Hacking on Medium
White Collar Criminals

https://cdn-images-1.medium.com/max/800/0*ewdr9aYBjSZeuy4N.png
We’ve discussed many cryptocurrency hacks on Invstr Crunch. Last year, cyber criminals around the world stole a record $14 billion in…

Continue reading on invstr »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to hack any Android Games

https://cdn-images-1.medium.com/max/1024/0*rqtH-x6dkcnsNPam.jpg
Playing video games on our smartphones is quite common. However, the annual growth rate of this industry has been famed to be about 12.9%…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Buy any Products For Free From Bewakoof.com || Bug-Bounty $$

https://cdn-images-1.medium.com/max/1300/1*a63uirGw5OvlcA3Km0KtFw.jpeg
Hi, Here we will see how you can buy any product for free from Bewakoof.com

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Buy any Products For Free From Bewakoof.com || Bug-Bounty $$
https://anonymousyogi.medium.com/buy-any-products-for-free-from-bewakoof-com-bug-bounty-3c93c2724994?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi, Here we will see how you can buy any product for free from Bewakoof.comContinue reading on Medium » (https://anonymousyogi.medium.com/buy-any-products-for-free-from-bewakoof-com-bug-bounty-3c93c2724994?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Launching Superfluid Bug Bounty Program with Immunefi
https://medium.com/superfluid-blog/launching-superfluid-bug-bounty-program-with-immunefi-603401305e8d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Our mission to establish the Superfluid Protocol as a key component of the financial rails of the future requires more than technological…Continue reading on Superfluid Blog » (https://medium.com/superfluid-blog/launching-superfluid-bug-bounty-program-with-immunefi-603401305e8d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Launching Superfluid Bug Bounty Program with Immunefi

Our mission to establish the Superfluid Protocol as a key component of the financial rails of the future requires more than technological…Continue reading on Superfluid Blog »
Read more...

Dark Reading: Attacks/Breaches
Bot Marketplaces as a Source of Future Data Breaches

Of the four bot marketplaces Cognyte analyzed, the Russian Market is the most dominant, but the others are all active, updated daily, and well-known, too.

Dark Reading: Attacks/Breaches
Data Transparency Hasn't Made Us Safer Yet. Can It Uncover Breach Causality?

Advanced machine learning models within an XDR framework could uncover what actually causes breaches, but first we need better data transparency.

Exploit Collector
WordPress 5.9 Cross Site Scripting

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Cain And Abel 4.9.56 Unquoted Service Path

https://3.bp.blogspot.com/-Gb5I5b_xjQ0/WWlu86s-SoI/AAAAAAAAIJk/Vrr0JqyMe7wOp_97KyfJoVRHnDW4ZjPNwCLcBGAs/s1600/h112.png
Cain and Abel version 4.9.56 suffers from an unquoted service path vulnerability.

MD5 | b85616cd8215aaedbc05f11ac0dc320e

Download
# Exploit Title: Cain & Abel 4.9.56 - Unquoted Service Path
# Exploit Author: Aryan Chehreghani
# Date: 2022-02-08
# Software Link: https://www.malavida.com/en/soft/cain-and-abel
# Version: 4.9.56
# Tested on: Windows 10 x64

# PoC

SERVICE_NAME: Abel
TYPE : 110 WIN32_OWN_PROCESS (interactive)
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Program Files (x86)\Cain\Abel64.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Abel
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress Jetpack 9.1 Cross Site Scripting

https://2.bp.blogspot.com/-9-swdJydXNw/WWlu-Z7JktI/AAAAAAAAIJ0/CxXmre-Va7QW9KRwpgdSNcn8lp40qwLtQCLcBGAs/s1600/h117.png
WordPress Jetpack plugin version 9.1 suffers from a cross site scripting vulnerability.

MD5 | 1496cd997b11358dcd3cadff6686e97a

Download
# Exploit Title: WordPress Plugin Jetpack 9.1 - Cross Site Scripting (XSS)
# Date: 2022-02-07
# Author: Milad karimi
# Software Link: https://wordpress.org/plugins/jetpack
# Version: 9.1
# Tested on: Windows 11
# CVE: N/A

1. Description:
This plugin creates a Jetpack from any post types. The slider import search feature and tab parameter via plugin settings are vulnerable to reflected cross-site scripting.

2. Proof of Concept:
http://localhost/modules/contact-form/grunion-form-view.php?post_id=


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video