Discovery of CVE-2022-35406

On 11th April 2022, it was a regular day for me, went to the office & trying to hack one product. I was doing the things that I do every…Continue reading on Medium »
Read more...

ApacheTomcatScanner - A Python Script To Scan For Apache Tomcat Server Vulnerabilities
http://www.kitploit.com/2022/09/apachetomcatscanner-python-script-to.html

___________________________
@hacking_Attack
@Hacking_Video

A python script to scan for Apache Tomcat server vulnerabilities.

FeaturesMultithreaded workers to search for Apache tomcat servers.Multiple target source possible: Retrieving list of computers (https://www.kitploit.com/search/label/Computers) from a Windows domain through an LDAP query to use them as a list of targets.Reading targets line by line from a file.Reading individual targets (IP/DNS/CIDR) from -tt/--target option.Custom list of ports to test.Tests for /manager/html access and default credentials.List the CVEs of each version with the --list-cves option
InstallationYou can now install it from pypi with this command:sudo python3 -m pip install apachetomcatscanner
Usage$ ./ApacheTomcatScanner.py -h
Apache Tomcat Scanner (https://www.kitploit.com/search/label/Scanner) v2.3.2 - by @podalirius_

usage: ApacheTomcatScanner.py [-h] [-v] [--debug] [-C] [-T THREADS] [-s] [--only-http] [--only-https] [--no-check-certificate] [--xlsx XLSX] [--json JSON] [-PI PROXY_IP] [-PP PROXY_PORT] [-rt REQUEST_TIMEOUT] [-tf TARGETS_FILE]
[-tt TARGET] [-tp TARGET_PORTS] [-ad AUTH_DOMAIN] [-ai AUTH_DC_IP] [-au AUTH_USER] [-ap AUTH_PASSWORD] [-ah AUTH_HASH]

A python script to scan for Apache Tomcat server vulnerabilities.

optional arguments:
-h, --help show this help message and exit
-v, --verbose Verbose mode. (default: False)
--debug Debug mode, for huge verbosity. (default: False)
-C, --list-cves List CVE ids affecting each version found. (default: False)
-T THREADS, --threads THREADS
Number of threads (default: 5)
-s, --servers-only If querying ActiveDirectory, only get servers and not all computer objects. (default: False)
--only-http Scan only with HTTP scheme. (default: False, scanning (https://www.kitploit.com/search/label/Scanning) with both HTTP and HTTPs)
--only-https Scan only with HTTPs scheme. (default: False, scanning with both HTTP and HTTPs)
--no-check-certificate
Do not check certificate. (default: False)
--xlsx XLSX Export results to XLSX
--json JSON Export results to JSON

-PI PROXY_IP, --proxy-ip PROXY_IP
Proxy IP.
-PP PROXY_PORT, --proxy-port PROXY_PORT
Proxy port
-rt REQUEST_TIMEOUT, --request-timeout REQUEST_TIMEOUT

-tf TARGETS_FILE, --targets-file TARGETS_FILE
Path to file containing a line by line list of targets.
-tt TARGET, --target TARGET
Target IP, FQDN or CIDR
-tp TARGET_PORTS, --target-ports TARGET_PORTS
Target ports to scan top search for Apache Tomcat servers.
-ad AUTH_DOMAIN, --auth-domain AUTH_DOMAIN
Windows domain to authenticate to.
-ai AUTH_DC_IP, --auth-dc-ip AUTH_DC_IP
IP of the domain controller.
-au AUTH_USER, --auth-user AUTH_USER
Username (https://www.kitploit.com/search/label/Username) of the domain account.
-ap AUTH_PASSWORD, --auth-password AUTH_PASSWORD
Password of the domain account.
-ah AUTH_HASH, --auth-hash AUTH_HASH
LM:NT hashes to pass the hash for this user.
Example

___________________________
@hacking_Attack
@Hacking_Video

You can also list the CVEs of each version with the --list-cves option:

___________________________
@hacking_Attack
@Hacking_Video

ContributingPull requests are welcome. Feel free to open an issue if you want to add other features.

Download ApacheTomcatScanner (https://github.com/p0dalirius/ApacheTomcatScanner)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Samsung: a cyberattack puts users’ personal data at risk

https://external-preview.redd.it/Jt44zh7u4jgeEwcPEZHiojT-jL0nuX0jiPnZqd84ZxI.jpg?width=640&crop=smart&auto=webp&s=32b95e2ebddb3c62239e2b9e7c644ea1d402c146 submitted by /u/AmerBekic
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The best website I use is an explorer, not an editor.

submitted by /u/TimDaub
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The OptiFi Glitch

https://external-preview.redd.it/IFbJfuOuXFGc8EDPSBiYF4C1kEM2Ve_APSqOoTKkGi0.jpg?width=320&crop=smart&auto=webp&s=f6060a02b539af4b22d1c31a4ad581fffdffbdc0 submitted by /u/yintianshi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is this harmful?

So, yesterday when I was at work, I received 4 adds on snapchat by search. I also got some 2FA codes in my inbox. Never had this happening before, nor know anyone who had this happening. Can anyone help?

