h0ffy h0ffy

WordPress Exploit CVE-2024-6210 Full Path Disclosured

Vulnerability

Duplicator <= 1.5.9 - Full Path Disclosure (CVE-2024-6210)

Exploit

https://$URL/wp-content/plugins/duplicator/installer/dup-installer/main.installer.php
https://example.com/wp-content/plugins/duplicator/installer/dup-installer/main.installer.php

Llama-Cpp-Python

Instalación llama-cpp-python para CPU

pip install llama-cpp-python

Instalación llama-cpp-python CUBLAS para GPU

CMAKE_ARGS="-DLLAMA_CUBLAS=on" pip install llama-cpp-python

Programación de Index con Scylla (Optimización)

1. Configuración Óptima del Driver

Configuración de Conexiones

// Configurar para alta carga de trabajo
cass_cluster_set_protocol_version(cluster, CASS_PROTOCOL_VERSION_V4);
cass_cluster_set_num_threads_io(cluster, 4);
cass_cluster_set_queue_size_io(cluster, 8192);

Generación sencilla de scripts en Bash

1.1. Configuración

Es necesario editar el archivo de configuración ".bashrc"

vim ~/.bashrc

vim /etc/bashrc

          10kΩ  
  +12V/24V ───/\/\/───┬── Drenaje (D)  
                        │  
                      (JFET)  
                        │  
       10kΩ             ┴── Fuente (S) ─── GND  
   A0 ───/\/\/───┬  
        47kΩ     │  
 │ │

sudo iptables -t nat -F
sudo iptables -A FORWARD -i tun0 -o tun1 -j ACCEPT
sudo iptables -A FORWARD -i tun1 -o tun0 -j ACCEPT
sudo iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o tun1 -j MASQUERADE
sudo iptables -t nat -A POSTROUTING -s 10.9.0.0/24 -o tun0 -j MASQUERADE
sudo iptables-save > /etc/iptables/rules.v4

SECRETS

Details

Secrets Regex

amzn.mws]{8}-[0-9a-f]{4}-10-9a-f1{4}-[0-9a,]{4}-[0-9a-f]{12}
(A3T[A-Z0-9]|AKIA|AGPA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}
(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}
https:\/\/hooks.slack.com\/services\/T[a-zA-Z0-9_]{8}\/B[a-zA-Z0-9_]{8}\/[a-zA-Z0-9_]{24}

	// JennyLab Research! ( https://www.jennylab.net )
	// ========================================================================================= //
	// == SEASTAR HIGH-THROUGHPUT PATTERN GENERATION & DETECTION ENGINE == //
	// == (No Device Interaction, Focus on Core Logic) == //
	// ========================================================================================= //
	// NOTE: Focus on data generation/detection. No SDR/USB. Detection logic is a placeholder. //
	// Requires Seastar, Boost.Program_Options, Nlohmann JSON. //
	// ========================================================================================= //

	#include <iostream>

	#!/bin/bash
	# by h0ffy//JennyLab VX!

	function print_status() {
	if [[ "${1}" == "1" ]]; then
	echo -e "[\033[0;32mOK\033[0m]"
	else
	echo -e "[\033[0;31mERROR\033[0m]"
	exit
	fi

	#!/bin/bash
	#set -x
	set -e

	PASSWORD="jenny$((RANDOM))"

	echo "[+] Cleaning ~/.mitmproxy"
	rm -rf ~/.mitmproxy
	mkdir -p ~/.mitmproxy
	cd ~/.mitmproxy