Hacking on Medium
Simulating the Log4j Exploit to Hack a Server

https://cdn-images-1.medium.com/max/2600/1*owXEaRJGtAEHRFa-Jaa7Xw.jpeg
This proof of concept provides a window into tools like netcat, Docker, and VirtualBox.

Continue reading on Medium »

Hacking on Medium
Accessing GoDaddy internal instance through an email logic bug.

https://cdn-images-1.medium.com/max/1916/1*WXGxctUzMe7AR3rSrWjFDQ.png
Hey All,

Continue reading on Medium »

Accessing GoDaddy internal instance through an email logic bug.

Hey All,Continue reading on Medium »
Read more...

Exploit Collector
Projeqtor 9.3.1 Cross Site Scripting

https://4.bp.blogspot.com/-ILIpsq3JVDo/WWlvQ8IjxbI/AAAAAAAAINI/veR2GTC9zzcP6cUZEvOZqGdUDt2RtL0uQCLcBGAs/s1600/h32.png
Projeqtor version 9.3.1 suffers from a persistent cross site scripting vulnerability leveraging an svg file.

MD5 | a0504e54b3a4143120a1026a0d2895d5

Download
# Exploit Title: Projeqtor v9.3.1 Stored XSS / Privilege Escalation
# Exploit Author: Oscar Gutierrez (m4xp0w3r)
# Date: January 4, 2021
# Vendor Homepage: https://www.projeqtor.org/en/
# Software Link: https://www.projeqtor.org/en/product-en/downloads
# Tested on: Ubuntu, LAAMP
# Vendor: Projeqtor
# Version: v9.3.1
# Exploit Description:
Projeqtor version 9.3.1 suffers from a stored XSS vulnerability via SVG file upload. A low level user can upload svg images that contain malicious Javascript. In this way an attacker can escalate privileges and upload a malicious plugin which results in arbitrary code execution in the server hosting the application.
# Steps to reproduce:
Upload the following XML code as an SVG file and change the xlink for a location that you control. Once the administrator user opens the attachment, the Javascript code hosted by the attacker will execute.


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Accessing GoDaddy internal instance through an email logic bug.
https://hector0x.medium.com/accessing-godaddy-internal-instance-through-an-email-logic-bug-fdbea7b23542?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey All,Continue reading on Medium » (https://hector0x.medium.com/accessing-godaddy-internal-instance-through-an-email-logic-bug-fdbea7b23542?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

https://a.thumbs.redditmedia.com/cYpNlfVVdTkrl8n-dBs9bKqW2gcLSwN6jHtOsAq3kv4.jpg I've been trying to change the name of an application's name in the task manager but how do I do it? I've tried doing it with resource hacker, and also I've tried doing it with visual studio code, but it still displays like this. Also is there any program or app that can do this?

​

https://preview.redd.it/e0j73c5ojp981.png?width=294&format=png&auto=webp&s=c8592f5dde3af51212f043ad6492fd99a89f3516

submitted by /u/BenDahGreat
[link] [comments]

hacking: security in practice
Software to wardrive for CCTV networks?

For work, I want to map out as many CCTV coverage areas as I can around town. I know many of the residential cameras such as Arlo, Ring and Nest utilize their own wifi network and broadcast the ssid.

I have WiFi Wiggle and it is recording all the networks but is like to be able to filter them out on a map for only the CCTV networks.

Anyone know if this is possible?

submitted by /u/SkippyBoJangles
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
H A C K press enter

https://external-preview.redd.it/qYhwjCv8PE4owNxKdlEfdvv8hIEJ8Dp_XsQXwgNdvkE.jpg?width=320&crop=smart&auto=webp&s=5131be0156f4329e01627fdd7007a3b9d15d8de5 submitted by /u/al_pa68
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Vinnie Liu Has a Mission: Keeping People Safe Online and Offline

Security Pro File: The years at the National Security Agency shaped Vinnie Liu's views on security. "We're missionaries, not mercenaries," he says.

Dark Reading: Attacks/Breaches
Mobile Application Security: 2021's Breaches

Many of last year's largest app breaches could have been prevented with testing, training, and the will to take app security seriously.

