Exploit Collector
Apache Druid 0.20.0 Remote Command Execution

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Montiorr 1.7.6m Cross Site Scripting

https://4.bp.blogspot.com/-5kb4UTwsKkE/WWlvjussFoI/AAAAAAAAIQs/uqojaqb90NcMo4ROOoH-c5uvdKeDdbGswCLcBGAs/s1600/h94.png
Montiorr version 1.7.6m suffers from a cross site scripting vulnerability via a file upload.

MD5 | f585a3504139898906468d253c6f7c04

Download
# Exploit Title: Montiorr 1.7.6m - File Upload to XSS
# Date: 25/4/2021
# Exploit Author: Ahmad Shakla
# Software Link: https://github.com/Monitorr/Monitorr
# Tested on: Kali GNU/Linux 2020.2
# Detailed Bug Description : https://arabcyberclub.blogspot.com/2021/04/monitor-176m-file-upload-to-xss.html

An attacker can preform an XSS attack via image upload

Steps :

1)Create a payload with the following format :
>x .png

2) Install the database by going to the following link :
https://monitorr.robyns-petshop.thm/assets/config/_installation/vendor/_install.php

3)Register for a new account on the server by going to the following link :
https://monitorr.robyns-petshop.thm/assets/config/_installation/vendor/login.php?action=register

4)Login with your credentials on the following link :
https://monitorr.robyns-petshop.thm/assets/config/_installation/vendor/login.php

5)Go to the following link and upload the payload :
https://monitorr.robyns-petshop.thm/settings.php#services-configuration


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress WPGraphQL 1.3.5 Denial Of Service

https://3.bp.blogspot.com/-4JQvP0m8T2k/WWlu48OEwdI/AAAAAAAAII8/Zf-K1JUBYisUlMBEUhCPF3Gl3BdQ2zG_gCLcBGAs/s1600/h103.png
WordPress WPGraphQL plugin version 1.3.5 suffers from a denial of service vulnerability.

MD5 | b056ef8ea18d2bea4ced3577a57735c3

Download
# Exploit Title: WordPress Plugin WPGraphQL 1.3.5 - Denial of Service
# Author: Dolev Farhi
# Date: 2021-04-12
# Vendor Homepage: https://www.wpgraphql.com/
# Version: 1.3.5
# Tested on: Ubuntu
"""
This attack uses duplication of fields amplified by GraphQL batched queries, resulting in server OOM and MySQL connection errors.
"""

import sys
import requests
def usage():
print('* WordPress GraphQL 1.3.5 Denial of Service *')
print('python {}
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
VMware vRealize Operations Manager Server-Side Request Forgery / Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Kimai 1.14 CSV Injection

https://3.bp.blogspot.com/-UEPmQpzFyCs/WWlvQSuTgiI/AAAAAAAAINA/LFaHvgtClFA67K--PZO5ZJSS69Dsl8UBACLcBGAs/s1600/h31.png
Kimai version 1.14 suffers from a CSV injection vulnerability.

MD5 | a1fd3a66018a7d6bae15c6926115dddd

Download
# Exploit Title: Kimai 1.14 - CSV Injection
# Date: 26/04/2021
# Exploit Author: Mohammed Aloraimi
# Vendor Homepage: https://www.kimai.org/
# Software Link: https://github.com/kevinpapst/kimai2
# Version: 1.14
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
4 Ways CISOs Can Strengthen Their Security Resilience

Security pros must remember bad actors will target their infrastructure, using counter-incident response technology in the process.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does Google keep MAC info?

Just to be clear, I'm a complete noob, just a student. I was wondering about setting up an experiment that would send information to a gmail email address or add a row to a Google sheet. I'd like to do it as stealthily as possible. I'm asking about Google services because they provide room enough to store a lot of data and I'm not sure how much I'll end up harvesting. If there are other more appropriate resources, I'd be very thankful to know about.

The questions are two×three: does Google keep the MAC info of the device used to create the account? Does Google keep track of the devices used to access the account later? If so, how can I conceal my MAC and IP info?

submitted by /u/ediblepet
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Fake ID

I need a fake ID plug

I don’t need some bullshit. I need the best fake ID plug. One that will pass if I were to get pulled over. Need it to match a full identity.

submitted by /u/KayleighHass
[link] [comments]

Kali Linux Tutorials
Cypheroth : Automated & Extensible Toolset That Runs Cypher Queries

Cypheroth is a automated, extensible toolset that runs cypher queries against Bloodhound’s Neo4j backend and saves output to spreadsheets. This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same queries through the Neo4j web interface on multiple assessments and figured there […]

The post Cypheroth : Automated & Extensible Toolset That Runs Cypher Queries appeared first on Kali Linux Tutorials.

Hacking on Medium
Questions on AI Threats in CyberSecurity

https://cdn-images-1.medium.com/max/2160/0*TpNbmwWtsXNvVAn0.png
As previously published by Amina Al Sherif

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
UnderTheWire — Century ~Part 1

https://cdn-images-1.medium.com/max/718/1*lBwncp-zpywIU8ziKBRCBA.png
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Using Vim/Neovim for Presentation

https://cdn-images-1.medium.com/max/2600/1*D7vncyCegGFIJIum0boxsg.png
Using Vim or Neovim for presentation.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video