Exploit Collector
Revenue Collection System 1.0 SQL Injection / Remote Code Execution

https://1.bp.blogspot.com/-5_4vnaEHtE4/WWlvOudg9oI/AAAAAAAAIMs/tPLG-GePmxgLMlPyiIuDfO-2MFfOtdhKQCLcBGAs/s1600/h26.png
Revenue Collection System version 1.0 suffers from an unauthenticated SQL injection vulnerability in step1.php that allows remote attackers to write a malicious PHP file to disk. The resulting file can then be accessed within the /rates/admin/DBbackup directory. This script will write the malicious PHP file to disk, issue a user-defined command, then retrieve the result of that command.

SHA-256 | b41c4f6c71ea1156cfd52b2bd3c354cdb2fc0372d5b22d463c64b50c55b777c0

Download
# Exploit Title: Revenue Collection System v1.0 - RCE via Unauthenticated SQL Injection
# Exploit Author: Joe Pollock
# Date: November 16, 2022
# Vendor Homepage: https://www.sourcecodester.com/php/14904/rates-system.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/rates.zip
# Tested on: Kali Linux, Apache, Mysql
# CVE: T.B.C
# Vendor: Kapiya
# Version: 1.0
# Exploit Description:
# Revenue Collection System v1.0 suffers from an unauthenticated SQL Injection Vulnerability, in step1.php, allowing remote attackers to
# write a malicious PHP file to disk. The resulting file can then be accessed within the /rates/admin/DBbackup directory.
# This script will write the malicious PHP file to disk, issue a user-defined command, then retrieve the result of that command.
# Ex: python3 rcsv1.py 10.10.14.2 "ls"

import sys, requests
def main():
if len(sys.argv) != 3:
print("(+) usage: %s
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Quux MVID-2022-0656 Hardcoded Credential

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Internet Download Manager 6.41 Build 3 Man-In-The-Middle

https://3.bp.blogspot.com/-8aNXwMYQICE/WWlvIs7ranI/AAAAAAAAILw/f2UnTjqyD14e3ZIoWuyFJjQ7Is9Nz7MtQCLcBGAs/s1600/h144.png
Internet Download Manager version 6.41 Build 3 suffers from a man-in-the-middle vulnerability that can enable an attacker to execute code on the victim's system.

SHA-256 | c91e3d887c068869ed07efa29c9e1304cc683d984cd8274cd1ef8940678521d0

Download
# Vulnerability Title: Internet Download Manager v6.41 Build 3 "Remote Code Execution via MITM" Vulnerability
# Date: 15.11.2022
# Author: M. Akil Gündoğan
# Contact: https://twitter.com/akilgundogan
# Vendor Homepage: https://www.internetdownloadmanager.com/
# Software Link: https://mirror2.internetdownloadmanager.com/idman641build3.exe?v=lt&filename=idman641build3.exe
# Version: v.6.41 Build 3
# Tested on: Windows 10 Professional x64
# PoC Video: https://youtu.be/0djlanUbfY4

Vulnerabiliy Description:
---------------------------------------
Some help files are missing in non-English versions of Internet Download Manager. Help files with the extension
".chm" prepared in the language used are downloaded from the internet and run, and displayed to users. This download is
done over HTTP, which is an insecure protocol. An attacker on the local network can spoof traffic with a MITM attack and
replaces ".chm" help files with malicious ".chm" files. IDM runs ".chm" files automatically after downloading.
This allows the attacker to execute code remotely.

It also uses HTTP for checking and downloading updates by IDM. The attacker can send fake updates as if the victim has a new update to the system.

Since we preferred to use Turkish IDM, our target address in the MITM attack was "http://www.internetdownloadmanager.com/languages/tut_tr.chm".

Requirements:
---------------------------------------
The attacker and the victim must be on the same local network.
The victim using the computer must have a user account with administrative privileges on the system. The attacker does not need to have administrator privileges!

