Is Penetration Testing - A hands on introduction to hacking by Georgia Weidman a good book
https://www.reddit.com/r/Pentesting/comments/sc99e6/is_penetration_testing_a_hands_on_introduction_to/

I find reading books the best way of learning things so I'm looking for the best source submitted by /u/Orah_Orah (https://www.reddit.com/user/Orah_Orah)
[link] (https://www.reddit.com/r/Pentesting/comments/sc99e6/is_penetration_testing_a_hands_on_introduction_to/) [comments] (https://www.reddit.com/r/Pentesting/comments/sc99e6/is_penetration_testing_a_hands_on_introduction_to/)

___________________________
@hacking_Attack
@Hacking_Video

How I was able to takeover accounts in websites deal with Github as a SSO provider

IntroductionContinue reading on InfoSec Write-ups »
Read more...

How I could have read your confidential bug reports by simple mail?

Hey Everyone, Hope you’re doing safe and sound.Continue reading on InfoSec Write-ups »
Read more...

How I was able to takeover accounts in websites deal with Github as a SSO provider
https://infosecwriteups.com/how-i-was-able-to-takeover-accounts-in-websites-deal-with-github-as-a-sso-provider-294290358e0c?source=rss------bug_bounty-5

IntroductionContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/how-i-was-able-to-takeover-accounts-in-websites-deal-with-github-as-a-sso-provider-294290358e0c?source=rss------bug_bounty-5)

How I could have read your confidential bug reports by simple mail?
https://infosecwriteups.com/how-i-could-have-read-your-confidential-bug-reports-by-simple-mail-cfd2e4f8e25c?source=rss------bug_bounty-5

Hey Everyone, Hope you’re doing safe and sound.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/how-i-could-have-read-your-confidential-bug-reports-by-simple-mail-cfd2e4f8e25c?source=rss------bug_bounty-5)

Black Hat Ethical Hacking
CWP bugs allow code execution as root on Linux servers

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png CWP bugs allow code execution as root on Linux serversPost Views: 196 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Two security vulnerabilities that impact the Control Web Panel (CWP) software can be chained by unauthenticated attackers to gain remote code execution (RCE) as root on vulnerable Linux servers. CWP, previously known as CentOS Web Panel, is a free Linux control panel for managing dedicated web hosting servers and virtual private servers.

The two security flaws found by Octagon Networks’ Paulos Yibelo are a file inclusion vulnerability (CVE-2021-45467) and a file write (CVE-2021-45466) bug that lead to RCE when chained together.

In short, successful exploitation requires bypassing security protections to prevent attackers from reaching the restricted API section without authentication.

This can be done by registering an API key using the file inclusion bug and creating a malicious authorized_keys file on the server using the file write flaw.
See Also: Complete Offensive Security and Ethical Hacking Course While the CVE-2021-45467 file inclusion vulnerability was patched, Octagon Networks says that they saw how “some managed to reverse the patch and exploit some servers.”
Octagon Networks says that, while the CVE-2021-45467 file inclusion vulnerability was patched, they saw how “some managed to reverse the patch and exploit some servers.”

The security researchers also said they would release a proof-of-concept exploit for this pre-auth RCE chain after enough Linux servers running CWP will get upgraded to the latest version.
See Also: McAfee Bug Can Be Exploited to Gain Windows SYSTEM Privileges According to CWP’s developers, their software supports the following operating systems: CentOS, Rocky Linux, Alma Linux, and Oracle Linux

While the CWP site claims that roughly 30,000 servers are running CWP, BleepingComputer found almost 80,000 Internet-exposed CWP servers on BinaryEdge.

