hackspace – Telegram
hackspace
159 subscribers
279 photos
76 videos
24 files
1K links
hackspace
Download Telegram
1995: The movie "Hackers" was released. It grossed $7 million at the box office against a budget of $20 million. Ouch. But it's a cult classic today.

Crash Override. Rollerblades. Acid Burn. Floppies. Hack the Gibson!
#!/bin/bash
scan (){
timeout 1 bash -c "echo >/dev/tcp/192.168.8.109/$1 2>/dev/null " && echo "port $1 is open"
}

for port in {1..100}; do
scan $port &
done
Exploiting: SSRF For Admin Access | by Gupta Bless | InfoSec Write-ups | Aug, 2020 | Medium
https://medium.com/bugbountywriteup/exploiting-ssrf-for-admin-access-31c30457cc44
snap install notepad-plus-plus
CVE-2020-16938 allows privileged file read by EVERYBODY
You can PoC using 7zip and navigating to the device path \\.\PhysicalDevice0\Basic data partition.img\Windows\System32\Config\
Get a link and not sure where it goes?

https://wheregoes.com/
Make your own top-subdomains wordlist from FF history:

grep -Pao "https://[a-zA-Z0-9.-]+" ~/.mozilla/firefox/*/places.sqlite | sort -u | sed 's#.*://\([a-zA-Z0-9-]*\)\..*#\1#' | uniq -c | sort -rn
sudo iptables -nL f2b-sshd | awk '/REJECT/{print $4}' | xargs -n1 geoiplookup # Show the countries currently represented in your fail2ban ssh firewall jail table.
Remote Command Execution in Ruckus IoT Controller (CVE-2020-26878 & CVE-2020-26879) - Adepts of 0xCC
https://adepts.of0x.cc/ruckus-vriot-rce/