Exploit Collector
WordPress Core 5.8.2 SQL Injection

https://3.bp.blogspot.com/-cErR-NKa5pU/WWlvUH06dSI/AAAAAAAAINw/w0uVuk51vEgh40coJSJAKFsc2nT9tBwYgCLcBGAs/s1600/h44.png
WordPress Core version 5.8.2 suffers from a remote SQL injection vulnerability.

MD5 | d7d5f48971d62eb48cd036c99568cc99

Download
# Exploit Title: WordPress Core 5.8.2 - 'WP_Query' SQL Injection
# Date: 11/01/2022
# Exploit Author: Aryan Chehreghani
# Vendor Homepage: https://wordpress.org
# Software Link: https://wordpress.org/download/releases
# Version: < 5.8.3
# Tested on: Windows 10
# CVE : CVE-2022-21661

# [ VULNERABILITY DETAILS ] :

#This vulnerability allows remote attackers to disclose sensitive information on affected installations of WordPress Core,
#Authentication is not required to exploit this vulnerability, The specific flaw exists within the WP_Query class,
#The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries,
#An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise.

# [ References ] :

https://wordpress.org/news/category/releases
https://www.zerodayinitiative.com/advisories/ZDI-22-020
https://hackerone.com/reports/1378209

# [ Sample Request ] :

POST /wp-admin/admin-ajax.php HTTP/1.1
Host: localhost
Upgrade-Insecure_Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/95.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.99
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Sec-Fetch-User: ?1
Cache-Control: max-age=0
Connection: close
Content-Type: application/x-www-form-urlencoded

action=
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Chrome IPC::ChannelAssociatedGroupController Memory Corruption

https://1.bp.blogspot.com/-gLNlUWq63_8/WWlvGRw0eoI/AAAAAAAAILQ/4OYXBaTeiPkRlDYcEes6gWLLrvO9LjoiQCLcBGAs/s1600/h138.png
Chrome suffers from a memory corruption vulnerability in IPC::ChannelAssociatedGroupController due to interface ID reuse.

MD5 | 97649e149f12ef8107db4bccd41ca04b

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Online Diagnostic Lab Management System 1.0 Missing Access Control

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
RLM 14.2 Cross Site Scripting

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Online Diagnostic Lab Management System 1.0 SQL Injection

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Superglue: AWS Service Vulnerability allowing cross-tenant data access with admin access over the service

https://external-preview.redd.it/tGgr3YKFLqckiqUo2SP7Sap3kpFsyLg8GTZPtzH-vWU.jpg?width=640&crop=smart&auto=webp&s=eed6df2e80fefb3632061d5e2a0bd3296315e7f2 submitted by /u/yanir3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Why Bugfix Postmortems Are Good For Web3

https://cdn-images-1.medium.com/max/2600/1*FwMcQV0tIjQPMn6UJE9lcQ.jpeg
This past year has been eventful for anyone building on the Web3 stack — over the course of the year, DeFi has grown from a nascent…

Continue reading on Immunefi »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How Cybercriminals Are Cashing in on the Culture of 'Yes'

The reward is always front of mind, while the potential harm of giving out a phone number doesn't immediately reveal itself.

Dark Reading: Attacks/Breaches
New Vulnerabilities Highlight Risks of Trust in Public Cloud

Major cloud providers are vulnerable to exploitation because a single flaw can be turned into a global attack using trusted core services.

AlphaGolang - IDApython Scripts For Analyzing Golang Binaries

AlphaGolang is a collection of IDAPython scripts to help malware reverse engineers master Go binaries. The idea is to break the scripts into concrete steps, thus avoiding brittle monolithic scripts, and mimicking the methodology an analyst might follow when tackling a Go binary. Scripts are released under GPL license (honoring Tim Strazzere's original GolangLoaderAssist which we refactored and updated for python3, props to Tim :) ). Contributions are welcome and encouraged! Requirements: IDA Pro (ideally v7.6+) and Python3 (ew) The first two steps (recreatepclntab and functiondiscoveryandrenaming) will work on IDA v7.5- but scripts beyond that require IDAv7.6+. Newer versions are the ideal target for newer scripts going forward. Original Reference: Mandiant Cyber Defense Summit 2021 talk (Video Pending) AlphaGolang Analysis Methodology Step 0: YARA rule to identify Go binaries (PE/ELF/MachO) identify_go_binaries.yara Simple header check + regex for Go build ID string. Could probably improve the build ID length range. Step 1: Recreate pcln table recreate_pclntab.py (IDA v7.5- compatible) Recreates the gopclntab section from heuristics Mostly useful for IDA v7.5- Step 2: Discover functions by walking pcln table and add names to all function_renaming.py (IDA v7.5- compatible) Split from golang loader assist Bruteforces discovery of missing functions based on the pcln table Fixed some function name cleaning issues from the py3 transition Step 3: Surface user-generated functions categorize_go_folders.py (Requires IDA v7.6+) Automagically categorizes functions into folders Requires IDAv7.6 + 'show folders' to be enabled in functions view Step 4: Fix string references fix_string_cast.py Split from golang loader assist Added logic to undefine previously existing string blobs before defining new string New sanity checks make it far more effective Step 5: Extract type information (by Ivan Kwiatkowski) extract_types.py Comments the arguments of all calls to newobject, makechan, etc. Applies the correct C type to these objects and renames them Obtains the human-readable name and adds it as a comment Pending fixes and room for contributions: fix_string_cast.py - Still needs refactoring + better string load heuristics extract_types.py - Only works on PE files currently and looks for the hardcoded .rdata section - A proper check / implementation for varint-encoded sizes is needed Next steps: Track strings references by user-generated functions Auto generate YARA signatures based on user-generated functions Generate hex-rays pseudocode output for user-generated functions Automatically set breakpoints for dynamic analysis of arguments ??? Credit to: Tim Strazzere for releasing the original golang_loader_assist Milan Bohacek (Avast Software s.r.o.) for his invaluable help figuring out the idatree API. Joakim Kennedy (Intezer) Ivan Kwiatkowski (Kaspersky GReAT) for step 5. Igor Kuznetsov (Kaspersky GReAT) Download AlphaGolang
Read more...

___________________________
@hacking_Attack
@Hacking_Video

https://a.thumbs.redditmedia.com/R9H6rGDuvvli4CMXZKiTzn37QunIs30PDCMsTLzLd68.jpg submitted by /u/apocryphon--
[link] [comments]

AlphaGolang - IDApython Scripts For Analyzing Golang Binaries
http://www.kitploit.com/2022/01/alphagolang-idapython-scripts-for.html

___________________________
@hacking_Attack
@Hacking_Video