Over 200,000 can also be found on Shodan and Censys, according to the researchers who discovered the pre-authentication RCE chain.
See Also: OSINT Tool: Commit Stream Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Stuxnet – A weapon made out of code that almost started WW3 Source: threatpost.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/mcafee-d2c-90x90.jpg McAfee Bug Can Be Exploited to Gain Windows SYSTEM Privileges1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-12-90x90.jpg Cisco bug gives remote attackers root privileges via debug mode4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-11-1-90x90.jpg Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-10-90x90.jpg SSRF vulnerability in VMWare authentication software could allow access to user data6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Safari-Apple-navigateur-90x90.j[...]

pg Same-origin violation vulnerability in Safari 15 could leak a user’s website history and identity1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Qlocker-Ransomware-1-90x90.png Qlocker ransomware returns – targets QNAP NAS devices worldwide1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/https___specials-images.forbesimg.com_imageserve_61aff357a4c71fc225ab8ba7_0x0-90x90.jpg AWS fixes security flaws that exposed AWS customer data2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/image-apple-releases-15-2-1-update-for-ios-and-ipados-to-fix-bugs-164203308032302-90x90.jpg Apple fixes doorLock bug that can disable iPhones and iPads2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/0_Windows-headpic-90x90.jpg Microsoft: New critical Windows HTTP vulnerability is wormable2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/powerdir-exploit-microsoft-90x90.jpg Microsoft: powerdir bug gives access to protected macOS user data2 weeks ago
The post CWP bugs allow code execution as root on Linux servers first appeared on Black Hat Ethical Hacking.

How I was able to find multiple vulnerabilities of a Symfony Web Framework web application

Found high severity vulnerability in 5 minutes just from reconnaissance. Found multiple vulnerabilities on a web application that used the…
Read more...

Attacks on JSON Web Token (JWT)

In part1 of the article, I introduced JSON web tokens that what is JWT and How they are made? I prefer to take a look at that before you go…
Read more...

Hack into Skynet —  Real World CTF (2022) walkthrough

In this writeup, I’m sharing one of the potential methods to pwn a web challenge on Real world CTF 2022. All challenges built on top of real-world applications & due to the impact of COVID-19, The…
Read more...

KitPloit - PenTest Tools!
FACT - A Tool To Collect, Process And Visualise Forensic Data From Clusters Of Machines Running In The Cloud Or On-Premise

http://1.bp.blogspot.com/-4U5Qr0IvQM4/Yd0K1R_crcI/AAAAAAAA70M/GXmDIcZSuuMjT1eiRG7pGbgk5ziCVlCtgCK4BGAYYCw/w640-h360/FACT_2-781622.png
FACT is a tool to collect, process and visualise forensic data from clusters of machines running in the cloud or on-premise.
Deployment

For a basic single-node deployment, we recommend using Docker and Docker Compose. First, read docker-compose.yamlfor configuration and requirements. Then, start the stack using:

docker-compose up -d

See the installation guide for more details and other deployment methods.

Using FACT

Check out the user guide.

Developing

See the developer documentation for details on setting up a development environment, linting and testing.

Screenshots
http://1.bp.blogspot.com/-4U5Qr0IvQM4/Yd0K1R_crcI/AAAAAAAA70M/GXmDIcZSuuMjT1eiRG7pGbgk5ziCVlCtgCK4BGAYYCw/w640-h360/FACT_2-781622.png http://2.bp.blogspot.com/-pDRBd12JMfE/Yd0K1tCc6OI/AAAAAAAA70U/sbjqYnGMuGMdR3A3dwYlIXLy2swPz2iIgCK4BGAYYCw/w640-h360/FACT_3-782386.png http://4.bp.blogspot.com/-CJOLuHqECKg/Yd0K1waRROI/AAAAAAAA70c/fQAXlIrFP-4v49Eg2FmZKY2e_0UjRsuKACK4BGAYYCw/w640-h360/FACT_4-783061.png
Download FACT

Hacking on Medium
TryHackMe — IDE

https://cdn-images-1.medium.com/max/600/0*B6C_shMvogXQ8Cl6.png
Hi guys, having fun with TryHackMe CTF again. So, here is the write up and guideline to pass this IDE challenge. This CTF room is designed…

Continue reading on InfoSec Write-ups »

Hacking on Medium
How I could have read your confidential bug reports by simple mail?

https://cdn-images-1.medium.com/max/728/1*kRiQnegTZTwkJoZC4jd-SA.png
Hey Everyone, Hope you’re doing safe and sound.

Continue reading on InfoSec Write-ups »