Here's the images: https://ibb.co/p0k0T3S https://ibb.co/Df9SHmc https://ibb.co/nD0ZNGx

submitted by /u/Frisiaa
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is a hackathon? 10 hacks to prepare for a Hackathon.

https://cdn-images-1.medium.com/max/612/1*u-jLD7nHp8Lcs3lo1L8Ukg.jpeg
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Samsung confirms security breach

https://cdn-images-1.medium.com/max/1920/1*vh1755tEACyVs8qSDg1JiQ.jpeg
Another day and another security breach to report on, this time Samsung are the target.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
ApacheTomcatScanner - A Python Script To Scan For Apache Tomcat Server Vulnerabilities

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGj0uEW_yRh4LDfBQYUFlVp6udCKpAfXyGf2b5ZtJVzDC63sD3mamdTGUdNLsK_U1ebJ5VmYviqrXfPzJGt7x7ydzmRvVoTgMsWTOM0ulwXRnqsxHYkhY5q-Q56ePVZxarwrMeTi3pZRSM7cQ8ku8_gVlnn0zNy0VmvVQq-LBX37KK52wEJH5fXo8qeQ/w640-h118/ApacheTomcatScanner_1_banner.png A python script to scan for Apache Tomcat server vulnerabilities. Features* Multithreaded workers to search for Apache tomcat servers.
* Multiple target source possible:
* Retrieving list of computers from a Windows domain through an LDAP query to use them as a list of targets.
* Reading targets line by line from a file.
* Reading individual targets (IP/DNS/CIDR) from -tt/--targetoption.

* Custom list of ports to test.
* Tests for /manager/htmlaccess and default credentials.
* List the CVEs of each version with the --list-cvesoption InstallationYou can now install it from pypi with this command: sudo python3 -m pip install apachetomcatscanner Usage$ ./ApacheTomcatScanner.py -h
Apache Tomcat Scanner v2.3.2 - by @podalirius_

usage: ApacheTomcatScanner.py [-h] [-v] [--debug] [-C] [-T THREADS] [-s] [--only-http] [--only-https] [--no-check-certificate] [--xlsx XLSX] [--json JSON] [-PI PROXY_IP] [-PP PROXY_PORT] [-rt REQUEST_TIMEOUT] [-tf TARGETS_FILE]
[-tt TARGET] [-tp TARGET_PORTS] [-ad AUTH_DOMAIN] [-ai AUTH_DC_IP] [-au AUTH_USER] [-ap AUTH_PASSWORD] [-ah AUTH_HASH]

A python script to scan for Apache Tomcat server vulnerabilities.

optional arguments:
-h, --help show this help message and exit
-v, --verbose Verbose mode. (default: False)
--debug Debug mode, for huge verbosity. (default: False)
-C, --list-cves List CVE ids affecting each version found. (default: False)
-T THREADS, --threads THREADS
Number of threads (default: 5)
-s, --servers-only If querying ActiveDirectory, only get servers and not all computer objects. (default: False)
--only-http Scan only with HTTP scheme. (default: False, scanning with both HTTP and HTTPs)
--only-https Scan only with HTTPs scheme. (default: False, scanning with both HTTP and HTTPs)
--no-check-certificate
Do not check certificate. (default: False)
--xlsx XLSX Export results to XLSX
--json JSON Export results to JSON

-PI PROXY_IP, --proxy-ip PROXY_IP
Proxy IP.
-PP PROXY_PORT, --proxy-port PROXY_PORT
Proxy port
-rt REQUEST_TIMEOUT, --request-timeout REQUEST_TIMEOUT

-tf TARGETS_FILE, --targets-file TARGETS_FILE
Path to file containing a line by line list of targets.
-tt TARGET, --target TARGET
Target IP, FQDN or CIDR
-tp TARGET_PORTS, --target-ports TARGET_PORTS
Target ports to scan top search for Apache Tomcat servers.
-ad AUTH_DOMAIN, --auth-domain AUTH_DOMAIN
Windows domain to authenticate to.
-ai AUTH_DC_IP, --auth-dc-ip AUTH_DC_IP
IP of the domain controller.
-au AUTH_USER, --auth-user AUTH_USER Username of the domain account.
-ap AUTH_PASSWORD, --auth-password AUTH_PASSWORD
Password of the domain account.
-ah AUTH_HASH, --auth-hash AUTH_HASH
LM:NT hashes to pass the hash for this user. Examplehttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjA5BOT_IN-jOKWt8XSNz9ut1eGifuyjiodzEs0aGdnHu0-6hAth2gF5P0auhgBmm1o-kwAilSBBc9yMhFSzATp9s5hbTN6m9POQ63QyVUQ4n2X2GVp9pSaBij3N2zh2EVT-538CBPfcFZS8_Pv0Kk8dNh8zygQdlT_xBKoas-zLOxHZNNdVm-vahN8Rw/w640-h140/ApacheTomcatScanner_8_example.png You can also list the CVEs of each version with the --list-cvesoption: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhSVHlX3F1eiMQ4WcTfJEJ1pftYgekVtVYnFrdN33_E2z8eR757bqJPlxVS2TaQZ_d6_PTadoRJwSVELA9il4Xtr5doJVgi5wY9qpPaW8Isa_6E2xymN_1qYhHQp3Ar1IRCJUkOHoXqTCCrEJU0OvAtTK8O_QKbiwSni_12jB-6frt5sYEhMPBozecug/w640-h290/ApacheTomcatScanner_9_example_list_cves.png ContributingPull requests are welcome. Feel free to open an issue if you want to add other features. Download ApacheTomcatScanner

___________________________
@hacking_Attack
@Hacking_Video