Exploit Collector
Backdoor.Win32.Singu.a Buffer Overflow

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress ReDi Restaurant Reservation 21.0307 Cross Site Scripting

https://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png
WordPress ReDi Restaurant Reservation plugin version 21.0307 suffers from a persistent cross site scripting vulnerability.

MD5 | 97371d46e078284e75d608dc3d9438a0

Download
# Exploit Title: WordPress Plugin ReDi Restaurant Reservation 21.0307 - 'Comment' Stored Cross-Site Scripting (XSS)
# Date: 2021-05-10
# Exploit Author: Bastijn Ouwendijk
# Vendor Homepage: https://reservationdiary.eu/
# Software Link: https://wordpress.org/plugins/redi-restaurant-reservation/
# Version: 21.0307 and earlier
# Tested on: Windows 10
# CVE : CVE-2021-24299
# Proof: https://bastijnouwendijk.com/cve-2021-24299/

Steps to exploit this vulnerability:

1. Go to the page where [redirestaurant] is embed to make a restaurant reservation by filling in the requested information
2. In the 'Comment' field of the restaurant reservation form put the payload: ``
3. Submit the form
4. While being logged into WordPress as administrator go to ReDi Reservations > Upcoming (Tablet PC)
5. Click on 'View upcoming reservations'
6. Select for 'Show reservations for': 'This week'
7. The reservations are loaded and two alerts are shown with text 'XSS'

Source:packetstormsecurity.com
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
Sniffing network traffic with Netsniff-ng

https://cdn-images-1.medium.com/max/1200/1*FDbtMcAU7zAr8Pt0VwhYTw.png
Bottlenecks, downtime, and other popular network performance problems can have a significant impact on end-user experience and efficiency…

Continue reading on Medium »

Hacking on Medium
Compromising LLMNR and NBT-NS using Responder

https://cdn-images-1.medium.com/max/1500/1*15rk8FsnIdrMBbGpZDoJ4w.jpeg
Although the sniffer tool can be a great asset to any IT staff when used appropriately, it can also be used by attackers to steal data in…

Continue reading on Medium »

Hacking on Medium
Unix day 4: Careful when using grep

How to prevent some common mistakes in grep

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Network statistics tool Darkstat

https://cdn-images-1.medium.com/max/816/1*0sn8EsGO1s4sWEquKd4T5w.png
Darkstat is a cross-platform, lightweight, straightforward, real-time network statistics tool that captures system traffic, computes…

Continue reading on Purple TEAM »

___________________________
@hacking_Attack
@Hacking_Video

10 Bug Bounty Reporting Tips
https://redsec.medium.com/10-bug-bounty-reporting-tips-e044360aea7b?source=rss------bug_bounty-5

So, whether you have your very first finding (congrats by the way) or if you are a seasoned pro, it is handy to have a few soft skills in…Continue reading on Medium » (https://redsec.medium.com/10-bug-bounty-reporting-tips-e044360aea7b?source=rss------bug_bounty-5)

looking for someone to practice/learn pen testing with.
https://www.reddit.com/r/Pentesting/comments/nk20lk/looking_for_someone_to_practicelearn_pen_testing/

<!-- SC_OFF -->hi, i'm a beginner in this field and im looking for someone to practice/learn pen testing with. <!-- SC_ON --> submitted by /u/01prabhav (https://www.reddit.com/user/01prabhav)
[link] (https://www.reddit.com/r/Pentesting/comments/nk20lk/looking_for_someone_to_practicelearn_pen_testing/) [comments] (https://www.reddit.com/r/Pentesting/comments/nk20lk/looking_for_someone_to_practicelearn_pen_testing/)

Dark Reading: Attacks/Breaches
As Threat Hunting Matures, Malware Labs Emerge

By leveraging their analysis outputs, security pros can update detection rules engines and establish a stronger security posture in the process.

___________________________
@hacking_Attack
@Hacking_Video