Allwinner 3.4 Legacy Kernel - Local Privilege Escalation (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule "Allwinner 3.4 Legacy Kernel Local Privilege Escalation", "Description" = %q This module attempts to exploit a debug backdoor...

WDS CMS SQL Injection Vulnerability

WDS CMS is a website management system. WDS CMS suffers from a SQL injection vulnerability, which can be exploited by an attacker to gain access to the database contents, as well as to upload backdoor files in subsequent attacks...

Allwinner 3.4 Legacy Kernel Local Privilege Escalation

Exploit for hardware platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule "Allwinner 3.4 Legacy Kernel Local Privilege Escalation", "Description...

Allwinner 3.4 Legacy Kernel Local Privilege Escalation

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule "Allwinner 3.4 Legacy Kernel Local Privilege Escalation", "Description" = %q This module attempts to exploit a debug backdoor...

hacklib - Pentesting, Port Scanning, and Logging in anywhere with Python

Toolkit for hacking enthusiasts using Python. hacklib is a Python module for hacking enthusiasts interested in network security. It is currently in active development. Installation To get hacklib, simply run in command line: pip install hacklib hacklib also has a user interface. To use it, you ca...

Source Code for IoT botnet responsible for World's largest DDoS Attack released Online

With rapidly growing Internet of Thing IoT devices, they have become a much more attractive target for cybercriminals. Just recently we saw a record-breaking Distributed Denial of Service DDoS attacks against the France-based hosting provider OVH that reached over one Terabit per second 1 Tbps,...

Backdoored D-Link Router Should be Trashed, Researcher Says

A researcher who found a slew of vulnerabilities in a popular router said it’s so hopelessly broken that consumers who own them should throw them away. Pierre Kim said attackers could easily exploit the vulnerabilities and use the device as a spamming zombie or a man-in-the-middle tool. “I advise...

Grandsteam GXV3611_HD - SQL Injection

Grandsteam GXV3611HD - SQL Injection Exploit Title: Grandstream GXV3611HD Telnet SQL Injection and backdoor command Exploit Author: pizza1337 Vendor Homepage: http://www.grandstream.com/ Version: GXV3611HD Core 1.0.3.6, 1.0.4.3 GXV3611IRHD Core 1.0.3.5 Tested on: -GXV3611HD Bootloader Version:...

Multiple Backdoors found in D-Link DWR-932 B LTE Router

If you own a D-Link wireless router, especially DWR-932 B LTE router, you should get rid of it, rather than wait for a firmware upgrade that never lands soon. D-Link DWR-932B LTE router is allegedly vulnerable to over 20 issues, including backdoor accounts, default credentials, leaky credentials,...

NetMan 204 Backdoor Account Vulnerability

NetMan is an integrated development of UPS for medium and large networks, providing a high level of reliability in the communication between UPS and related management systems. A backdoor account vulnerability exists in NetMan 204. An attacker can exploit this vulnerability to execute system...

NetMan 204 - Backdoor Account Vulnerability

Exploit for hardware platform in category remote exploits NetMan 204 - Backdoor Account Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: NetMan 204 Vendor: http://www.riello-ups.com Product URL: http://www.riello-ups.com/products/4-software-connectivity/85-netman-204 Quick Referenc...

NetMan 204 Backdoor Account

NetMan 204 - Backdoor Account Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: NetMan 204 Vendor: http://www.riello-ups.com Product URL: http://www.riello-ups.com/products/4-software-connectivity/85-netman-204 Quick Reference Installation Manual :...

D-Link DWR-932B Backdoors / Default WPS PIN

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Multiple vulnerabilities found in the Dlink DWR-932B backdoor, backdoor accounts, weak WPS, RCE ... Advisory URL: https://pierrekim.github.io/advisories/2016-dlink-0x00.txt Blog URL:...

NetMan 204 - Backdoor Account

NetMan 204 - Backdoor Account Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: NetMan 204 Vendor: http://www.riello-ups.com Product URL: http://www.riello-ups.com/products/4-software-connectivity/85-netman-204 Quick Reference Installation Manual :...

W3 Total Cache <= 0.9.4.1 – Authenticated Arbitrary PHP Code Execution

This one is so mush easy to exploit using the import settings feature, this is what W3TC will do one your file is uploaded: / Imports config content @param string $filename @return boolean / function import$filename if fileexists$filename && isreadable$filename $data = filegetcontents$filename; i...

Weak Password Vulnerability in Mapper VPN3005C-104 Appliance

The Maipu VPN3005C-104 device is a security gateway developed by Maipu. A weak password vulnerability exists in the Maipu VPN3005C-104 device. It allows an attacker to log in to the system backend and gain administrator privileges by using the account password admin\admin...

Kerio Control Unified Threat Management 9.1.0 build 10879.1.1 build 1324 - Multiple Vulnerabilities

Kerio Control Unified Threat Management 9.1.0 build 10879.1.1 build 1324 - Multiple Vulnerabilities SEC Consult has also released a blog post describing the attack scenarios of the vulnerabilities within this advisory in detail and a video which shows the remote attack. Exploit code has been...

OIC Exponent CMS Arbitrary File Upload Vulnerability

OIC Exponent CMS is a free, open source, modular PHP-based content management system CMS from the OIC Group of companies in the United States. An arbitrary file upload vulnerability exists in OIC Exponent CMS version 2.3.8 and below, which can be exploited by attackers to upload backdoor files...

Xiaomi Can Silently Install Any App On Your Android Phone Using A Backdoor

Note — Don't miss an important update at the bottom of this article, which includes an official statement from Xiaomi. Do you own an Android Smartphone from Xiaomi, HTC, Samsung, or OnePlus? If yes, then you must be aware that almost all smartphone manufacturers provide custom ROMs like...

Data Stealing Mac OS X Backdoor Uncovered

Researchers on Wednesday confirmed that an OS X variant of a recently discovered family of cross-platform backdoors exists. Stefan Ortloff, a researcher with Kaspersky Lab’s Global Research and Analysis Team, identified the family of backdoors called Mokes in January, but it wasn’t until Tuesday...