Medium
VP Techno Labs™ Hailed as One of India’s Most Recommended Cybersecurity Company

Thinking about the past two years brings us joy. Can you imagine that it has already been two years since we’ve embarked on this journey…

Continue reading on Medium »

Hacking on Medium
Hacking your mind — Mindfulness Journey from a hacker perspective

https://cdn-images-1.medium.com/max/2600/0*-FSfeN9kS_m8cfVB
Intro

Continue reading on Medium »

Exploit Collector
WordPress Fitness Calculators 1.9.5 Cross Site Request Forgery

https://4.bp.blogspot.com/-4IgemuXxvlQ/WWlvJOAjEHI/AAAAAAAAIL4/GJdo6H5fQo4z7HKyurc-fIH3InSyWxX3gCLcBGAs/s1600/h145.png
WordPress Fitness Calculators plugin version 1.9.5 suffers from a cross site request forgery vulnerability.

MD5 | 30ca373f3886f6f98013bb82a0a42e7c

Download
# Exploit Title: WordPress Plugin Fitness Calculators 1.9.5 - Cross-Site Request Forgery (CSRF)
# Date: 2/28/2021
# Author: 0xB9
# Software Link: https://wordpress.org/plugins/fitness-calculators/
# Version: 1.9.5
# Tested on: Windows 10
# CVE: CVE-2021-24272

1. Description:
The plugin add calculators for Water intake, BMI calculator, protein Intake, and Body Fat and was lacking CSRF check, allowing attackers to make logged in users perform unwanted actions, such as change the calculator headers.
Due to the lack of sanitisation, this could also lead to a Stored Cross-Site Scripting issue

2. Proof of Concept:

Source:packetstormsecurity.com

Exploit Collector
Backdrop CMS 1.20.0 Cross Site Request Forgery / Command Execution

https://1.bp.blogspot.com/-HlvbbOwsdTc/WWlvV_wSsQI/AAAAAAAAIOA/psrlTyexNtUDdre2JEY7YvqsGP1V8LJKQCLcBGAs/s1600/h47.png
Backdrop CMS version 1.20.0 suffers from cross site request forgery vulnerabilities that can assist an attacker in achieving command execution.

MD5 | 2e44ed7c8aa4c0431592175c5c6161c9

Download
# Exploit Title: Backdrop CMS 1.20.0 - 'Multiple' Cross-Site Request Forgery (CSRF)
# Exploit Author: V1n1v131r4
# Date: 2021-09-22
# Vendor Homepage: https://backdropcms.org/
# Software Link: https://github.com/backdrop/backdrop/releases/download/1.20.0/backdrop.zip
# Version: 1.20.0
# Tested On: Kali Linux, Ubuntu 20.04
# Description: Backdrop CMS suffers from an Cross-site Request Forgery Vulnerability allowing Remote Attackers to add new user with Admin powers.
# Description: Backdrop CMS suffers from an Cross-site Request Forgery Vulnerability allowing Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading a maliciously add-on with crafted PHP file.
# Step 1
# Send this page below to the victim
Run on your browser: http://example.com/backdrop/modules/reference/shell.php?cmd=[command] to execute remote commands.

Source:packetstormsecurity.com