Ⱥղօղվʍօմʂ Ꭰ€ѵìꝈ
کانال بسته
☆°°° @AnonymousDeviLSec °°°☆ - - - Contact :- @its_DeviLucaS - - -Discuss Group :- @Hackerss_Chat Kɴᴏᴡʟᴇᴅɢᴇ Iꜱ Mᴇᴀɴᴛ Fʀᴇᴇ Fᴏʀ Eᴠᴇʀyᴏɴᴇ Eᴠᴇʀyᴛɪɴɢ ꜱʜᴀʀᴇD HᴇʀE FoR EducationaL Purpose
نمایش بیشتر3 242
مشترکین
اطلاعاتی وجود ندارد24 ساعت
-117 روز
-3930 روز
آرشیو پست ها
3 242
Exploit Collector
Montiorr 1.7.6m Cross Site Scripting
https://4.bp.blogspot.com/-5kb4UTwsKkE/WWlvjussFoI/AAAAAAAAIQs/uqojaqb90NcMo4ROOoH-c5uvdKeDdbGswCLcBGAs/s1600/h94.png
Montiorr version 1.7.6m suffers from a cross site scripting vulnerability via a file upload.
MD5 |
f585a3504139898906468d253c6f7c04
Download
# Exploit Title: Montiorr 1.7.6m - File Upload to XSS
# Date: 25/4/2021
# Exploit Author: Ahmad Shakla
# Software Link: https://github.com/Monitorr/Monitorr
# Tested on: Kali GNU/Linux 2020.2
# Detailed Bug Description : https://arabcyberclub.blogspot.com/2021/04/monitor-176m-file-upload-to-xss.html
An attacker can preform an XSS attack via image upload
Steps :
1)Create a payload with the following format :
>x .png
2) Install the database by going to the following link :
https://monitorr.robyns-petshop.thm/assets/config/_installation/vendor/_install.php
3)Register for a new account on the server by going to the following link :
https://monitorr.robyns-petshop.thm/assets/config/_installation/vendor/login.php?action=register
4)Login with your credentials on the following link :
https://monitorr.robyns-petshop.thm/assets/config/_installation/vendor/login.php
5)Go to the following link and upload the payload :
https://monitorr.robyns-petshop.thm/settings.php#services-configuration
Source:**packetstormsecurity.com3 242
💚31 Paid Courses 💚
🔰Hadoop Fundamentals🔰
https://drive.google.com/drive/folders/1xICarprcfM4CkFR-veb23lCd6rnhV0Xs
🔰Cybersecurity Collection🔰
https://drive.google.com/drive/folders/1q2sOBNU4lPBkwtF1Msl6uCACBV5TUGWD
🔰Machine Learning for Apps🔰
https://drive.google.com/folderview?id=12rfOJrpUj9vt9HYg66djxYDads4HmGDB
🔰Advanced React and Redux🔰
https://drive.google.com/folderview?id=1Tk_-NOXDJ2xuKefQ-r0TiwSvYz0ejKgd
🔰Web Developer Nanodegree🔰
https://drive.google.com/folderview?id=1-HJRjs2jM-dS9toH46dic4h7Gwnlk_hS
🔰Computer Vision Nanodegree🔰
https://drive.google.com/folderview?id=1770Z6Rw8tSq2iXjS2X_MoJwUd6EuZxCq
🔰Millionaire DJ FL Studio 12 - Pro Music Production Course🔰
https://drive.google.com/folderview?id=1soqPKlzEak7BvAK0LTwMm-PdvbhQ6pX5
🔰Pentester Academy - x86 Assembly Language and Shellcoding on Linux🔰
https://drive.google.com/folderview?id=1KKKlL5TzdXDIxrSOz0Gmz3RWGTh_0Xli
🔰Kali linux - Complete Training Program from Scratch course🔰
https://drive.google.com/folderview?id=1714TBeP8chDWSIPCcALAuEM5ZNQsLYsn
🔰Complete Machine Learning and Data Science Zero to Mastery🔰
https://drive.google.com/folderview?id=3EufMXSKpiWuQKK5QV1n8CYvADCxLjvwKo
🔰Python Ethical Hacking Build tools for ethical hacking🔰
