hacking: security in practice
WP 5.9.2 - prototype Pollution?

1. I;m doing a ctf and enumerated the targed & found 2 user password for the wp -admin via xml-rpc.
2. 2 SHH cert. file auth only, trying to find the vulnerability that levrage rce, maybe someone here has any solutions? I metion that the one of the 2 users has some administrative priv. (like accepting/deny posts).
3. found db info(db_name, DB-user, DB-pass) but it listens on local so cant get access
4.
pastebin wp-scan link here

5.
info links:
https://www.tenable.com/plugins/was/113193

https://security.snyk.io/vuln/SNYK-JS-JQUERY-174006

https://www.wordfence.com/blog/2022/03/wordpress-5-9-2-security-update-fixes-xss-and-prototype-pollution-vulnerabilities/

https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

https://vulmon.com/vulnerabilitydetails?qid=CVE-2019-11358&scoretype=cvssv3

Any help is much appreciated!!

submitted by /u/wildmuffincake420
[link] [comments]

hacking: security in practice
Wordpress 5.9.2 RCE?

1. I;m doing a ctf and enumerated the targed & found 2 user password for the wp -admin via xml-rpc.
2. 2 SHH cert. file auth only, trying to find the vulnerability that levrage rce(reverse shell), maybe someone here has any solutions? I metion that the one of the 2 users has some administrative priv. (like accepting/deny posts).
3. found db info(db_name, DB-user, DB-pass) but it listens on local so cant get access
4. pastebin wp-scan link here
5. info links:

https://www.tenable.com/plugins/was/113193

https://security.snyk.io/vuln/SNYK-JS-JQUERY-174006

https://www.wordfence.com/blog/2022/03/wordpress-5-9-2-security-update-fixes-xss-and-prototype-pollution-vulnerabilities/

https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

https://vulmon.com/vulnerabilitydetails?qid=CVE-2019-11358&scoretype=cvssv3

Any help is much appreciated!!

submitted by /u/wildmuffincake420
[link] [comments]

hacking: security in practice
Are there USB Autorun Bypasses/Alternatives for newer versions of Windows?

Hey, I have a USB and am trying to run a batch file automatically when the USB is plugged in. Using an Autorun.inf file is highly deprecated, as you have to manually enable autorun to be allowed via your settings. Does anyone know any alternatives I can use? I would prefer them to not need any user interaction, but if they do that's fine. I read that windows has relaxed restrictions for CD/ROM Disks when it comes to autorun, so could I make a small (1 or 2 mb) partition, and put an autorun.inf file in there? I am really lost right now, any help will be appreciated.

submitted by /u/Hyperninja303
[link] [comments]

hacking: security in practice
make a payload actually FUD

Holy shit I have been trying to find a way to make metasploit payloads FUD and all I can find "oh use an encoder option" ITS STILL GETTING DETECTED BY THE SIMPLEST AV WINDOWS DEFENDER!!!!! Does anyone actually know how to make a msfvenom payload FUD

submitted by /u/mandoof1
[link] [comments]

Hacking on Medium
What is SSTI?

Server-Side Template Injection (SSTI) is a type of web vulnerability that occurs when user-supplied data is used to dynamically generate…

Continue reading on Medium »

Hacking on Medium
“Gang Busted” — GrabCON CTF writeup

https://cdn-images-1.medium.com/max/600/1*mwX3OxjHSmhIYS9Q42KHRQ.png
GrabCON CTF Android forensic challenge!

Continue reading on Medium »

Hacking on Medium
Article of the Day: Recovering Cryptocurrency

https://cdn-images-1.medium.com/max/1417/1*bvh-OOEsOa_VvUyNiM3_mA.jpeg
How governments seize millions in stolen cryptocurrency — Patrick Howell O’Neill, MIT Technology Review, 7/26/2022

Continue reading on Hybrid Analyst »

Hacking on Medium
Explotación de falla 0-Day SSL-VPN de FortiOS para atacar organizaciones gubernamentales

https://cdn-images-1.medium.com/max/849/0*KK8yXpaH4pyqpNDd
Ha habido una serie de ataques contra organizaciones gubernamentales y objetivos relacionados con el gobierno utilizando las…

Continue reading on Medium »

Hacking on Medium
Hacking into (RCE) Government Server operated for the US Department of Energy’s National Nuclear…

https://cdn-images-1.medium.com/max/1280/1*OBQMl0K-MPehDr9H7GcAYw.jpeg
I had always been determined to make a name for myself in the field of cyber security. I had already uncovered vulnerabilities in giants…

Continue reading on Medium »

Hacking on Medium
How to Become an Expert on LinkedIn

https://cdn-images-1.medium.com/max/800/1*YfhTosjhQ4nYQKWRZjPFnA.jpeg
Here are some steps you can take to become an expert on LinkedIn:

Continue reading on Medium »

Hacking on Medium
Unveiling the Top 12 Social Engineering Tactics: How to Protect Yourself from the Tricks of…

https://cdn-images-1.medium.com/max/1920/1*HiP4PjHujdWfjh83g5xOAQ.jpeg
Cybercriminals have become increasingly sophisticated in their methods of tricking individuals and organizations into giving up sensitive…

Continue reading on Medium »