Hacking Articles Tips Tricks Videos Tutorials

I could see the website trying to fetch shell.php. There were a few notable things here:ExploitationNow that it had been established the server tries to fetch a remote file, we can work our way up to exploitation from here. My first instinct was to access…

aLQ=s16000 Privilege EscalationNow that we had a stable prompt we could advance for privilege escalation. I checked the sudoers file which had a python script allowed to run as root. This script opens up a listener for remote clients to connect. Also, it compares the input password with hardcoded credential secretadminpasswordsudo /usr/bin/python3 /opt/remote-manage.py
nc localhost 55465https://blogger.googleusercontent.com/img/a/AVvXsEjGK3j2S_Y1wcJLwudp97Blj2pdt5zjVI6A0uZ1CPiVaJEwQTeRLMqTkZxZHsEh7nBIXcIn0rOxkvOpHb7Yju0KcA8T05UJeyOhc3V0u9W59wu5-nK_Dl89XicaILBWcl4LxUTfADFk01xjDZ16H38i7qYnarhoE4WhXk9KOKeRWC0RFrpScb6lVqR47A=s16000 Now, I am effectively communicating with a python script which is run as root. You will notice that this script is flawed. As soon as I input anything other than “secretadminpassword” it throws an exception and opens up Python Debugger.import os;os.system(“/bin/sh”)
id
cat /root/root.txthttps://blogger.googleusercontent.com/img/a/AVvXsEiPLup_PCT5S3kW4J1Uv6bZE2qHLQnw6t4U9z4AKP9Mx3crTlO7WmrcWZEG20xf6gnazI1DkkJI93nuUXqxtEzPhLiVnyMWytbyaokINQALUAmLugtdKX_xzdRugbTx53WKmz2Qpm7NIrL7Y3MIL_hZulk5ADdC_WWk9dfGCIgfdByfbgEgDbwFztZH3Q=s16000 ConclusionThe box covers a few tricks that makes one scratch their brain, however, it doesn’t have any rabbit holes or advanced techniques used to exploit. We covered subdomain enumeration, SSRF and basic Python reverse engineering in this box. Hope you liked this article. Thanks for reading.___________________________
@hacking_Attack
@Hacking_Video

8 viewsedited 17:35

Hacking Articles Tips Tricks Videos Tutorials

7 views18:31

Hacking Articles Tips Tricks Videos Tutorials

7 views18:31

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
XNU Kernel mach_msg Use-After-Free

https://2.bp.blogspot.com/-trS7d3JOSJY/WWlvYoSx4fI/AAAAAAAAIOo/ua-jTrS9avcHrliD3JJHs9ifWyf14eAUwCLcBGAs/s1600/h57.png
The XNU kernel suffers from a use-after-free vulnerability in mach_msg.

MD5 | eb1b8067af59bf13ac79b38151184bb3

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

XNU Kernel mach_msg Use-After-Free

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

8 viewsedited 18:31

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
UniFi Network Application Unauthenticated Log4Shell Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

UniFi Network Application Unauthenticated Log4Shell Remote Code Execution

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

6 viewsedited 18:31

Hacking Articles Tips Tricks Videos Tutorials

5 views19:12

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Valentine

https://cdn-images-1.medium.com/max/600/1*T3_oV-7avfKcloyccg9NQA.png
This Box requires exploiting a memory corruption bug to gather information that can be used in the further movement to get the initial…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Valentine

This Box requires exploiting a memory corruption bug to gather information that can be used in the further movement to get the initial…

5 viewsedited 19:12

Hacking Articles Tips Tricks Videos Tutorials

6 views19:12

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
How I got access to 25+ Tesla’s around the world. By accident. And curiosity.

https://cdn-images-1.medium.com/max/734/1*YnNzN5XfpxRcaQ3XqETQcA.png
How the heck did a 19 year old from Germany manage to be able to take over more than 25 Tesla’s around the world?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

How I got access to 25+ Tesla’s around the world. By accident. And curiosity.

How the heck did a 19 year old from Germany manage to be able to take over more than 25 Tesla’s around the world?

6 viewsedited 19:12

Hacking Articles Tips Tricks Videos Tutorials

6 views19:12

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
স্ক্রিপ্টিং ল্যাংগুয়েজ (Scripting language) কী? কীভাবে শিখবো ?

https://cdn-images-1.medium.com/max/678/1*_7j0czePQ9ZPBKhdH01FNw.jpeg
সমস্ত স্ক্রিপ্টিং ল্যাংগুয়েজ ই প্রোগ্রামিং ল্যাংগুয়েজ তবে সমস্ত প্রোগ্রামিং ল্যাংগুয়েজ ই স্ক্রিপ্টিং ল্যাংগুয়েজ নয়।

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

স্ক্রিপ্টিং ল্যাংগুয়েজ (Scripting language) কী? কীভাবে শিখবো ?

সমস্ত স্ক্রিপ্টিং ল্যাংগুয়েজ ই প্রোগ্রামিং ল্যাংগুয়েজ তবে সমস্ত প্রোগ্রামিং ল্যাংগুয়েজ ই স্ক্রিপ্টিং ল্যাংগুয়েজ নয়।

5 viewsedited 19:12

Hacking Articles Tips Tricks Videos Tutorials

5 views19:12

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
What is ARP and How does it work?

https://cdn-images-1.medium.com/max/600/1*bCg6SDkK_FGGQEM3Uhwjeg.png
ARP

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

What is ARP and How does it work?

ARP