[Scylla] v1 Penetration Testing Tool - Because there's no patch for human stupidity

When there's no technical vulnerability to exploit, you should try to hack what humans left for you, and believe me, this always works. Scylla provides all the power of what a real audit, intrusion, exclusion and analysis tool needs, giving the possibility of scanning misconfiguration bugs...

Zcncms1. 2. 8 Code of audit the summary file contains vulnerability and remediation-vulnerability and early warning-the black bar safety net

Prior to a introduction: zcncms is a webmaster of China based on php technology development of the content management system that provides content editing, keyword management, advertising management, link management module and a model, the program design is very concise and focus on the secondary...

MetInfo m topology enterprise website management system 5. 0. 2 code auditing exploit and repair summary-vulnerability warning-the black bar safety net

MetInfo enterprise website management system using PHP+Mysql schema, full Station built-in SEO search engine optimization mechanism, support user since defined interface languageglobal various language, has enterprise website common of module features corporate profile module, news module, produc...

Portable Multi-boot Security Suite: Katana

Katana is a portable multi-boot security suite which brings together many of today’s best security distributions and portable applications to run off a single Flash Drive. It includes distributions which focus on Pen-Testing, Auditing, Forensics, System Recovery, Network Analysis, and Malware...

Modoer. system of injection of several versions through the kill-vulnerability warning-the black bar safety net

Not to force the injection, to engage a station dig of, search it's a large station with this little impact on the issue to share learning, nonsense not say more, see our pork point First\core\modules\item\ajax. php start calling $do = trim$GET'do'; $op = trim$GET'op'; // allows the operating...

cassandra-brute NSE Script

Performs brute force password auditing against the Cassandra database. For more information about Cassandra, see: Script Arguments passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. creds.service, creds.global See the documentation f...

SAS70 Needs to Die

By Andrew Storms Let’s be clear, SAS70 should be sentenced to a quick and painful death in the bottom of a giant pit protected by 20-foot thick concrete walls where it should be buried forever, along-side other IT criminals such as Windows ME and IE6. While SAS70 has its place in financial...

Wireless Security Auditing: Fern Wifi Cracker

Fern Wifi Cracker is a Wireless security auditing and attack software program written using the Python Programming Language and the Python Qt GUI library , the program is able to crack and recover WEP/WPA/WPS keys and also run other network based attacks on wireless or ethernet based networks Fer...

Scientific Linux Security Update : sudo on SL5.x i386/x86_64 (20120221)

The sudo superuser do utility allows system administrators to give certain users the ability to run commands as root. A flaw was found in the sudo password checking logic. In configurations where the sudoers settings allowed a user to run a command using sudo with only the group ID changed, sudo...

Barracuda SSL VPN 680 Cross Site Scripting

Exploit for php platform in category web applications Barracuda SSL VPN 680 - Cross Site Scripting Vulnerabilities Introduction: ============= The Barracuda SSL VPN is an integrated hardware and software solution enabling secure, clientless remote access to internal network resources from any Web...

irc-sasl-brute NSE Script

Performs brute force password auditing against IRC Internet Relay Chat servers supporting SASL authentication. Script Arguments irc-sasl-brute.threads the number of threads to use while brute-forcing. Defaults to 2. passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the...

metasploit-msgrpc-brute NSE Script

Performs brute force username and password auditing against Metasploit msgrpc interface. Script Arguments creds.service, creds.global See the documentation for the creds library. smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername See the documentation for the smbauth library. passd...

phpdisk vulnerability released — phpdisk header bypass & getShell exp-vulnerability warning-the black bar safety net

Author:Yaseng Team:CodePlay 1:code auditing PHPDISK network disk system is for domestic use wide range of PHP and MySQL to build the network drivefile storage managementsystem,The author of its source code analysis,found a very interesting stuff..... ! clipimage002 Figure a Figure A is install 下面...

RedHat Update for sssd RHSA-2011:0560-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

ajp-brute NSE Script

Performs brute force passwords auditing against the Apache JServ protocol. The Apache JServ Protocol is commonly used by web servers to communicate with back-end Java application server containers. Script Arguments ajp-brute.path URL path to request. Default: / creds.service, creds.global See the...

mmouse-brute NSE Script

Performs brute force password auditing against the RPA Tech Mobile Mouse servers. The Mobile Mouse server runs on OS X, Windows and Linux and enables remote control of the keyboard and mouse from an iOS device. For more information: Script Arguments mmouse-brute.timeout socket timeout for...

rpcap-brute NSE Script

Performs brute force password auditing against the WinPcap Remote Capture Daemon rpcap. Script Arguments passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. creds.service, creds.global See the documentation for the creds library...

mongodb-brute NSE Script

Performs brute force password auditing against the MongoDB database. Script Arguments mongodb-brute.db Database against which to check. Default: admin passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. creds.service, creds.global See...

Low: Red Hat Security Advisory: sudo security and bug fix update

An updated sudo package that fixes one security issue and various bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

rsync-brute NSE Script

Performs brute force password auditing against the rsync remote file syncing protocol. Script Arguments rsync-brute.module - the module against which brute forcing should be performed passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library...