Cortex XDR - query on behaviour based detection
https://www.reddit.com/r/redteamsec/comments/10dp7kk/cortex_xdr_query_on_behaviour_based_detection/

<!-- SC_OFF -->Any Cortex XDR users in house? Was wondering how can i check if cortex xdr would have behaviour based protection from a specific vulnerability exploit on managed exndpoints? <!-- SC_ON --> submitted by /u/Odd-Feed-9797 (https://www.reddit.com/user/Odd-Feed-9797)
[link] (https://www.reddit.com/r/redteamsec/comments/10dp7kk/cortex_xdr_query_on_behaviour_based_detection/) [comments] (https://www.reddit.com/r/redteamsec/comments/10dp7kk/cortex_xdr_query_on_behaviour_based_detection/)

XSS in nodejs application
https://abd0hrz.medium.com/xss-in-nodejs-application-3cba983c4f8?source=rss------bug_bounty-5

Table Of ContentsContinue reading on Medium » (https://abd0hrz.medium.com/xss-in-nodejs-application-3cba983c4f8?source=rss------bug_bounty-5)

XSS in nodejs application

Table Of ContentsContinue reading on Medium »
Read more...

Hacking into (RCE) Government Server operated for the US Department of Energy’s National Nuclear…

I had always been determined to make a name for myself in the field of cyber security. I had already uncovered vulnerabilities in giants…Continue reading on Medium »
Read more...

Hacking into (RCE) Government Server operated for the US Department of Energy’s National Nuclear…
https://medium.com/@shaheenfazim/hacking-into-rce-government-server-operated-for-the-us-department-of-energys-national-nuclear-8aadc2e7e491?source=rss------bug_bounty-5

I had always been determined to make a name for myself in the field of cyber security. I had already uncovered vulnerabilities in giants…Continue reading on Medium » (https://medium.com/@shaheenfazim/hacking-into-rce-government-server-operated-for-the-us-department-of-energys-national-nuclear-8aadc2e7e491?source=rss------bug_bounty-5)

hacking: security in practice
WP 5.9.2 - prototype Pollution?

1. I;m doing a ctf and enumerated the targed & found 2 user password for the wp -admin via xml-rpc.
2. 2 SHH cert. file auth only, trying to find the vulnerability that levrage rce, maybe someone here has any solutions? I metion that the one of the 2 users has some administrative priv. (like accepting/deny posts).
3. found db info(db_name, DB-user, DB-pass) but it listens on local so cant get access
4.
pastebin wp-scan link here

5.
info links:
https://www.tenable.com/plugins/was/113193

https://security.snyk.io/vuln/SNYK-JS-JQUERY-174006

https://www.wordfence.com/blog/2022/03/wordpress-5-9-2-security-update-fixes-xss-and-prototype-pollution-vulnerabilities/

https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

https://vulmon.com/vulnerabilitydetails?qid=CVE-2019-11358&scoretype=cvssv3

Any help is much appreciated!!

submitted by /u/wildmuffincake420
[link] [comments]

hacking: security in practice
Wordpress 5.9.2 RCE?

1. I;m doing a ctf and enumerated the targed & found 2 user password for the wp -admin via xml-rpc.
2. 2 SHH cert. file auth only, trying to find the vulnerability that levrage rce(reverse shell), maybe someone here has any solutions? I metion that the one of the 2 users has some administrative priv. (like accepting/deny posts).
3. found db info(db_name, DB-user, DB-pass) but it listens on local so cant get access
4. pastebin wp-scan link here
5. info links:

https://www.tenable.com/plugins/was/113193

https://security.snyk.io/vuln/SNYK-JS-JQUERY-174006

https://www.wordfence.com/blog/2022/03/wordpress-5-9-2-security-update-fixes-xss-and-prototype-pollution-vulnerabilities/

https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

https://vulmon.com/vulnerabilitydetails?qid=CVE-2019-11358&scoretype=cvssv3

Any help is much appreciated!!

submitted by /u/wildmuffincake420
[link] [comments]

hacking: security in practice
Are there USB Autorun Bypasses/Alternatives for newer versions of Windows?

Hey, I have a USB and am trying to run a batch file automatically when the USB is plugged in. Using an Autorun.inf file is highly deprecated, as you have to manually enable autorun to be allowed via your settings. Does anyone know any alternatives I can use? I would prefer them to not need any user interaction, but if they do that's fine. I read that windows has relaxed restrictions for CD/ROM Disks when it comes to autorun, so could I make a small (1 or 2 mb) partition, and put an autorun.inf file in there? I am really lost right now, any help will be appreciated.

submitted by /u/Hyperninja303
[link] [comments]

hacking: security in practice
make a payload actually FUD

Holy shit I have been trying to find a way to make metasploit payloads FUD and all I can find "oh use an encoder option" ITS STILL GETTING DETECTED BY THE SIMPLEST AV WINDOWS DEFENDER!!!!! Does anyone actually know how to make a msfvenom payload FUD

submitted by /u/mandoof1
[link] [comments]

Hacking on Medium
What is SSTI?

Server-Side Template Injection (SSTI) is a type of web vulnerability that occurs when user-supplied data is used to dynamically generate…

Continue reading on Medium »

Hacking on Medium
“Gang Busted” — GrabCON CTF writeup

https://cdn-images-1.medium.com/max/600/1*mwX3OxjHSmhIYS9Q42KHRQ.png
GrabCON CTF Android forensic challenge!

Continue reading on Medium »