Rustpad - Multi-Threaded Padding Oracle Attacks Against Any Service
http://www.kitploit.com/2022/01/rustpad-multi-threaded-padding-oracle.html

___________________________
@hacking_Attack
@Hacking_Video

A multi-threaded what now? rustpad is a multi-threaded successor to the classic padbuster, written in Rust. It abuses a Padding Oracle vulnerability (https://en.wikipedia.org/wiki/Padding_oracle_attack) to decrypt any cypher text or encrypt arbitrary plain text without knowing the encryption key!
Features Decryption of cypher texts Encryption of arbitrary plain text Multi-threading on both block and byte level Modern, real-time (https://www.kitploit.com/search/label/Real-Time) and interactive TUI! No-TTY support, so you can just pipe output to a file Supports Web server oracles... ... and Script-based oracles. For when you need just that extra bit of control. Automated calibration of web oracle's (in)correct padding response Progress bar and automated (https://www.kitploit.com/search/label/Automated) retries Smart detection of cypher text encoding, supporting: hex, base64, base64url No IV support Written in purely safe Rust, making sure you don't encounter nasty crashes ️Usage Using rustpad to attack a padding oracle is easy. It requires only 4 pieces of information to start: target oracle (--oracle) cypher text to decrypt (--decrypt) block size (--block-size) type of oracle (web/script, see below) Padding Oracle attacks against any service. USAGE: rustpad [OPTIONS] --block-size --decrypt --oracle OPTIONS: -B, --block-size Block size used by the cypher [possible values: 8, 16] -D, --decrypt Original cypher text, received from the target service, which is to be decrypted --delay Delay between requests within a thread, in milliseconds [default: 0] -e, --encoding Specify encoding used by the oracle to encode the cypher text [default: auto] [possible values: auto, base64, base64url, hex] -E, --encrypt Plain text to encrypt. Encryption (https://www.kitploit.com/search/label/Encryption) mode requires a cypher text to gather necessary data -h, --help Prints help information --no-cache Disable reading and writing to the cache file -n, --no-iv Cypher text does not include an Initialisation Vector --no-url-encode Disable URL encoding and decoding of cypher text -O, --oracle The oracle to question with forged cypher texts. This can be a URL or a shell script. See the subcommands `web --help` and `script --help` respectively for further help. -o, --output File path to which log output will be written -t, --threads Amount of threads in the thread pool -V, --version Prints version information -v, --verbose Increase verbosity of logging SUBCOMMANDS: web Question a web-based oracle script Question a script-based oracle">; rustpad --help rustpad Multi-threaded Padding Oracle attacks against any service. USAGE: rustpad [OPTIONS] --block-size --decrypt --oracle OPTIONS: -B, --block-size Block size used by the cypher [possible values: 8, 16] -D, --decrypt Original cypher text, received from the target service, which is to be decrypted --delay Delay between requests within a thread, in milliseconds [default: 0] -e, --encoding Specify encoding used by the oracle to encode the cypher text [default: auto] [possible values: auto, base64, base64url, hex] -E, --encrypt Plain text to encrypt. Encryption mode requires a cypher text to gather necessary data -h, --help Prints help information --no-cache Disable reading and writing to the cache file -n, --no-iv Cypher text does not include an Initialisation Vector --no-url-encode Disable URL encoding and decoding of cypher