https://drive.google.com/drive/folders/1aBX4Y0cqQSZJZoPiweGEkvyJ05r3SdJY
🔰Deep Learning With TensorFlow Videos🔰
https://drive.google.com/folderview?id=1_az7Ue500bdT-R25qGrhitqhaxNILcxG
🔰Bug Bounty Hunting Guide to an Advanced Earning Method🔰
https://drive.google.com/drive/folders/1ytZk4T1EnPPwmtt9FJX0BjNPnafzPWwr
🔰Build Responsive Real World Websites with HTML5 and CSS3🔰
https://drive.google.com/folderview?id=1WJ-oGlQJFt4PTg2BE1ZKTvronD8HOONb
🔰Deep Reinforcement Learning Nanodegree v1.0.0🔰
https://drive.google.com/folderview?id=1joMAOhnqM6pTu4xyS01MEpZUUT1g4llq
🔰The Complete ASP.NET MVC 5 Course🔰
https://drive.google.com/folderview?id=1izOIk6Xzdnkxi9C-qtUOmB2kgLULfsP5
🔰The Python Mega Course Build 10 Real World Applications🔰
https://drive.google.com/folderview?id=1n2VVih2IcFdGJ6smCB5nJ5hYu42lT5kn
🔰Learn Python & Ethical Hacking From Scratch🔰
https://drive.google.com/uc?id=1wZ8bW3acJa9CHS9672-Ydo04X3yLrsUt&export=download
🔰Learn Ethical Hacking From Scratch🔰
https://drive.google.com/folderview?id=1Ns62tznu2mj7Q0QktrWGCcNsrL5CigtN
🔰Photoshop CC In an Easy Simple Professional Way🔰
https://drive.google.com/folderview?id=1fTWvTMI318u22eVddaaZ3flZ6IRUB44d
🔰Learn Python & Ethical Hacking From Scratch🔰
https://drive.google.com/folderview?id=1JeqDaWOu0kSdNGFEcwwI9q_LpLqnIp8f
🔰Website Hacking Course 2018 Earn Money by doing Bug Bounty🔰
https://drive.google.com/drive/folders/1fePVylnQPWj_84-nx9PThfcpwJTtv-9C
🔰Deep Learning Nanodegree Program🔰 https://drive.google.com/folderview?id=3EufMXSKpiWuQKK5QV1n8CYvADCxLjvwKo
🔰Linux Foundation Certified Engineer (2019)🔰
https://drive.google.com/folderview?id=1qyliHCTOiqEa38IaD226mdD0LHLABlAC
🔰Ethical Hacking With Python, JavaScript and Kali Linux🔰
https://drive.google.com/folderview?id=1wniooIDbtt7yI9tx1sCjVdKn3ftZNas2
🔰Natural Language Processing Nanodegree v1.0.0🔰
https://drive.google.com/folderview?id=1cg-msrtVjaxqoMg_LkjJunh999o9lv9U
🔰Python for Finance Investment Fundamentals & Data Analytics🔰
https://drive.google.com/folderview?id=1T4FMqAmZ1KfK_f8TsdZdHREEG8Z6U8Nl
🔰AZ-103 AZ-104 Azure Administrator Exam Certification 2020🔰
https://drive.google.com/folderview?id=1j3itB8pRO7ckY-YciIYE_7zhV50mwcq1
🔰CSS - The Complete Guide 2020 (incl. Flexbox, Grid Sass)🔰
https://drive.google.com/folderview?id=1zTjlqkSyXqmFHdTr2rGAAnx3_XCt3qIw
🔰AWS Certified Solutions Architect - Associate 2020🔰
https://drive.google.com/folderview?id=14eS7Bpil9ZQWo44NYDNWWGJ9Fam9up6B
🔰Google Data Studio A-Z for Data Visualization and Dashboards🔰
https://drive.google.com/folderview?id=11vvsLQCiXgg2BlA3mHIJw7sNS_MS-S3_
=== @Hackers_Blackhat ===
3 242
🎭 Types of Threats on The Dark Web 🎭
_____________________________
As in the previous post we've learned about that Dark Web is not illegal . So today we will gonna learn about Types of Threats on The Dark web .
