Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
Technitium Installer 4.4 DLL Hijacking

https://3.bp.blogspot.com/-00fiGlDHfKo/WWlvZ5odqlI/AAAAAAAAIO4/nnZp17OtkHAWqiO0pbFBQSys2U4_yu8pACLcBGAs/s1600/h7.png
Technitium Installer version 4.4 suffers from a dll hijacking vulnerability.

MD5 | f364dd8a6ca3259170dfee9c857c8d09

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Technitium Installer 4.4 DLL Hijacking

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

5 viewsedited 22:24

Hacking Articles Tips Tricks Videos Tutorials

3 views22:24

Hacking Articles Tips Tricks Videos Tutorials

3 views22:24

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Bank Management System 1.0 SQL Injection

https://2.bp.blogspot.com/-QZ2Sf2sxziM/WWlvZhEG73I/AAAAAAAAIO0/d0s8s4TXkHwnfXzbpubNEBqDxa568NQgwCLcBGAs/s1600/h60.png
Bank Management System version 1.0 suffers from a remote SQL injection vulnerability.

MD5 | a1b518f4ff9226b46978f92199b94421

Download

# Title: Bank Management System - MCB Bank v1.0 - SQLi
# Author: nu11secur1ty
# Date: 02.25.2022
# Vendor: https://www.campcodes.com/projects/php/ by:Tariq Fareeds
# Software: https://www.campcodes.com/projects/php/bank-management-system-in-php-mysql-free-download/
# Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/edit/main/vendors/campcodes.com/Bank-Management-System
## Description:
The email parameter from Bank Management System - MCB Bank v1.0
appears to be vulnerable to SQL injection attacks.
The payloads 30735302' or 9098=9098-- and 41995976' or 3071=3078--
were each submitted in the email parameter.
These two requests resulted in different responses, indicating that
the input is being incorporated into a SQL query in an unsafe way
WARNING: If this is in some external domain, or some subdomain
redirection, or internal whatever, this will be extremely dangerous!
Status: CRITICAL
[+] Payloads:

```mysql
---
Parameter: email (POST)
Type: boolean-based blind
Title: OR boolean-based blind - WHERE or HAVING clause
Payload: email=-9337' OR 4870=4870-- Cgzq&password=q7A!t8j!H2&cashierLogin=
---

```
## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/edit/main/vendors/campcodes.com/Bank-Management-System)

## Proof and Exploit:
[href](https://streamable.com/hvaaiu)

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Bank Management System 1.0 SQL Injection

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

5 viewsedited 22:24

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
Microsoft Exchange Server Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Microsoft Exchange Server Remote Code Execution

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

6 viewsedited 22:24

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Ukrainian Troops Targeted in Phishing Attacks by Suspected Belarusian APT

Ukraine's Computer Emergency Response Team calls out UNIC1151 nation-state hacking group out of Belarus as behind the attacks.

5 views22:29

Source

Hacking Articles Tips Tricks Videos Tutorials

4 views23:16

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Attack on Ukrainian Government Websites Linked to GRU Hackers - bellingcat

https://external-preview.redd.it/WDBJ6Kw5ZTgHmZVXPSOHtC-p1QJmiAdmItT2lVc-p-E.jpg?width=640&crop=smart&auto=webp&s=846ed8fb4fe648a7e22cf9a3df8e308744628e92 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Attack on Ukrainian Government Websites Linked to GRU Hackers -...

Posted in r/hacking by u/DrinkMoreCodeMore • 2 points and 0 comments

5 viewsedited 23:16

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
gift card cracking

is there any method for gift card cracking

submitted by /u/AftonGobble
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

gift card cracking

is there any method for gift card cracking

5 viewsedited 23:16

Hacking Articles Tips Tricks Videos Tutorials

5 views23:16

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Rapper / hacker YTCracker talks about how Loyd Blankenship's work influenced his music on this new podcast

https://external-preview.redd.it/T2y3GDGh-wmWiZPO22UFNa51g2lkzMF7idxUlitPH50.jpg?width=320&crop=smart&auto=webp&s=243df3974c9419d7cc92d27e5ec8b69d4fe04c46 submitted by /u/mc_lars
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Rapper / hacker YTCracker talks about how Loyd Blankenship's work...

Posted in r/hacking by u/mc_lars • 1 point and 0 comments

4 viewsedited 23:16

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
FOSS for training skills

Hi, can you recommend a few FOSS web apps for training pen testing skills?

submitted by /u/LaughNervous
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

FOSS for training skills

Hi, can you recommend a few FOSS web apps for training pen testing skills?

5 viewsedited 23:16

Hacking Articles Tips Tricks Videos Tutorials

Bug Bounty: My Work Schedule

According to the 2020 H1 report:Continue reading on Medium »
Read more...

4 views23:44

Hacking Articles Tips Tricks Videos Tutorials

Bug Bounty: My Work Schedule
https://medium.com/@skavans_/bug-bounty-my-work-schedule-f7189fec246d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Bug Bounty: My Work Schedule

According to the 2020 H1 report:

4 viewsedited 00:24