Hacking on Medium
Cyberedu JWT Authorization Lab

https://cdn-images-1.medium.com/max/1920/1*H6GSvirXwr0loYCsdpZDAg.png
გამარჯობა, ამ პოსტში გაჩვენებთ თუ როგორ ამოვხსენი Cyberedu -ს Json Web Token Authorization Lab. პირველ რიგში შევედი ვებ გვერდზე:

Continue reading on Medium »

Hacking on Medium
How Binance Saved Huobi From Hacke

https://cdn-images-1.medium.com/max/2600/1*Ubybp3-vggik-giJg-Fd_w.jpeg
Investments in cryptocurrencies are growing, and so are hacking incidents. This has discouraged a significant portion of the population…

Continue reading on Medium »

Hacking on Medium
Who am I?

https://cdn-images-1.medium.com/max/2600/0*4sNiFGiBFlYtwVNl
Introduction

Continue reading on Medium »

Hacking on Medium
Exploring the Intersection of Cybersecurity and Artificial Intelligence: How AI can be used to…

https://cdn-images-1.medium.com/max/2600/1*K_GWnRTvKoVl5V_VNAdhmA.jpeg
Cybersecurity and Artificial Intelligence (AI) are two of the most important and rapidly evolving technologies of our time. Both have the…

Continue reading on Medium »

At what point do you feel competent?
https://www.reddit.com/r/Pentesting/comments/10dphqe/at_what_point_do_you_feel_competent/

submitted by /u/Waddup_yall (https://www.reddit.com/user/Waddup_yall)
[link] (https://www.reddit.com/r/Pentesting/comments/10dphqe/at_what_point_do_you_feel_competent/) [comments] (https://www.reddit.com/r/Pentesting/comments/10dphqe/at_what_point_do_you_feel_competent/)

Cortex XDR - query on behaviour based detection
https://www.reddit.com/r/redteamsec/comments/10dp7kk/cortex_xdr_query_on_behaviour_based_detection/

<!-- SC_OFF -->Any Cortex XDR users in house? Was wondering how can i check if cortex xdr would have behaviour based protection from a specific vulnerability exploit on managed exndpoints? <!-- SC_ON --> submitted by /u/Odd-Feed-9797 (https://www.reddit.com/user/Odd-Feed-9797)
[link] (https://www.reddit.com/r/redteamsec/comments/10dp7kk/cortex_xdr_query_on_behaviour_based_detection/) [comments] (https://www.reddit.com/r/redteamsec/comments/10dp7kk/cortex_xdr_query_on_behaviour_based_detection/)

XSS in nodejs application
https://abd0hrz.medium.com/xss-in-nodejs-application-3cba983c4f8?source=rss------bug_bounty-5

Table Of ContentsContinue reading on Medium » (https://abd0hrz.medium.com/xss-in-nodejs-application-3cba983c4f8?source=rss------bug_bounty-5)

XSS in nodejs application

Table Of ContentsContinue reading on Medium »
Read more...

Hacking into (RCE) Government Server operated for the US Department of Energy’s National Nuclear…

I had always been determined to make a name for myself in the field of cyber security. I had already uncovered vulnerabilities in giants…Continue reading on Medium »
Read more...

Hacking into (RCE) Government Server operated for the US Department of Energy’s National Nuclear…
https://medium.com/@shaheenfazim/hacking-into-rce-government-server-operated-for-the-us-department-of-energys-national-nuclear-8aadc2e7e491?source=rss------bug_bounty-5

I had always been determined to make a name for myself in the field of cyber security. I had already uncovered vulnerabilities in giants…Continue reading on Medium » (https://medium.com/@shaheenfazim/hacking-into-rce-government-server-operated-for-the-us-department-of-energys-national-nuclear-8aadc2e7e491?source=rss------bug_bounty-5)

hacking: security in practice
WP 5.9.2 - prototype Pollution?

1. I;m doing a ctf and enumerated the targed & found 2 user password for the wp -admin via xml-rpc.
2. 2 SHH cert. file auth only, trying to find the vulnerability that levrage rce, maybe someone here has any solutions? I metion that the one of the 2 users has some administrative priv. (like accepting/deny posts).
3. found db info(db_name, DB-user, DB-pass) but it listens on local so cant get access
4.
pastebin wp-scan link here

5.
info links:
https://www.tenable.com/plugins/was/113193

https://security.snyk.io/vuln/SNYK-JS-JQUERY-174006

https://www.wordfence.com/blog/2022/03/wordpress-5-9-2-security-update-fixes-xss-and-prototype-pollution-vulnerabilities/

https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

https://vulmon.com/vulnerabilitydetails?qid=CVE-2019-11358&scoretype=cvssv3

Any help is much appreciated!!

submitted by /u/wildmuffincake420
[link] [comments]

hacking: security in practice
Wordpress 5.9.2 RCE?

1. I;m doing a ctf and enumerated the targed & found 2 user password for the wp -admin via xml-rpc.
2. 2 SHH cert. file auth only, trying to find the vulnerability that levrage rce(reverse shell), maybe someone here has any solutions? I metion that the one of the 2 users has some administrative priv. (like accepting/deny posts).
3. found db info(db_name, DB-user, DB-pass) but it listens on local so cant get access
4. pastebin wp-scan link here
5. info links:

https://www.tenable.com/plugins/was/113193

https://security.snyk.io/vuln/SNYK-JS-JQUERY-174006

https://www.wordfence.com/blog/2022/03/wordpress-5-9-2-security-update-fixes-xss-and-prototype-pollution-vulnerabilities/

https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

https://vulmon.com/vulnerabilitydetails?qid=CVE-2019-11358&scoretype=cvssv3

Any help is much appreciated!!

submitted by /u/wildmuffincake420
[link] [comments]