Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Incentivized testing for $ZKP Advanced Staking is now LIVE!

Advanced $ZKP Staking Testing with 100,000 $ZKP in rewards is starting today. Welcome to Panther Zafari’s Beta!Continue reading on Panther Protocol »
Read more...
SSRF Leads To AWS Metadata Exposure

How can you leverage an SSRF (“Server Side Request Forgery”) vulnerability to evade filters and leak internal AWS credentials on a web…Continue reading on Medium »
Read more...
hacking: security in practice
How do I access the deep web through Tor broswer?

I mean, every time I try to access some website it displays a message telling me that they've found unusual traffic through my network. How do I solve it? And does the IP address they show is really valid?

submitted by /u/Puzzleheaded_703
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Is this even possible?

Very long and complicated story short….

One of my family members believes they are part of a targeted hack (and actually have a valid legal related reason as to why it could be) but part of their reasoning is:

*
When they use their computer to search on google the location at the bottom traditionally states where they live.

*
until they search something specific related to the case they are involved in which then the Google location changes to another area “from your IP address”.

*
now this other location is very specific, not near where they live and actually relates very much to the person they believe is involved in hacking them
Therefore they believe they have a key logger which is monitoring what they are searching and changing to a different server/ IP when something specific is searched.

There is a bunch of other weird things going on with their phone/ laptop but above was quite specific example which they brought up and I’m not sure is even possible/makes sense at all…

I’m aware IP addresses ping from all sorts of places but the specificity of this location is shockingly odd.

submitted by /u/Crafty-Bad-4511
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
how do I get elements from a website?

I don't know if I worded the title correctly. I started playing around with BeEF and copied the source code from McDonald's to inject with the "hook". everything works fine but the website looks obviously fake because it lacks the pictures the real McDonald's site normally has. I know it's because my computer doesn't have the pictures downloaded to it. I'm not a web developer or anything close to being one so what code would I have to change if any to make it work properly?

submitted by /u/Background_Gene_3657
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Yes Another CTF team

I’ve been doing ctfs for about a month now and looking to get a team of people who are interested in improving ctf skills / talk about hacking in general. No skill level required, while I’m a beginner myself.

I would ideally like to collaborate while doing ctfs, to further gain our knowledge and methodology. But just Want to have a smaller group of people who are truly interested in CTFs/hacking/cybersecurity to communicate with

Please let me know if your interested.

submitted by /u/Round-Beach9498
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Critical Vulnerability in Premium WordPress Themes Allows for Site Takeover

Critical Vulnerability in Premium WordPress Themes Allows for Site TakeoverPost Views: 1
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-3.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
A critical privilege escalation flaw found in two themes used by more than 90,000 WordPress sites can allow threat actors to take over the sites completely, researchers have found.
WordFence Threat Intelligence Team researcher Ramuel Gall discovered the flaw, one of five vulnerabilities he found between early April and early May in the Jupiter and JupiterX Premium WordPress themes, he revealed in a blog post published Wednesday.

One of the flaws—tracked as CVE-2022-1654 and rated as 9.9, or critical on the CVSS–allows for “any authenticated attacker, including a subscriber or customer-level attacker, to gain administrative privileges and completely take over any site running either the Jupiter Theme or JupiterX Core Plugin,” he wrote. The plugin is required to run the JupiterX theme.

Affected versions of the themes are: Jupiter Theme 6.10.1 or earlier, and JupiterX Core Plugin 2.0.7 or earlier.

WordFence finished their investigation of most of flaws on April 5 and reported them to the Jupiter and JupiterX theme developer ArtBees on the same day; on May 3 they notified the developer of an additional Jupiter theme flaw. By May 10, the developed had released updated versions of both the Jupiter and JupiterX themes that had patched all the flaws.
See Also: Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Critical VulnerabilityThe critical flaw found resides in a function, uninstallTemplate, which is intended to reset a site after a template is uninstalled. However, it “has the additional effect of elevating the user calling the function to an administrator role,” Gall wrote. In the Jupiter theme, the function is found in the theme itself; in JupiterX, it’s present in the JupiterX Core plugin.

“Vulnerable versions register AJAX actions but do not perform any capability checks or nonce checks,” he wrote.

