Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
Eatself 1.1.5 SQL Injection
https://3.bp.blogspot.com/-4JQvP0m8T2k/WWlu48OEwdI/AAAAAAAAII8/Zf-K1JUBYisUlMBEUhCPF3Gl3BdQ2zG_gCLcBGAs/s1600/h103.png
Eatself version 1.1.5 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
SHA-256 |
Download
Source:packetstormsecurity.com
Eatself 1.1.5 SQL Injection
https://3.bp.blogspot.com/-4JQvP0m8T2k/WWlu48OEwdI/AAAAAAAAII8/Zf-K1JUBYisUlMBEUhCPF3Gl3BdQ2zG_gCLcBGAs/s1600/h103.png
Eatself version 1.1.5 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
SHA-256 |
f4fa31a0d3106d8c1adb588bd047ea6ff13bd2f69bed2e503589be0b1ec5678aDownload
====================================================================================================================================
| # Title : Eatself v1.1.5 Auth By Pass Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 69.0(32-bit) |
| # Vendor : https://eatself.com/ |
| # Dork : " © Eatself. Tous droits réservés - v1.1.5." |
====================================================================================================================================
poc :
[+] Dorking İn Google Or Other Search Enggine.
[+] Use payload : user : 'or''='@gmail.com& Pass : 'or''=' (toltal control of admin panel )
[+] https://127.0.0.1/app.eatself/admin-login
Greetings to :=========================================================================================================================
|
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm* |
|
=======================================================================================================================================
Source:packetstormsecurity.com
Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
cryptmount Filesystem Manager 6.2.0
https://4.bp.blogspot.com/-ILIpsq3JVDo/WWlvQ8IjxbI/AAAAAAAAINI/veR2GTC9zzcP6cUZEvOZqGdUDt2RtL0uQCLcBGAs/s1600/h32.png
cryptmount is a utility for creating and managing secure filing systems on GNU/Linux systems. After initial setup, it allows any user to mount or unmount filesystems on demand, solely by providing the decryption password, with any system devices needed to access the filing system being configured automatically. A wide variety of encryption schemes (provided by the kernel dm-crypt system and the libgcrypt library) can be used to protect both the filesystem and the access key. The protected filing systems can reside in either ordinary files or disk partitions. The package also supports encrypted swap partitions, and automatic configuration on system boot-up.
SHA-256 |
Download
Source:packetstormsecurity.com
cryptmount Filesystem Manager 6.2.0
https://4.bp.blogspot.com/-ILIpsq3JVDo/WWlvQ8IjxbI/AAAAAAAAINI/veR2GTC9zzcP6cUZEvOZqGdUDt2RtL0uQCLcBGAs/s1600/h32.png
cryptmount is a utility for creating and managing secure filing systems on GNU/Linux systems. After initial setup, it allows any user to mount or unmount filesystems on demand, solely by providing the decryption password, with any system devices needed to access the filing system being configured automatically. A wide variety of encryption schemes (provided by the kernel dm-crypt system and the libgcrypt library) can be used to protect both the filesystem and the access key. The protected filing systems can reside in either ordinary files or disk partitions. The package also supports encrypted swap partitions, and automatic configuration on system boot-up.
SHA-256 |
90cc49fd598d636929c70479b1305f12b011edadf4a54578ace6c0fca8cb5ed2Download
Source:packetstormsecurity.com
How to continue studying pentesting
https://www.reddit.com/r/Pentesting/comments/107g7tz/how_to_continue_studying_pentesting/
<!-- SC_OFF -->Hi, I have been working towards my pentesting career for a while. However i i bumped into issue. I forget quite a lot of it. I also constantly run into issue where instead of trying out various attack vectors i go and look into writeups. Has anyone had this issue where you struggled at your career path and how did you worked around these problems? <!-- SC_ON --> submitted by /u/AvCan (https://www.reddit.com/user/AvCan)
[link] (https://www.reddit.com/r/Pentesting/comments/107g7tz/how_to_continue_studying_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/107g7tz/how_to_continue_studying_pentesting/)
https://www.reddit.com/r/Pentesting/comments/107g7tz/how_to_continue_studying_pentesting/
<!-- SC_OFF -->Hi, I have been working towards my pentesting career for a while. However i i bumped into issue. I forget quite a lot of it. I also constantly run into issue where instead of trying out various attack vectors i go and look into writeups. Has anyone had this issue where you struggled at your career path and how did you worked around these problems? <!-- SC_ON --> submitted by /u/AvCan (https://www.reddit.com/user/AvCan)
[link] (https://www.reddit.com/r/Pentesting/comments/107g7tz/how_to_continue_studying_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/107g7tz/how_to_continue_studying_pentesting/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Reconnaissance
If someone gets remote access to a system like a college server, public library, what are the things in the system which may contain sensitive information?
Like:- 1) general/hidden files as people have habit to write their passwords if there are many
2) bash_history
3) browser stored passwords
4) active applications with opened ports
5) may open camera if it has one
submitted by /u/inter_locus789
[link] [comments]
Reconnaissance
If someone gets remote access to a system like a college server, public library, what are the things in the system which may contain sensitive information?
Like:- 1) general/hidden files as people have habit to write their passwords if there are many
2) bash_history
3) browser stored passwords
4) active applications with opened ports
5) may open camera if it has one
submitted by /u/inter_locus789
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Security experts often recommend the use of a burner laptop for increased anonymity, regardless of how hidden your traffic is. What if...
