PoC exploit code for critical Fortinet FortiNAC bug released online

Researchers released a proof-of-concept exploit code for the critical CVE-2022-39952 vulnerability in the Fortinet FortiNAC network access control solution. Researchers at Horizon3 cybersecurity firm have released a proof-of-concept exploit for a critical-severity vulnerability, tracked as CVE-2022-39952, in Fortinet’s FortiNAC network access control solution. Last week, Fortinet has released security updates to address two critical vulnerabilities in FortiNAC […]

The post PoC exploit code for critical Fortinet FortiNAC bug released online appeared first on Security Affairs.

CTF – Bypass 403

I’m attempting this particular CTF challenge, and I’m getting a 403 error for the favicon.ico resource.

I’ve tried using GET, POST, HEAD requests, but it doesn’t work. I also tried changing the host to google.com, amazon.com and send the requests (via Postman). I’m pretty sure the favicon will contain a flag, but I’m not sure how to get past this.

The website url is of the form – redacted.com/dev/start?q=sqlite_query_here

I’ve already used SQLite injection to get the flag on this URL, but I’m not sure how to get past the 403 forbidden error.

Does anybody have any guidance for me? I watched a couple of Youtube videos and https://book.hacktricks.xyz/network-services-pentesting/pentesting-web/403-and-401-bypasses, but haven’t made any headway.

submitted by /u/SpriteAndCoding
[link] [comments]

Kevin Mitnick – Opinions

So I found this guy named Kevin Mitnick, he claims he is the world’s most famous hacker but I can barely find information on him, what do you guys know about him and his past? Apparently he runs a cyber security consultant firm?

submitted by /u/ZincLeadAlloy
[link] [comments]

Am I tripping or something?

Am I tripping or something? I’ve noticed the past few months maybe longer that more and more repositories from github as starting to be labeled archive or just don’t work period with out being archived and I look into it and have to find out through other resources that specific repository no longer works. What’s the average time frame expectancy on repositories? Or does it all really vary on if the dev has other things going on and is no longer doing bug updates. It’s not that I’m looking for a specific repository I’ve just noticed across the board diffrent ones aimed at diffrent things more and more no longer working. Is there any other reliable source to find said repositories or is github the honeypot????

submitted by /u/Midnight_Recovery
[link] [comments]

How to bypass basic website content restrictions such as cookie notices

How to bypass basic website content restrictions such as cookie notices

Previous post removed for being too low effort, but I think the content is worth sharing so I’m trying again with more description:

Whenever I search for health related information I often see healthline.com as a recommended site, however because I rarely accept cookies I can’t see the content I’ve clicked on from Google. Instead I am presented with the option to either accept cookies or I get a page telling me about GDPR restrictions and why I have to accept the cookies or go away!!

So when presented with a page like below, what do you do?

The infuriating page

I am working in Chrome, but this should apply to most browsers… right click the annoying box and select ‘Inspect’ to bring up the code for the page. Any edits you make here will show you a live update. The goal is to remove the box so the first thing we do is make sure to inspect on that box (i.e. that is where you need to right click on the website before choosing Inspect). When the code console comes up you can hover over the elements of the page and it will highlight the part of the website that it affects (this is how scammers modify bank your live bank page to make it look like you have been paid).

Find the element that highlight all of the box in question as shown below. Then right click the element and select ‘Hide element’. In this case it was a div

<div class="css-103nllw no-hash __web-inspector-hide-shortcut__"> 

Editing the source

Now that we have done that you’ll find that scrolling is disabled and you can’t see the full content. Not to fear, one more change will solve this. The designer in this case has used the overflow:hidden attribute to stop the content from showing below the viewing window. All we need to do is edit that or remove the setting.

You could search for ‘overflow’ but in this case it is already on screen in the <body> tag

<body style="overflow: hidden;" class="touchevents-false"> 

Change it to the following by double clicking the area to change and then deleting it:

<body class="touchevents-false"> 

Now if you click off that part of the code, the scrolling will be enabled and you can access the full content.

submitted by /u/ee0u30eb
[link] [comments]