On a site with a vulnerable version of the Jupiter Theme installed, any logged-in user can elevate their privileges to those of an administrator by sending an AJAX request with the action parameter set to abb_uninstall_template. This calls the uninstallTemplate function, which calls the resetWordpressDatabase function, which effectively reinstalls the site with the currently logged-in user as the new site owner, Gall explained.

On a site where a vulnerable version of the JupiterX Core plugin is installed, someone can access the same functionality by sending an AJAX request with the action parameter set to jupiterx_core_cp_uninstall_template, he said.
See Also: Attackers Use Event Logs to Hide Fileless Malware See Also: Offensive Security Tool: malicious-pdf Other VulnerabilitiesWordPress plugins, often developed by third-party developers, are notoriously buggy. Previous flaws found in plugins for the popular website-creation and -hosting platform also have allowed for site takeover, as well as enabled WordPress subscribers to totally wipe sites not belonging to them, or attackers to forge emails to subscribers.

Of the other flaws that Gall discovered, three—tracked as CVE-2022-1656, CVE-2022-1658 and CVE-2022-1659–are rated as medium risk and one, CVE-2022-1657 is rated as high risk.

The high-risk flaw, which affects JupiterX Theme 2.0.6 or earlier and Jupiter Theme 6.10.1 or earlier, can allow an attacker to obtain[...]

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Critical Vulnerability in Premium WordPress Themes Allows for Site Takeover Critical Vulnerability in Premium WordPress Themes Allows for Site TakeoverPost Views: 1 Premium Content https://www.blackhatethicalhacking.com/wp-cont…
privileged information, such as nonce values, or perform restricted actions, Gall explained. This can be done by including and executing files from any location on the site.

“Vulnerable versions of the Jupiter and JupiterX Themes allow logged-in users, including subscriber-level users, to perform Path Traversal and Local File inclusion,” Gall explained. Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Write up: Find hidden and encrypted secrets from any website In the JupiterX theme, this can be done by using the jupiterx_cp_load_pane_action AJAX action present in the lib/admin/control-panel/control-panel.php file to call the load_control_panel_pane function. “It is possible to use this action to include any local PHP file via the slug parameter,” Gall wrote.

The Jupiter theme has a nearly identical vulnerability, which an attacker can exploit via the mka_cp_load_pane_action AJAX action present in the framework/admin/control-panel/logic/functions.php file, which calls the mka_cp_load_pane_action function, he said.

Wordfence researchers recommend that anyone using the affected themes updated to the patched versions immediately. The company released a firewall rule to protect Wordfence Premium, Wordfence Care and Wordfence Response customers on April 5, and free Wordfence users on May 4.
Source: threatpost.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/3e41-article-210226-vmware-body-text-90x90.jpg April VMware Bugs Abused to Deliver Mirai Malware, Exploit Log4Shell24 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/iphone-low-power-hacking_068D000001681697-90x90.jpg iPhones Vulnerable to Attack Even When Turned Off2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/ezgif.com-gif-maker-90x90.jpg Apple emergency update fixes zero-day used to hack Macs, Watches3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/banner-2022.2-release-90x90.jpg Kali Linux 2022.2 released with new tools, terminal tweaks and more4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Discord-hack-90x90.png Malware Builder Leverages Discord Webhooks4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/backdoor-90x90.jpg BPFdoor: Stealthy Linux malware bypasses firewalls for remote access7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/microsoft-exploit-90x90.jpg Actively Exploited Zero-Day Bug Patched by Microsoft1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/maxresdefault-90x90.jpg UK government blocked four times as many cyber-scams in 20211 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/microsoft-azure-cloud-90x90.jpg Microsoft releases fixes for Azure flaw allowing RCE attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/f5-big-ip-hacking-90x90.jpg Exploits created for critical F5 BIG-IP flaw, install patch immediately2 weeks ago
The post Critical Vulnerability in Premium WordPress Themes Allows for Site Takeover first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
ZPrize Competition: 7 million in Prizes

The Z-Prize is an industry-wide effort to accelerate zero-knowledge technology. This effort will be in the form of a competition, in the likeness of the X-Prize, or DARPA Grand Challenge. The results of the competition will be open-sourced for the benefit of all as public goods.

You're invited to compete - more information here: https://www.youtube.com/watch?v=iGcRgiSCFHM

submitted by /u/dhethz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video