Step by step produce:
---------------------------------------
1 - The attacker prepares a malicious CHM file. You can read the article at "https://sevenlayers.com/index.php/316-malicious-chm" for that.
2 - A MITM attack is made against the target using Ettercap or Bettercap.
3 - Let's redirect the domains "internetdownloadmanager.com" and "*.internetdownloadmanager.com" to our attacker machine with DNS spoofing.
4 - A web server is run on the attacking machine and the languages directory is created and the malicious ".chm" file with the
same name (tut_tr.chm / the file according to which language you are using.) is placed in it.
5 - When the victim opens Internet Download Manager and clicks on the "Tutorials" button, the download will start and our malicious ".chm" file will run automatically when it's finished.

Advisories:
---------------------------------------
Developers should stop using insecure HTTP in their update and download modules. In addition, every downloaded file
should not be run automatically, additional warning messages should be displayed for users.

Special thanks: p4rs, ratio, blackcode, zeyd.can and all friends.
---------------------------------------

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Evilgophish : Evilginx2 + Gophish

___________________________
@hacking_Attack
@Hacking_Video

Writeup Bug Sistem Informasi Milik Dispendukcapil Kota Pasuruan

Alhamdulillah hari ini laporan saya terkait bug pada web application milik Dispendukcapil Kota Pasuruan telah selesai diperbaiki.Continue reading on Medium »
Read more...

Writeup Bug Sistem Informasi Milik Dispendukcapil Kota Pasuruan
https://medium.com/@mnovel78/writeup-bug-sistem-milik-dispendukcapil-kota-pasuruan-761a0768fca2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Alhamdulillah hari ini laporan saya terkait bug pada web application milik Dispendukcapil Kota Pasuruan telah selesai diperbaiki.Continue reading on Medium » (https://medium.com/@mnovel78/writeup-bug-sistem-milik-dispendukcapil-kota-pasuruan-761a0768fca2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Do you guys think a moderate level of hacking/cybersecurity skills will become an essential survival skill?

Probably a dumb question but I’m curious (mostly concerned) because on the news I’m hearing more cyber attacks happening more often, one of my banks got their data breached. Bad actors are getting more clever. Our personal information is pretty much everywhere. Also for those normal people who like to post their lives in social media, it looks like a social engineering attack is waiting for them around the corner.

As time goes by it just looks like we’re becoming less safe in general especially since our dependence on technology is growing.

Example what if some careless person who doesn’t use a password manager has their Facebook account hacked, which leads them to their email which uses the same password. They get into their email and reset their bank login details from the stolen email and RIP all their money is taken by the evil hacker man then they die because they can’t afford food.

What do you guys think? Should everyone take cybersecurity more seriously in their personal lives? If so how much knowledge will be enough? Or will we forever be required to dedicate some of our time to just keep up with changing technology? Is no one safe anymore?

submitted by /u/Throwaway247325422
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Investigadores descubren cientos de instancias de Amazon RDS que filtran datos personales de los…

https://cdn-images-1.medium.com/max/1099/0*lzq31noMUVb-cQl9
Cientos de bases de datos en Amazon Relational Database Service (Amazon RDS) están exponiendo información de identificación personal (PII)…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
nastyserTryHackMe — Revenge (Portuguese Writeup)

https://cdn-images-1.medium.com/max/619/1*JPVrq8SvBWJi21kIyR-sTg.png
Nessa publicação quero mostrar o caminho que segui para encontrar as flags da máquina Revenge do TryHackMe. Apesar de estar listada com…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to hack medium to get views.

https://cdn-images-1.medium.com/max/640/1*clTRAvkcTHpFG9kpJPpkzg.jpeg
Today I’m going to show you how to hack medium to get views and subs. You will need to follow the instruction step by step.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Proxys, VPNs y TOR: ¿Qué debes saber para ser realmente anónimo?

https://cdn-images-1.medium.com/max/1771/0*GZPWIN3OftqLmUMw
Antes de que cojas y utilices el primer servicio proxy o VPN que te salga anunciado en Google te recomiendo que leas este post donde…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video