___________________________
@hacking_Attack
@Hacking_Video

text -O, --oracle The oracle to question with forged cypher texts. This can be a URL or a shell script. See the subcommands `web --help` and `script --help` respectively for further help. -o, --output File path to which log output will be written -t, --threads Amount of threads in the thread pool -V, --version Prints version information -v, --verbose Increase verbosity of logging SUBCOMMANDS: web Question a web-based oracle script Question a script-based oracle Web mode Web mode specifies that the oracle is located on the web. In other words, the oracle is a web server with a URL. For a padding oracle attack to succeed, an oracle must say so if a cypher text with incorrect padding was provided. rustpad will analyse the oracle's responses and automatically calibrate itself to the oracle's behaviour. --decrypt --oracle web [OPTIONS] OPTIONS: -c, --consider-body Consider the response body and content length when determining the web oracle's response to (in)correct padding -d, --data Data to send in a POST request --delay Delay between requests within a thread, in milliseconds [default: 0] -e, --encoding Specify encoding used by the oracle to encode the cypher text [default: auto] [possible values: auto, base64, base64url, hex] -h, --help Prints help information -H, --header ... HTTP header to send -k, --insecure Disable TLS certificate validation -K, --keyword Keyword indicating the location of the cypher text in the HTTP request. It is replaced by the cypher text's value at runtime [default: CTEXT] --no-cache Disable reading and writing to the cache file -n, --no-iv Cypher text does not include an Initialisation Vector --no-url-encode Disable URL encoding and decoding of cypher text -o, --output File path to which log output will be written -x, --proxy Proxy server to send web requests over. Supports HTTP(S) and SOCKS5 --proxy-credentials Credentials to authenticate against the proxy server with [format: :] -r, --redirect Follow 302 Redirects -t, --threads Amount of threads in the thread pool -T, --timeout Web request timeout in seconds [default: 10] -A, --user-agent User-agent to identify with [default: rustpad/] -v, --verbose Increase verbosity of logging Indicate the cypher text's location! See `--keyword` for clarification.">; rustpad web --help rustpad-web Question a web-based oracle USAGE: rustpad --block-size --decrypt --oracle web [OPTIONS] OPTIONS: -c, --consider-body Consider the response body and content length when determining the web oracle's response to (in)correct padding -d, --data Data to send in a POST request --delay Delay between requests within a thread, in milliseconds [default: 0] -e, --encoding Specify encoding used by the oracle to encode the cypher text [default: auto] [possible values: auto, base64, base64url, hex] -h, --help Prints help information -H, --header ... HTTP header to send -k, --insecure Disable TLS certificate validation -K, --keyword Keyword indicating the location of the cypher text in the HTTP request. It is replaced by the cypher text's value at runtime [default: CTEXT] --no-cache Disable reading and writing to the cache file -n, --no-iv Cypher text does not include an Initialisation Vector

___________________________
@hacking_Attack
@Hacking_Video

--no-url-encode Disable URL encoding and decoding of cypher text -o, --output File path to which log output will be written -x, --proxy Proxy server to send web requests over. Supports HTTP(S) and SOCKS5 --proxy-credentials Credentials to authenticate against the proxy server with [format: :] -r, --redirect Follow 302 Redirects -t, --threads Amount of threads in the thread pool -T, --timeout Web request timeout in seconds [default: 10] -A, --user-agent User-agent to identify with [default: rustpad/] -v, --verbose Increase verbosity of logging Indicate the cypher text's location! See `--keyword` for clarification. Script mode Script mode was made for power users or CTF players ‍who were given a script to run. The target oracle is a local shell script. Scripts allow you to run attacks against local oracles or more exotic services. Or you can use script mode to customise and extend rustpad's features. However, if you're missing a feature, feel free to open an issue on GitHub (https://github.com/Kibouo/rustpad/issues)! --decrypt --oracle script [OPTIONS] OPTIONS: --delay Delay between requests within a thread, in milliseconds [default: 0] -e, --encoding Specify encoding used by the oracle to encode the cypher text [default: auto] [possible values: auto, base64, base64url, hex] -h, --help Prints help information --no-cache Disable reading and writing to the cache file -n, --no-iv Cypher text does not include an Initialisation Vector --no-url-encode Disable URL encoding and decoding of cypher text -o, --output File path to which log output will be written -t, --threads Amount of threads in the thread pool -v, --verbose Increase verbosity of logging Script must respond with exit code 0 for correct padding, and any other code otherwise. Cypher text is passed as the 1st argument.">; rustpad script --help rustpad-script Question a script-based oracle USAGE: rustpad --block-size --decrypt --oracle script [OPTIONS] OPTIONS: --delay Delay between requests within a thread, in milliseconds [default: 0] -e, --encoding Specify encoding used by the oracle to encode the cypher text [default: auto] [possible values: auto, base64, base64url, hex] -h, --help Prints help information --no-cache Disable reading and writing to the cache file -n, --no-iv Cypher text does not include an Initialisation Vector --no-url-encode Disable URL encoding and decoding of cypher text -o, --output File path to which log output will be written -t, --threads Amount of threads in the thread pool -v, --verbose Increase verbosity of logging Script must respond with exit code 0 for correct padding, and any other code otherwise. Cypher text is passed as the 1st argument. Coming soon tab auto-complete smarter URL parsing advanced calibration: response text should contain "x", time-based automated block size detection improve linux binary's file size .NET URL token encoding?

Download Rustpad (https://github.com/Kibouo/rustpad)

___________________________
@hacking_Attack
@Hacking_Video