Go to the url to see the result of the shell command

___________________________
@hacking_Attack
@Hacking_Video

Download Spring4Shell-Poc (https://github.com/ckkok/spring4shell-poc)

___________________________
@hacking_Attack
@Hacking_Video

Spring4Shell-Poc - Spring Core RCE 0-day Vulnerability

Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, and Apache Tomcat 9.0.60 Run mvn clean package to build the application Rename demo-0.0.1-SNAPSHOT.war to spring-poc.war and copy this .war file to Tomcat's webapps directory Run python exp.py --url http://localhost:8080/spring-poc/greeting If successful, the message 漏洞存在，shell地址为:http://localhost:8080/spring-poc/tomcatwar.jsp?pwd=j&cmd=whoami will be logged. You should now see the file tomcatwar.jsp written to Tomcat's webapps/spring-poc directory. This directory can be changed by modifying exp.py. Go to the url to see the result of the shell command Download Spring4Shell-Poc
Read more...

ETH Amsterdam — Hats hits the road
https://hatsfinance.medium.com/eth-amsterdam-hats-hits-the-road-6cf4ba1e7c9?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Seven years ago, Amsterdam hosted one of the first ever international Ethereum conferences. Our OG CTO, Shay Zluf, was a keynote speaker…Continue reading on Medium » (https://hatsfinance.medium.com/eth-amsterdam-hats-hits-the-road-6cf4ba1e7c9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
US Pledges to Help Ukraine Keep the Internet and Lights On

US State Department outlines coordinated government effort to provide Ukraine with cybersecurity intelligence, expertise, and resources amid invasion.

Dark Reading: Attacks/Breaches
What to Patch Now: Actively Exploited Windows Zero-Day Threatens Domain Controllers

Microsoft's May 2022 Patch Tuesday contains several bugs in ubiquitous software that could affect millions of machines, researchers warn.

ETH Amsterdam — Hats hits the road

Seven years ago, Amsterdam hosted one of the first ever international Ethereum conferences. Our OG CTO, Shay Zluf, was a keynote speaker…Continue reading on Medium »
Read more...

Hacking on Medium
Type of phishing attacks with examples

https://cdn-images-1.medium.com/max/1200/1*wBa_HTQI9-n8QVPfpxXftA.jpeg
Hello buddies, I’m here with another handy tutorial and in this tutorial you will learn the most common phishing attacks which hackers use…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Chasing Carders Part 2

So, yesterday my curiosity was peaked as to how these guys are able to still operate, and if they were how many are still around…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Can You Teach A Kid How To Hack?

https://cdn-images-1.medium.com/max/800/1*BbZLmujiFOktcgGfjRDBKA.png
Intro

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to bypass NAT44 legally?

or any other option to expose ports for free (or with an small cost 1-2$)

submitted by /u/Sebasorova_YT
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Lincoln College to close after 157 years due ransomware attack

https://external-preview.redd.it/94UrK1NR5oGC6oyYvwV6kdwv1w-Rcwi3itdBs6Ndq6E.jpg?width=640&crop=smart&auto=webp&s=176a28531481113c20a36976344667f429790874 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are there somethings we casually do to be avoided?

* Like visiting porn sites
* downloading pdf books
* downloading a apk
* downloading movies from torrent etc

Can those be the source of being hacked?

submitted by /u/BlueBuddhaNFT
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
hacked my professor and I feel extremely guilty about it

I usually get high scores in her class, I didn't need her exams, I just stole them for the thrill but she was nice to us (students) and did her best to educate us, I feel like trash and I want to apologize to her even though she doesn't know.

How do scammers continue living after tricking people?!

submitted by /u/Clichedfoil
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video