407 matches found
Leaflet Maps Marker 3.5.2 - Two SQL Injection Vulnerabilities
The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps WordPress plugin was affected by a Two SQL Injection Vulnerabilities security vulnerability...
Bing Dork Scanner - Tool to extract urls from a bing search
This is a simple script with GUI, to extract urls from a bing search. Support only HTTP proxy. Required Perl Modules: LWP Gtk2 Glib uft8 threads threads::shared URI::Escape Download Bing Dork Scanner...
PwnPi - A Pen Test Drop Box distro for the Raspberry Pi
PwnPi is a Linux-based penetration testing dropbox distribution for the Raspberry Pi. It currently has 200+ network security tools pre-installed to aid the penetration tester. It is built a stripped down version of the Debian Wheezy image from the Raspberry Pi foundation's website and uses Openbo...
Passive Spider - Information Gathering from Search Engine Tool
Passive Spider uses search engines currently only Bing supported to find interesting information about a target domain. INSTALL git clone https://github.com/RandomStorm/passive-spider.git cd passive-spider gem install bundler && bundle install Place your search engine API keys in the apikeys.conf...
Bing Heartbleed Scan - Tool to extract sites from a bing search and check if are vulnerables
A simple scan in bash to extract sites from a bing search and check if is vulnerable. Download Bing Heartbleed Scan...
Parsero v0.75 - Attacking Robots.txt Files
Parsero is a free script written in Python which reads the Robots.txt file of a web server and looks at the Disallow entries. The Disallow entries tell the search engines what directories or files hosted on a web server mustn't be indexed. For example, "Disallow: /portal/login" means that the...
[Parsero] Robots.txt audit tool
.PNG Parsero is a free script written in Python which reads the Robots.txt file of a web server and looks at the Disallow entries. The Disallow entries are the URL path of directories or files hosted on a web server which the administrators don't want to be indexed by the crawlers. For example,...
Microsoft Bing for Android 任意代码执行漏洞
BUGTRAQ ID: 65128 CVECAN ID: CVE-2014-1670 Microsoft Bing for Android是移动设备上的搜索引擎服务。 Microsoft Bing 4.2.1之前版本在不安全网络内处理DNS响应时会触发安全漏洞，这可使上下文独立的攻击者在设备上安装任意APK文件并执行任意代码。 0 Microsoft Bing for Android 4.2.1 厂商补丁： Microsoft --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Bing Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: ssl.bing.com - Cross-site Scripting vulnerability Advisory ID: SSCHADV2013-012 Author: Stefan Schurtz Affected Software: Successfully tested on ssl.bing.com Vendor URL: http://www.microsoft.com Vendor Status: fixed ==========================...
CVE-2014-1670
The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vectors involving a crafted DNS response...
Code injection
The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vectors involving a crafted DNS response...
CVE-2014-1670
The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vectors involving a crafted DNS response...
CVE-2014-1670
The CVE affects Microsoft Bing for Android prior to version 4.2.1. A crafted DNS response can be exploited by a remote attacker to cause the app to install arbitrary APK files and execute code, i.e., remote code execution via DNS handling in insecure network conditions. Affected component: Bing f...
[SpiderFoot v2.1.0] The Open Source Footprinting tool
SpiderFoot is a free, open-source footprinting tool, enabling you to perform various scans against a given domain name in order to obtain information such as sub-domains, e-mail addresses, owned netblocks, web server versions and so on. The main objective of SpiderFoot is to automate the...
[Hasere v0.2] Discover vHosts using Google and Bing
Hasere is a tool that can discovery the virtual hosts and related filetype using google and bing search engines. Optionally, it uses the nmap to determine the ip addresses which have 80 or 443 opened port. After that it uses the bing search engine to determine which domains were hosted or have be...
shared_hosting
This plugin tries to find out if the web application under test is stored in a shared hosting. The procedure is pretty simple, using bing search engine, the plugin searches for "ip:1.2.3.4" where 1.2.3.4 is the IP address of the webserver. One configurable option exists: resultlimit Fetch the fir...
user_dir
This plugin will try to find user home directories based on the knowledge gained by other plugins, and an internal knowledge base. For example, if the target URL is: http://test/ And other plugins found this valid email accounts: email protected email protected This plugin will request:...
bing_spider
This plugin finds new URLs in Bing search engine. One configurable parameters exist: resultlimit This plugin searches Bing for : "site:domain.com", requests all search results and parses them in order to find new URLs. Plugin type Crawl Options Name | Type | Default Value | Description | Help...
finger_bing
This plugin finds mail addresses in Bing search engine. One configurable parameter exist: resultlimit This plugin searches Bing for : "@domain.com", requests all search results and parses them in order to find new mail addresses. Plugin type Infrastructure Options Name | Type | Default Value |...