Below are some comman Threats you may face during your browsing experience :-
▪︎Malicious Software :
Malware - is fully alive all across the Dark web.It is often offered in some portals to give threat actors the tools for cyber attacks.As such, users can find themselves regularly exposed to some types of malware like:
--> Keyloggers
--> Botnet Malware
--> Phishing
--> Ransomware
If you choose to explore more and more sites on the dark web, you put yourself at risk of being singled out and targeted for hacks and more.
▪︎Government Monitoring :
Many Tor-based sites being overtaken by police authorities across the globe, there is a clear danger of becoming government's target for simply visiting a dark website.Illegal drug marketplaces like The Silk Road have been hijacked for police surveillance in the past.
This has allowed law officials to discover user identities of patrons and bystanders alike. Even if you never make a purchase, you could be watched and incriminate yourself for other activities later in life.
Evading government restrictions to explore new political ideologies can be an imprisonable offense in some countries.
▪︎Scams :
Some alleged services like the professional “hitmen” may just be scams designed to profit from willing customers. Reports have suggested the dark web offers many illegal services, from paid assassinations to trafficking for sex and weapons.
Some of these are well-known, established threats that circulate in this nook of the web. However, others may be taking advantage of the dark web’s reputation to trick users out of large sums of money. Also, some users on the dark web may attempt Phishing scams to steal your identity or personal information for extortion.
#SpreadKnowledge
━━━━━━━━━━━━━
#Pin & #Unmute
🏴☠️ @Hackers_Blackhat 🏴☠️
3 242
Is it illegal to go on tha dark web ?👣
_____________________________
Simply put , No it is not illegal to access the dark web. In fact, some uses are perfectly legal and support the value of the “dark web.” On the dark web, users can seek out three clear benefits from its use:
▪︎User Anonymity
▪︎Virtually Untraceable services
▪︎Ability to take illegal actions for both users and providers
On the network end, the dark web is a bit more of a grey area. The use of the dark web usually means that you are attempting to engage in activity that you could not otherwise carry out in the public eye
However, you can still take illegal actions within Tor that could incriminate you regardless of the browser’s legality. You could easily use Tor in an attempt to pirate copyrighted content from the deep web, share illegal pornography, or engage in cyber terrorism. Using a legal browser will not make your actions fall to the right side of the law.
Conclusion : Dark web is not illegal , the way you use Dark web can be illegal.
#SpreadKnowledge
━━━━━━━━━━━━━
#Pin & #Unmute
🏴☠️ @Hackers_Blackhat 🏴☠️
3 242
👨💻SQL Injection Tutorial: Learn with Example🗳
🌀In this tutorial, you will learn SQL Injection techniques and how you can protect web applications from such attacks.
⭕️Link : https://telegra.ph/SQL-Injection-Tutorial-Learn-with-Example-04-27
🔻Share and Support🔺
ㅤ
☠ @Hackers_Blackhat ☠
3 242
👨💻What is Cryptojacking? – Definition and Explanation🗳
🌀In this article you will learn all about Cryptojacking
⭕️Link : https://telegra.ph/What-is-Cryptojacking--Definition-and-Explanation-04-26
🔻Share and Support🔺
ㅤ
☠ @Hackers_Blackhat ☠
3 242
⭕️ How to hide a virus in a picture?
Greetings to trojan readers!