What if a cybercriminal uses a live USB on the home PC (encrypted disk) while running system traffic under multiple proxies and other layered approaches, while also implementing a no file download/upload policy, and blocking interactive browser scripts.
No personal info or metadata shared or used.
Aside the possible mishandling of data passed to proxies, is there any other way the criminal can be tracked?
(Tldr; why is using a burner laptop necessary for total anonymity. Why not use a home pc along with strict security policies and layered approaches?)
submitted by /u/FWitDreDay
[link] [comments]
Security experts often recommend the use of a burner laptop for increased anonymity, regardless of how hidden your traffic is. What if...
What if a cybercriminal uses a live USB on the home PC (encrypted disk) while running system traffic under multiple proxies and other layered approaches, while also implementing a no file download/upload policy, and blocking interactive browser scripts.
No personal info or metadata shared or used.
Aside the possible mishandling of data passed to proxies, is there any other way the criminal can be tracked?
(Tldr; why is using a burner laptop necessary for total anonymity. Why not use a home pc along with strict security policies and layered approaches?)
submitted by /u/FWitDreDay
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Windows BSOD over WiFi found?
Disclaimer: All below can be consitently re-created on multiple devices
Hey, our school wifi network is so well setup that my PC literally BSOD after like 15 minutes of connecting to it. This is a consistent event, tried it multiple times during the day. I spend the whole lecture on my hotspot and once i connect to the school wifi it takes between 5-10 minutes for my Laptop to just die. I've seen this on other people's computer in my class. I feel like there's someone out there trying to figure out how to trigger a bsod over wifi on purpose and my school is just doing this for free. I don't exactly remember the error codes but it's usually one out of 3. I can recreate it if someone's interested.
What can i do to further investigate? Maybe turn this into a usable exploit? What would be the steps to figure out what exactly is different in the school wifi?
submitted by /u/-Scobra-
[link] [comments]
Windows BSOD over WiFi found?
Disclaimer: All below can be consitently re-created on multiple devices
Hey, our school wifi network is so well setup that my PC literally BSOD after like 15 minutes of connecting to it. This is a consistent event, tried it multiple times during the day. I spend the whole lecture on my hotspot and once i connect to the school wifi it takes between 5-10 minutes for my Laptop to just die. I've seen this on other people's computer in my class. I feel like there's someone out there trying to figure out how to trigger a bsod over wifi on purpose and my school is just doing this for free. I don't exactly remember the error codes but it's usually one out of 3. I can recreate it if someone's interested.
What can i do to further investigate? Maybe turn this into a usable exploit? What would be the steps to figure out what exactly is different in the school wifi?
submitted by /u/-Scobra-
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Fundamentals of web security against injection attacks
https://cdn-images-1.medium.com/max/2600/0*O-ujVoPPzXgbV1My
Injection attacks are responsible for some of the most notorious exploitation of web security vulnerabilities. They have led to the most…
Continue reading on Medium »
Fundamentals of web security against injection attacks
https://cdn-images-1.medium.com/max/2600/0*O-ujVoPPzXgbV1My
Injection attacks are responsible for some of the most notorious exploitation of web security vulnerabilities. They have led to the most…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Top five Cyber Threat Intel stories of the week: 01/02 to 01/06/2023
https://cdn-images-1.medium.com/max/1000/0*vyhqapO126PaatPk
Top 5 general threat intelligence stories of the week. This is from TLP white/open-source websites, so please feel free to share with…
Continue reading on Hunter Strategy »
Top five Cyber Threat Intel stories of the week: 01/02 to 01/06/2023
https://cdn-images-1.medium.com/max/1000/0*vyhqapO126PaatPk
Top 5 general threat intelligence stories of the week. This is from TLP white/open-source websites, so please feel free to share with…
Continue reading on Hunter Strategy »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Nuevo estudio descubre vulnerabilidades del modelo de texto a SQL que permiten el robo de datos y…
https://cdn-images-1.medium.com/max/1717/0*eI7V4NHqvWIjIOaI
Un grupo de académicos ha demostrado nuevos ataques que aprovechan los modelos Text-to-SQL para producir código malicioso que podría…
Continue reading on Medium »
Nuevo estudio descubre vulnerabilidades del modelo de texto a SQL que permiten el robo de datos y…
https://cdn-images-1.medium.com/max/1717/0*eI7V4NHqvWIjIOaI
Un grupo de académicos ha demostrado nuevos ataques que aprovechan los modelos Text-to-SQL para producir código malicioso que podría…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hacking Hackers for fun and profit
https://cdn-images-1.medium.com/max/1024/1*cc5TeaLR6KaqMSJ0GHGAmA.png
This story will be in several parts. In each of the situations, I had to face unexpected results.
Continue reading on Medium »
Hacking Hackers for fun and profit
https://cdn-images-1.medium.com/max/1024/1*cc5TeaLR6KaqMSJ0GHGAmA.png
This story will be in several parts. In each of the situations, I had to face unexpected results.
Continue reading on Medium »
Open redirects : bug bounties
https://falkensmaze.medium.com/open-redirects-bug-bounties-28efffb635c?source=rss------bug_bounty-5
https://falkensmaze.medium.com/open-redirects-bug-bounties-28efffb635c?source=rss------bug_bounty-5