Exploit Collector
Storage Unit Rental Management System 1.0 Shell Upload

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress Redirect 404 To Parent 1.3.0 Cross Site Scripting

https://2.bp.blogspot.com/-QRNaohEgzXY/WWlvKewId7I/AAAAAAAAIL8/tdiAF5DdWR4NRfdTdLr92btKcmbTDzxHQCLcBGAs/s1600/h147.png
WordPress Redirect 404 to Parent plugin version 1.3.0 suffers from a cross site scripting vulnerability.

MD5 | fe80817732bac3745bcaa4890e839962

Download
# Exploit Title: WordPress Plugin Redirect 404 to Parent 1.3.0 - Reflected Cross-Site Scripting (XSS)
# Date: 2/3/2021
# Author: 0xB9
# Software Link: https://downloads.wordpress.org/plugin/redirect-404-to-parent.1.3.0.zip
# Version: 1.3.0
# Tested on: Windows 10
# CVE: CVE-2021-24286

1. Description:
This plugin redirects any 404 request to the parent URL. The tab parameter in the Admin Panel is vulnerable to XSS.

2. Proof of Concept:
wp-admin/options-general.php?page=moove-redirect-settings&tab="+style=animation-name:rotation+onanimationstart="alert(/XSS/);

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

h@cktivitycon 2021 CTF writeup: Reactor Android Challenge

Hey there, HackerOne hosted h@activitycon 2021 CTF a few weeks back. I got time to play around with a few challenges. Here is the write-up…
Read more...

Dark Reading: Attacks/Breaches
Sneaky Android Trojan Siphons Millions Using Premium SMS

More than 200 applications on the Google Play store have, until recently, allowed cybercriminals to deliver malicious Web content to victims' phones, likely garnering tens of millions of dollars.

Dark Reading: Attacks/Breaches
3 Security Initiatives AWS's New CEO Should Prioritize

As Adam Selipsky takes the helm at Amazon Web Services, security must be one of the first things he addresses. Here are three initiatives that should take priority.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
DAST to the Future: Shifting the Modern AppSec Paradigm

NTT Application Security's Modern AppSec Framework takes a DAST-first approach to defend applications where breaches happen — in production.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Why Should I Care About HTTP Request Smuggling?

HTTP request smuggling is a growing vulnerability, but you can manage the risk with proper server configuration.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Russian Officials Arrest Group-IB CEO, Accuse Him of Treason

Ilya Sachkov, founder and CEO of the massive cybersecurity firm, was arrested on treason charges and will be in custody for two months.

___________________________
@hacking_Attack
@Hacking_Video

h@cktivitycon 2021 CTF writeup: Reactor Android Challenge
https://infosecwriteups.com/h-cktivitycon-2021-ctf-writeup-reactor-android-challenge-85d1d03d4502?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey there, HackerOne hosted h@activitycon 2021 CTF a few weeks back. I got time to play around with a few challenges. Here is the write-up…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/h-cktivitycon-2021-ctf-writeup-reactor-android-challenge-85d1d03d4502?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

De OWASP Top10:2021 werd zopas bekendgemaakt!
https://medium.com/@sustronck-o/de-owasp-top10-2021-werd-zopas-bekendgemaakt-eb8a1b87ee93?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Vandaag werd de nieuwe OWASP Top 10 bekendgemaakt. De OWASP top 10 is de hitlijst van de meest voorkomende en meest kwetsbare…Continue reading on Medium » (https://medium.com/@sustronck-o/de-owasp-top10-2021-werd-zopas-bekendgemaakt-eb8a1b87ee93?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
MailRipV2 : Improved SMTP Checker / SMTP Cracker With Proxy-Support, Inbox Test And Many More Features

MailRipV2 is a SMTP checker / SMTP cracker written in Python 3.8. Using the “smtplib”, it allows you to check common mailpass combolists for valid SMTP logins. It has included dictionaries and lists containing details of common email providers as well as most common ports used for SMTP servers. In case any data is missing, “dnspython” is used to lookup unknown SMTP hosts in MX records.

Moreover, Mail.Rip V2 comes with SOCKS-proxy support including a proxy-scraper and checker function. If the proxy-support is activated, the checker / cracker scrapes SOCKS4 or SOCKS5 proxys from common online sources and will check the results, then.. The working proxys will be used randomly. And you can add new sources by editing the library.json at any time.

Last but not least, Mail.Rip V2 includes an email delivery test / inbox check for found SMTP logins. For every valid combo, it tries to send a plain text email with the found SMTP login. All test messages are sent to your own user-defined receiving address whereby the content of the test emails is generated randomly. The templates can be edited in the “library.json”, too.

Mail.Rip V2 is full functional and ready to use! How To Use Mail.Rip V2

Mail.Rip V2 has been written and tested with Python 3.8. It should run on any OS as long as Python and all dependencies are installed.
Just follow the steps below! Installing Needed Python Modules

All Python modules / packages needed are listed in the txt-file requirements.txt. For an easy installation, type:

pip3 install -r requirements.txt

Installing any missing dependencies may take some time. Be patient, please. Start the Checker / Cracker

With all dependencies being installed, you can start Mail.Rip V2 with:

python3 MailRipV2.py

No extra arguments are needed. You only need to copy your combofile into the same directory before starting the checker / cracker. After starting it, just follow the steps from (1) to (4). For more information see “Options in Main Menu”.