Today we will consider one of the simplest ways to disguise malware. Despite his prostate, he works to this day. With the help of it, stealers, keyloggers and other nasty things are still masked.
1. Create a folder and drag our picture and virus there.
2. Go to iconvertcom and create an icon for our picture (in the format settings, choose from 16x16 to 256x256). Next, click on "Convert ICO" and download our icon.
3. Don't touch the icon yet. We return to the folder> select the image and the virus> add to the archive.
4. In the parameters of the archive, do the following. Click on "Create self-extracting archive" (general tab)> "SFX options" (additional tab)> Go to "Update" and click on "extract and update all files" and "overwrite all files without prompting".
5. Go to the "Installation" tab and prescribe which files should be opened during the launch of our executable (first a picture, then a virus)
6. Go to the "Mode" tab and click on "Unpack to a temporary folder" and "hide all"
6. Go to the "text and graphics" tab and load our icon (icon). So, we replaced the archive icon with the icon of our picture.
7. Now we have an executable (exemple.exe) with our photo icon. Pretty pale, so we'll use one trick.
We rename our file, namely we enter between the name and the point "gpj" (exemplegpj.exe). Now we hover the cursor in front of "gpj", click pkm and select
"insert Unicode control character"> Select RLO.
All. Our virus is disguised in a picture, and the file does not look like exemple.exe, but exemple.jpg
Posted by: Sudhanshu
@Hackers_Blackhat
3 242
⭐️Courses On Exploit Development, Malware Analysis nd Reverse engineering nd oll.
⭐️Exploit Development for Linux x64.
🔗Download:
--> https://mega.nz/folder/DpFXTajT#-QgmsdT05eT0vuYo9sjXYA
⭐️Exploit Development for Linux (x86).
🔗Download:
--> https://mega.nz/folder/P4V10awQ#x1iJjk1gLAzIKbj2Ta8Blw
⭐️Linux Heap Exploitation
🔗Download:
--> https://mega.nz/folder/j0swAL7T#xPojjkSDtIwuDS4VJR0_GA
⭐️Expert Malware Analysis and Reverse Engineering.
🔗Download:
--> https://mega.nz/folder/ThkUwJgT#RUCaDYSj9tiP7OevJ-1HjQ
⭐️Binary Exploits with Python.
🔗Download:
--> https://mega.nz/folder/XkswBQKS#ihcitspPL9nQiEvC4hxIzQ
⭐️Hands-on Fuzzing and Exploit Development.
🔗Download:
--> https://mega.nz/folder/i88mFA7A#OIYSAhjHeuAys3B4MCepwg
⭐️Hands-on Fuzzing and Exploit Development (Advanced).
🔗Download:
--> https://mega.nz/folder/ux9SUIiJ#bxHCViNRLn01I4Y1x73B8w
⭐️Posted By :- @Mr_CrabY⭐️
💥Share And Support Us ❣
➖ @Hackers_Blackhat ➖
3 242
🍎OSINT 2021 GUIDE 🍎
https://telegra.ph/Best-25-OSINT-Tools-09-22
Intelligence agencies use OSINT to track events, equipment such as weapons systems, and people. These are the 'targets of interest' (ToIs). But hackers use OSINT to identify technical vulnerabilities as well as human targets for phishing and social engineering attacks.
Law Firms. Lawyers and private investigators can ethically and legally utilize OSINT techniques – especially information found on social media platforms – in legal and litigation intelligence to collect evidence and research about any suspect or potential juror.
🏝REGARDS=@KALINGRAAJ
3 242
🔰6TB Of Courses Collection🔰
🌀Contains Social Media Marketing, Influencing, Youtube Growth And Many Other Courses
⭕️Link:
https://mega.nz/folder/vRhSiagQ#H_G_aUZNrbLE5fPtTjPoeQ/folder/TAhQRSqK
🔺Share And Support Us🔻
@Hackers_Blackhat
