Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
WordPress Domain Check 1.0.16 Cross Site Scripting
https://2.bp.blogspot.com/-trS7d3JOSJY/WWlvYoSx4fI/AAAAAAAAIOo/ua-jTrS9avcHrliD3JJHs9ifWyf14eAUwCLcBGAs/s1600/h57.png
WordPress Domain Check plugin version 1.0.16 suffers from a cross site scripting vulnerability.
MD5 |
Download
Source:packetstormsecurity.com
WordPress Domain Check 1.0.16 Cross Site Scripting
https://2.bp.blogspot.com/-trS7d3JOSJY/WWlvYoSx4fI/AAAAAAAAIOo/ua-jTrS9avcHrliD3JJHs9ifWyf14eAUwCLcBGAs/s1600/h57.png
WordPress Domain Check plugin version 1.0.16 suffers from a cross site scripting vulnerability.
MD5 |
a01b2666a24640021a89c1ff8fe3ec96Download
# Exploit Title: WordPress Plugin Domain Check 1.0.16 - Reflected Cross-Site Scripting (XSS) (Authenticated)
# Date: 30-10-2021
# Exploit Author: Ceylan Bozogullarindan
# Author Webpage: https://bozogullarindan.com
# Vendor Homepage: https://domaincheckplugin.com/
# Software Link: https://wordpress.org/plugins/domain-check/
# Version: 1.0.16
# Tested on: Linux
# CVE: CVE-2021-24926 (https://wpscan.com/vulnerability/8cc7cbbd-f74f-4f30-9483-573641fea733)
# Description:
Domain Check is a Wordpress plugin that allows you to see what domains and SSL certificates are coming up for expiration and to quickly locate the coupons, coupon codes, and deals from your favorite sites before renewing.
An authenticated user is able to inject arbitrary Javascript or HTML code to the "Domain Check Profile" interface available in settings page of the plugin, due to incorrect sanitization of user-supplied data and achieve a Reflected Cross-Site Scripting attack against the administrators. The plugin versions prior to 1.0.16 are affected by this vulnerability.
The details of the discovery are given below.
# Steps To Reproduce:
1. Just visit the following page after signing in the administrator panel: http://vulnerable-wordpress-website/wp-admin/admin.php?page=domain-check-profile&domain=hacked.foo
2. The XSS will be triggered on the settings page.
Source:packetstormsecurity.com
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Attacking Service Accounts with Kerberoasting
https://cdn-images-1.medium.com/max/2600/1*GQBVXSOlKlomGZzSS6toTQ.jpeg
Forge Service Tickets (TGS) with Kerberoasting MITRE ATT&CK ID: T1558.003, Active HTB machine
Continue reading on R3d Buck3T »
___________________________
@hacking_Attack
@Hacking_Video
Attacking Service Accounts with Kerberoasting
https://cdn-images-1.medium.com/max/2600/1*GQBVXSOlKlomGZzSS6toTQ.jpeg
Forge Service Tickets (TGS) with Kerberoasting MITRE ATT&CK ID: T1558.003, Active HTB machine
Continue reading on R3d Buck3T »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Attacking Service Accounts with Kerberoasting
Forge Service Tickets (TGS) with Kerberoasting MITRE ATT&CK ID: T1558.003
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Linux is everywhere
https://cdn-images-1.medium.com/max/1680/1*8f5AwGh_ph-STKj6HKRfyw.jpeg
First of all linux is a kernel and not an operating system. Operating systems based on linux are a combination of software from GNU and…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Linux is everywhere
https://cdn-images-1.medium.com/max/1680/1*8f5AwGh_ph-STKj6HKRfyw.jpeg
First of all linux is a kernel and not an operating system. Operating systems based on linux are a combination of software from GNU and…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Linux😍 is everywhere
First of all linux is a kernel and not an operating system. Operating systems based on linux are a combination of software from GNU and…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Write-Up: Hack The Box: Starting Point — Tier 1
https://cdn-images-1.medium.com/max/600/0*MDXds2XSaxz7GNj8.png
Tier 1 of the “Starting Point” series consists of six boxes: Appointment, Sequel, Crocodile, Ignition, Pennyworth and Tactics.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Write-Up: Hack The Box: Starting Point — Tier 1
https://cdn-images-1.medium.com/max/600/0*MDXds2XSaxz7GNj8.png
Tier 1 of the “Starting Point” series consists of six boxes: Appointment, Sequel, Crocodile, Ignition, Pennyworth and Tactics.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Write-Up: Hack The Box: Starting Point — Tier 1
Tier 1 of the “Starting Point” series consists of six boxes: Appointment, Sequel, Crocodile, Ignition, Pennyworth and Tactics.