Please regard:
Your combofile needs to be encoded with utf-8! Any other encoding may cause errors. Options in Main Menu

Set Default Values

Use this option to edit the default values for Mail.Rip V2. You can edit the following here:

* Amount of threads to use for checking / cracking.
* Default timeout for connections.
* De-/activate the blacklist check for email domains.
* Set your email address as receiver for test messages.

De-/Activate Proxy-Support

This option allows you to activate or deactivate the proxy-support. If activated, you will be asked for the proxy-type to use. Just enter SOCKS4 or SOCKS5. The scraper starts automatically then. You can add more sources by editing the library.json. After the scraping is done, you will be asked whether you want to skip the checker. DO NOT SKIP THE CHECKER except you really, really need to start an attack immediately.

Load Combos

Option #3 starts the Comboloader. Enter the name of your combofile, for example: combos.txt. All combos in the file will be loaded and prepared for an attack. Therefor, the Comboloader performs the following steps:

* Any other separator than “:” is replaced.
* The email address in the combo is verified by its format using regular expressions.
* For verified email addresses, the domain is checked against the blacklist included in library.json.
* Then, the loader checks whether it has already loaded the given combo before (duplicates check).

All combos passing the checks will be loaded for an attack and saved to a txt-file called targets.txt. Please make sure that your combofile is encoded with utf-8 or errors may occur.

Start Attack

This one is obvious. Various

See the sections below for any tips, hints and other information. SMTP cracking / SMTP[...]

___________________________
@hacking_Attack
@Hacking_Video

checking process

Mail.Rip V2 uses the smtplib for the checking / cracking process. The “magic” is done this way:

1. The SMTP cracker / SMTP checker reads the next combo from the list loaded.
2. It looks up the email domain in the “smtphost” dictionary for the SMTP-host to attack.
3. For unknown hosts, it will try to get the address from the MX records of the email domain.
4. The connection port for host found in MX records is searched using the most common ones in a trial and error process.
5. Afterwards it establishes a connection to the SMTP host (trying SSL and non-SSL as well as TLS)
6. and sends the login data using the target email address and the given password from the combo.
7. If the login is denied, the cracker / checker will try to login with the user-ID (email without @…) and the password.
8. In case the login data is valid, the so-called “hit” will be saved to a txt-file.
9. In the end Mail.Rip V2 will try to send a test message to you using the found SMTP.

For best results every user should edit the host information in the library.json before starting Mail.Rip V2 the first time. Adding the data of the most common e-mail providers in a combolist will always speed up the checking / cracking process. And it will probably raise less security flags on the server-side.

Other ways to improve your results are: deactivating the proxy-support and adjusting default values. In fact, IT IS RECOMMENDED TO LEAVE THE PROXY-SUPPORT DEACTIVATED. Without using proxys, you will receive much better results – for the checker as well as for the inbox check. Notes on the email delivery test (inbox check)

The email content is generated randomly using templates in the “library.json”. Edit those templates for your needs. Editing the templates from time to time will provide a higher success rate.

Always regard that the email delivery test may return false negative results for many reasons. It just confirms that the given SMTP host can be used for sending emails with any software. Well-known email providers may block or restrict access to SMTP accounts, especially for tools like Mail.Rip V2. Moreover, free proxys may be blacklisted as well as the certain SMTP account itself. You should test valid logins for which the delivery test failed again after the attack has been finished. Notes on the blacklist check

The library.json includes a blacklist for email domains. More than 500 trashmail domains have been added to it. But there are also some very popular email providers on it. Those email providers are most often a waste of time when you check or crack mailpass combolists. Sometimes they just block the access, sometimes they ask for further verification.

If you want to attack those providers, too, edit the blacklist for your needs. Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
PyHook : An Offensive API Hooking Tool Written In Python Designed To Catch Various Credentials Within The API Call

PyHook is the python implementation of my SharpHook project, It uses various API hooks in order to give us the desired credentials.

PyHook Uses frida to inject it’s dependencies into the target process

Supported Processes
ProcessAPI CallDescriptionProgressmstscCredUnPackAuthenticationBufferWHooks CredUnPackAuthenticationBufferWfrom mstsc and outputs username and passwordDONErunasCreateProcessWithLogonWHooks CreateProcessWithLogonWfrom runas and outputs username, password and a domain name.DONEPowerShellCreateProcessWithLogonWHooks CreateProcessWithLogonWfrom PowerShell and outputs username, password and a domain name (e.g – Start-Process cmd -Credential X).DONEcmdRtlInitUnicodeStringExHooks RtlInitUnicodeStringExfrom cmd and outputs data from specific filters (e.g – “-p”, “password” etc).DONEMobaXtermCharUpperBuffAHooks CharUpperBuffAfrom MobaXterm and outputs credentials for RDP and SSH logins.DONEexplorer (UAC Prompt)CredUnPackAuthenticationBufferWHooks CredUnPackAuthenticationBufferWfrom explorer and outputs username, password and a domain name.DONE
Demo
https://1.bp.blogspot.com/-D-SlOzbfFoc/YUyIvQz82fI/AAAAAAAAK7w/GcCmDfkzD4kh6NBzWbqwDeV8fErPB49tgCLcBGAsYHQ/s1756/Demo.gif

Download

___________________________
@hacking_Attack
@Hacking_Video