Exploit

Executive Summary On March 13th, Euler Finance, an Ethereum-based non-custodial lending protocol, was attacked through a flash loan attack that resulted in the theft of millions in various cryptocurrencies, including DAI, USDC, staked Ether (StETH), and Wrapped Bitcoin (WBTC). According to on-chain data, the attacker carried out multiple transactions and was able…

Today, I decided to do another machine from NetSecFocus Trophy Room called SickOS. You can download it from here. Before starting, let’s see author’ note. About Release Name: SickOs1.2 || Author: D4rk || Series: SickOS Objective: Get /root/7d03aaa2bf93d80040f3f22ec6ad9d5a.txt Tester(s): h1tch1, Eagle11 || Twitter: https://twitter.com/D4rk36 Virtual Machine’s Author’s Note Description This is second…

pWnOS is a simple boot to root machine I came across at NetSecFocus Trophy Room. Setting Up VM Download pWnOS virtual machine from here. Extract zip file. Open VMware. Click on open a virtual machine. Go to your extraction location of step 2. Select file with .vmx extension. Click OK. Now, you are…

Hello world, welcome to Haxez. In this post, I’m going to be demonstrating how to perform the PrintNightmare privilege escalation exploit. I will be using Evil-WinRM and the CVE-2021–1675.ps1 script by Caleb Stewart on GitHub. I’ve just completed the retired easy Hack The Box machine Driver and was blown away…

Hi AdaSwap holders, Poolz Vesting Contract was hacked approximately four hours ago, which held 2b $ASW (20% of our tokens) at the time of the hack, as part of all the projects that conducted their IDO on Poolz. The hacker has liquidated his entire holdings as quickly as he could…

According to Numen’s on-chain monitoring, on Mar-15–2023 03:16:02 AM +UTC, Ethereum, Binance, and Polygon’s on-chain Poolz Finance was attacked, resulting in a total loss of approximately $665,000. The attacker managed to siphon the following: 2,805,805 MEE 525,134 ESNC 774,997 DON 2,007,504,238 ASW 6,510,689 KMON 2,521,065 POOLZ 35,976,107 DCD 760,845 PORTX …

Euler Finance lost nearly $200 million due to a breach where four transactions in DAI, WBTC, sETH, and USDC were involved. According to BlockSec, a smart contract auditor, the hacker utilized a flash loan to carry out the exploit.