Malicious APK famous in 2021-2022 0b0xed rwxr-xr-x 0 7:52 AM

Filename	Malicious APK famous in 2021-2022
Permission	rw-r--r--
Author	0b0xed
Date and Time	7:52 AM
Label
Action

This post has been sitting in my drafts since early 2022, I guess it is safe to post it now xD plus i got AI that can help me check my grammar lol

Firstly, i was given a task from someone,  to 'check' that APK, then i do some 'research' on that APK

Fast forward, im still afraid, i just want to have this recorded only.

successfully masuk and bagi to Bukit Aman

It is been such a rollercoaster experience. I rarely share this with anyone, in details, including my family, my wife also don't know anything about this either haha

And istg, PDRM has been doing a great job handling this issue. I can really see how dedicated they are to resolving it, u wont hear about money missing from ur bank again. Most of the time, the issue is you; human stupidity is a zero-day that can never be patched.

Thank You UTHM ! 0b0xed rwxr-xr-x 14 1:10 PM

Filename	Thank You UTHM !
Permission	rw-r--r--
Author	0b0xed
Date and Time	1:10 PM
Label
Action

Pentesting UCITV UTHM (Local Area Network) 0b0xed rwxr-xr-x 14 10:58 AM

Filename	Pentesting UCITV UTHM (Local Area Network)
Permission	rw-r--r--
Author	0b0xed
Date and Time	10:58 AM
Label
Action

This is just a Proof Of Concept , pentesting in http://ucitv3.uthm.edu.my/ for my certificate of appreciation only.

Web to Test : http://ucitv3.uthm.edu.my/ (work in UTHM LAN ONLY)

Bug : A simple SQLinjection

Front Page of ucitv :


Method : Using sqlmap , here is the proof



Proof : The admin page




The Bug Was Reported , Thank YOU !

Pentesting in Intern Place 0b0xed rwxr-xr-x 18 11:30 PM

Filename	Pentesting in Intern Place
Permission	rw-r--r--
Author	0b0xed
Date and Time	11:30 PM
Label
Action

Found one serious vulnerability that allow attacker to change the data (Cukai,Lesen) . Bug was reported to my supervisor together with how to solve. Thanks !

The bug was reported to supervisor, thank you !

http://sacad.uthm.edu.my/ - Changing User to Super User 0b0xed rwxr-xr-x 12 11:47 PM

Filename	http://sacad.uthm.edu.my/ - Changing User to Super User
Permission	rw-r--r--
Author	0b0xed
Date and Time	11:47 PM
Label
Action

Tools :
1.Tamper Data

Bug ? tahap ?

Changing 4 to 1

Before :

After :

Result :

Pentesting UTHM WiFi Login 0b0xed rwxr-xr-x 13 4:00 AM

Filename	Pentesting UTHM WiFi Login
Permission	rw-r--r--
Author	0b0xed
Date and Time	4:00 AM
Label
Action

Nothing is changed during this pentesting.

Bug :

The Password is too easy to guess maybe ? 

✓ Full Site Access

✓ SSH Login

Sorry :)

UTHM CCTV Pentesting 0b0xed rwxr-xr-x 10 2:38 AM

Filename	UTHM CCTV Pentesting
Permission	rw-r--r--
Author	0b0xed
Date and Time	2:38 AM
Label
Action

When you can control the network, you also can control the devices that connected to that network. 

Discover the network using NMap, and then use penetration tools such as metasploit, here what we got.

I forgot how i entered the cctv, it was like 3-4 years ago 

POC - UTHM WiFi 0b0xed rwxr-xr-x 18 2:06 PM

Filename	POC - UTHM WiFi
Permission	rw-r--r--
Author	0b0xed
Date and Time	2:06 PM
Label
Action

Website : https://wifilogin.uthm.edu.my:4343 ( wifi )

Website : https://airwave.uthm.edu.my/ ( airwave - wifi management )

p/s : I'm not hacker , just change your password 

[Filtering File Upload] https://community.uthm.edu.my/ 0b0xed rwxr-xr-x 13 12:20 AM

Filename	[Filtering File Upload] https://community.uthm.edu.my/
Permission	rw-r--r--
Author	0b0xed
Date and Time	12:20 AM
Label
Action

File Upload Vulnerability in community.uthm.edu.my

This bug allow user to upload unnecessary file / fucking shell .

Mirror : - http://zone-h.org/mirror/id/25559304 fuck yea xD
              - http://zone-h.org/mirror/id/24572313

Patch : /dirLIST_files/process_upload.php
Source-code : http://pastebin.com/dSTMJgzk

[POC] ipamwifi.uthm.edu.my - DHCP Server ,maybe ? 0b0xed rwxr-xr-x 14 10:05 PM

Filename	[POC] ipamwifi.uthm.edu.my - DHCP Server ,maybe ?
Permission	rw-r--r--
Author	0b0xed
Date and Time	10:05 PM
Label
Action

1.Open terminal : ifconfig

  Result : .....

1.Get that point (bug)

           Default Gateway : 10.8.237.254
           DHCP Server : 192.168.240.99

2.Login via SSH : sudo ssh -D 22 [email protected]
   Password ? easy :) , just use simple bruteforce

3.Let your 'footprint' on the site

cd /data1/www/php/interfaces
sudo echo "Hacked By 0b0x3d" >> hack.txt

4.Done ? Discover whole system ,and guess what i got ?