Exploit Collector
jQuery 1.2 Cross Site Scripting

https://3.bp.blogspot.com/-sRAbWielMtM/WWlvVvmDA-I/AAAAAAAAIN8/PunzJUFKKskcHl_zTOrA6xP6ETTvhbejQCLcBGAs/s1600/h46.png
jQuery version 1.2 suffers from a cross site scripting vulnerability.

MD5 | f6880c94004df62f5be9b507d04e021f

Download
# Exploit Title: jQuery 1.2 - Cross-Site Scripting (XSS)
# Date: 04/29/2020
# Exploit Author: Central InfoSec
# Version: jQuery versions greater than or equal to 1.2 and before 3.5.0
# CVE : CVE-2020-11022

# Proof of Concept 1:

Source:packetstormsecurity.com

hacking: security in practice
How to get my email back

Lost my email to someone , I know old password, but I need the security codes from said person phone but I don't have access to them because he's unreachable

submitted by /u/lucian_florin3
[link] [comments]

hacking: security in practice
I tried altering the values of a game's code. Did not get anything but "layout" modifications. Can I make it work so I get the full experience?

Just as said in the title, I tried to alter a few values of a mobile game in its coding Blueprints via QuickEdit and ZArchiver. All in all it works for "damage purposes" as characters hit harder and so on.

But when regarding store purchases (even those that do not involve irl money) I did change the currency needed or the drops in the cases but it just "loads" and the purchases never go through.

I reached a "folder" which had a lot of bugged characters as well as random lettering and numbers.

Is there a way to decypher this? When I tried copying from my phone/emulator in the pc to a word/.txt doc, the bugs persisted or even were enhanced.

Just wanted to know if there is any way to bypass those loading screens and alter the pulls somehow. Do I need to be offline to bypass the server or anything? Thx.

I can link the game, in game screenshots of the before and afters... Anything you need.

Thx guys!

submitted by /u/ii_HBK_ii
[link] [comments]

hacking: security in practice
PHP malicious code - Why does he do it like that?

A friend's website was 'hacked' and his webhosting provider then temporarily blocked the webhosting contract and made the data available to him. He then found this suspicious code snippet:
<?php/u/ctrl-Felix
[link] [comments]

Kali Linux Tutorials
Maigret : OSINT Username Checker

Purpose of Maigret – collect a dossier on a person by username only, checking for accounts on a huge number of sites. This is a sherlock fork with cool features under heavy development. Don’t forget to regularly update source code from repo. Currently supported more than 2000 sites (full list), by default search is launched […]

The post Maigret : OSINT Username Checker appeared first on Kali Linux Tutorials.

Hacking on Medium
Looking for a Target One Hosting Address

https://cdn-images-1.medium.com/max/1024/0*6MTp8GHVVFSsUU0D.jpg
Assalamu’alaikum all, pa khabar ya ??? The author of your prayers all remain in the protection of Allah SWT who has given kite hidayah so…

Continue reading on Medium »

Hacking on Medium
Hacking the Scammers Portal

https://cdn-images-1.medium.com/max/1517/1*tgzIwd6RW0Bk2OCcxu2m9g.png
How we hacked into the one of the largest scammers portal which was used for creating phishing pages and later for scamming

Continue reading on Medium »

Hacking on Medium
La NSA descubre nuevas vulnerabilidades que afectan a los servidores Microsoft Exchange.

https://cdn-images-1.medium.com/max/836/0*1IG7GUVeGIlLaTrF
PUBLICADO EN 14 ABRIL, 2021 POR EHACKING

Continue reading on Medium »

Hacking on Medium
NSA Uncovers Serious Flaws in Microsoft Exchange Server, Urges Public to Patch

https://cdn-images-1.medium.com/max/2600/0*rXVJ7xxoBrBRpAQz.jpg
The four vulnerabilities involve a ‘low’ attack complexity, and can lead to remote code execution, enabling a hacker to infiltrate…

Continue reading on PC Magazine »

How to move on to Wireless hacking
https://www.reddit.com/r/Pentesting/comments/mqxad0/how_to_move_on_to_wireless_hacking/

<!-- SC_OFF -->I know some reverse enigneering, am okay at binary exploitation and know some networking (The layers, different protocols and the linux socket api). How do I move on from binary exploitation on my local machine to attacking remote computers? I am obviously able to exploit simple buffer overflows in networked programs too since thats not much different from local computers but these types of weaknesses are rare arent they? Does someone have advice for me on remote hacking? I cant seem to find access to this topic. <!-- SC_ON --> submitted by /u/MagisterHegoDamaskII (https://www.reddit.com/user/MagisterHegoDamaskII)
[link] (https://www.reddit.com/r/Pentesting/comments/mqxad0/how_to_move_on_to_wireless_hacking/) [comments] (https://www.reddit.com/r/Pentesting/comments/mqxad0/how_to_move_on_to_wireless_hacking/)