Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Mysterious, Cloud-Enabled macOS Spyware Blows Onto the Scene

The CloudMensis spyware, which can lift reams of sensitive information from Apple machines, is the first Mac malware observed to exclusively rely on cloud storage for C2 activities.

4 views01:39

Source

4 views02:42

Hacking Articles Tips Tricks Videos Tutorials

5 views02:42

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
DASDEC Cross Site Scripting / HTML Injection

https://3.bp.blogspot.com/-w74A7gxi0bY/WWlvD06cX8I/AAAAAAAAIK4/fcu0jWNFLhIrvrv6B2He7QdGvtDQ7X4rQCLcBGAs/s1600/h131.png
The Monroe Electronics / Digital Alert Systems OneNet SE DASDEC Emergency Alert System Appliance suffers from cross site scripting and html injection vulnerabilities.

SHA-256 | 82f6d98418853066b6a98235aa9b2f3a0913d729dcbf7cc7b1e70d395b6a8bad

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

DASDEC Cross Site Scripting / HTML Injection

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

5 viewsedited 02:42

Hacking Articles Tips Tricks Videos Tutorials

4 views02:42

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
IOTransfer 4.0 Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

IOTransfer 4.0 Remote Code Execution

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

4 viewsedited 02:42

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Dr. Fone 4.0.8 Unquoted Service Path

https://4.bp.blogspot.com/-xJ4j9VfFswY/WWlvOf_vUlI/AAAAAAAAIMo/D1-kp_Mj10E1aNmsGMS5n6nKC28DofOXwCLcBGAs/s1600/h25.png
Dr. Fone version 4.0.8 suffers from an unquoted service path vulnerability.

SHA-256 | a395c8c5023e9fa3ade5d03f2adda3d54bb86b40825eb131695b52008175f74a

Download

# Exploit Title: Dr. Fone v4.0.8- 'net_updater32.exe' Unquoted Service Path
# Discovery Date: 2022-05-07
# Discovery by: Esant1490
# Vendor Homepage: https://drfone.wondershare.net
# Software Link : https://download.wondershare.net/drfone_full4008.exe
# Tested Version: 4.0.8
# Tested on OS: Windows 10 Pro x64 en
# Vulnerability Type: Unquoted Service Path

# Find the discover Unquoted Service Path Vulnerability:

C:\>wmic service get name,displayname,pathname,startmode |findstr /i "auto"
|findstr /i /v "C:\Windows\\" |findstr /i /v """

Wondershare Install Assist Service Wondershare InstallAssist
C:\ProgramData\Wondershare\Service\InstallAssistService.exe Auto

Wondershare Application Framework Service WsAppService C:\Program Files
(x86)\Wondershare\WAF\2.4.3.243\WsAppService.exe Auto
Wondershare Application Update Service 3.0

WsAppService3 C:\Program Files
(x86)\Wondershare\WAF3\3.0.0.308\WsAppService3.exe Auto

Wondershare Driver Install Service WsDrvInst C:\Program Files
(x86)\Wondershare\drfone\Addins\Unlock\DriverInstall.exe Auto

# Service info:

C:\>sc qc WsDrvInst
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: WsDrvInst
TIPO : 10 WIN32_OWN_PROCESS
TIPO_INICIO : 2 AUTO_START
CONTROL_ERROR : 1 NORMAL
NOMBRE_RUTA_BINARIO: C:\Program Files
(x86)\Wondershare\drfone\Addins\Unlock\DriverInstall.exe
GRUPO_ORDEN_CARGA :
ETIQUETA : 0
NOMBRE_MOSTRAR : Wondershare Driver Install Service
DEPENDENCIAS : RPCSS
NOMBRE_INICIO_SERVICIO: LocalSystem

#Exploit:

A successful attempt to exploit this vulnerability could allow to execute
code during startup or reboot with the elevated privileges.

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Dr. Fone 4.0.8 Unquoted Service Path

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

6 viewsedited 02:42

Hacking Articles Tips Tricks Videos Tutorials

4 views02:42

Hacking Articles Tips Tricks Videos Tutorials

4 views02:42

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Kite 1.2021.610.0 Unquoted Service Path

https://4.bp.blogspot.com/-sHG2jViTb-c/WWlvSCf2XfI/AAAAAAAAINY/YxfxwjOK_o05QB9TpuqqysTdHaIb3yf8wCLcBGAs/s1600/h36.png
Kite version 1.2021.610.0 suffers from an unquoted service path vulnerability.

SHA-256 | f6c26ab826fa44ce94b3128d1027703b3451aafa787d124ff97ae6903c5c30b1

Download

# Exploit Title: Kite 1.2021.610.0 - Unquoted Service Path
# Date: 2020-11-6
# Exploit Author: Ghaleb Al-otaibi
# Vendor Homepage: https://www.kite.com/
# Version: Version 4.2.0.1 U1
# Tested on: Microsoft Windows 10 Pro - 10.0.19044 N/A Build 19044
# CVE : NA

# Service info:
C:\Windows\system32\cmd.exe>sc qc KiteService
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: KiteService
TYPE               : 10  WIN32_OWN_PROCESS
START_TYPE         : 2   AUTO_START
ERROR_CONTROL      : 0   IGNORE
BINARY_PATH_NAME   : C:\Program Files\Kite\KiteService.exe
LOAD_ORDER_GROUP   :
TAG                : 0
DISPLAY_NAME       : KiteService
DEPENDENCIES       :
SERVICE_START_NAME : LocalSystem