WebSurgery v0.5 - Web app testing tool Released

WebSurgery v0.5 - Web app testing tool Released WebSurgery is a suite of tools for security testing of web applications. Itwas designed for security auditors to help them with the web applicationplanning and exploitation. Currently, it uses an efficient, fast and stableWeb Crawler, File/Dir...

Host-Extract - Host/IP Pattern Extractor Tool !

Host-Extract - Host/IP Pattern Extractor Tool ! This little ruby script tries to extract all IP/Host patterns in page response of a given URL and JavaScript/CSS files of that URL. With it, you can quickly identify internal IPs/Hostnames, development IPs/ports, cdn, load balancers, additional...

aidSQL: A Tool to Find Vulnerable Spots in Web Sites !

aidSQL is a PHP application provided for detecting security holes in your websites. It is a modular application, meaning that you can develop your very own plugins for SQL injection detection & exploitation. Sample usage of aidsql: ./aidSQL --url=www.sample123.com We find it similar to nikto,...

Web Crawler : Web Application Crawler - New Release

Web Crawler is a open source application that is based on the WebEngine library. WebEngine is the set of tools for performing black-box web-sites testing and other similar tasks. It provides tools means for reception of documents from a web-server, parse HTML pages, their comparisons, search...

Web Site Crawler

Crawl a web site and store information about what was found This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Web Site Crawler', 'Description' = 'Crawl a web site and store information about what...

IBM OmniFind Cross Site Scripting / Privilege Escalation

============================================ ||| Security Advisory ||| ||| CVE-2010-3890 CVE candidate ||| ||| CVE-2010-3891 CVE candidate ||| ||| CVE-2010-3892 CVE candidate ||| ||| CVE-2010-3893 CVE candidate ||| ||| CVE-2010-3894 CVE candidate ||| ||| CVE-2010-3895 CVE candidate ||| |||...

IBM OmniFind Crawler Denial of Service Vulnerability

Exploit for multiple platform in category dos / poc ==================================================== IBM OmniFind Crawler Denial of Service Vulnerability ==================================================== Crawler endless loop CVE-2010-3899 The crawler has no recursion depth limit. A site wi...

IBM OmniFind Crawler - Denial of Service

Crawler endless loop CVE-2010-3899 The crawler has no recursion depth limit. A site with dynamic parameter manipulation can cause an endless loop. This loop will block the crawler thread and use permanent server resources. Too many blocks can lead to a denial of service. The same site will be...

Metasploit Web Crawler

This auxiliary module is a modular web crawler, to be used in conjunction with wmap someday or standalone. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Web Crawler. Author: Efrain Torres et at metasploit.com 2010...

[Positive Technologies Research] Open Source WebEngine and Web Crawler v.0.2 is out!

============================================================== ============= Positive Technologies Research Lab ============= ============================================================== Open Source WebEngine and Web Crawler Beta ============================================================== --...

css-read.txt

?php / BEGIN LICENSE BLOCK CSSH - a proof of concept CSS based history crawler Copyright C 2008 Sirdarckcat This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of t...

Remote file inclusion

PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footerfile parameter...

PHP Crawler 'footer.php'远程文件包含漏洞

BUGTRAQ ID: 31217 CNCAN ID：CNCAN-2008091803 PHP Crawler是一款基于PHP的WEB应用程序。 PHP Crawler不正确处理用户提交的输入，远程攻击者可以利用漏洞以WEB进程权限执行任意PHP代码。 问题是'footer.php'脚本对用户提交的'footerfile'参数缺少过滤，提交远程服务器上的任意文件作为包含文件，可导致以WEB进程权限执行任意PHP代码。 PHP-Crawler 0.8 目前没有解决方案提供： http://php-crawler.sourceforge.net/...

CVE-2008-4137

PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footerfile parameter...

CVE-2008-4137

CVE-2008-4137 affects PHP-Crawler 0.8; vulnerability is a PHP remote file inclusion via the footer_file parameter, allowing remote code execution. CVSS v2 base score 7.5 (HIGH). Public exploits/advisories exist (e.g., Exploit-DB, SecurityFocus) per references. No remediation details provided in t...

CVE-2008-4137: Improper Input Validation

PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footerfile parameter...

PHP Crawler 0.8 (footer) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ PHP Crawler 0.8 footer Remote File Inclusion Vulnerability ============================================================ Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability...

phpcrawler-rfi.txt

Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability Affected software: PHP-Crawler 0.8 Vendor: http://sourceforge.net/projects/php-crawler/ Risk: Critical http://target/path/footer.php?footerfile=SHELL Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security Researchers www.domlabs.org...

PHP Crawler 0.8 - Remote File Inclusion

PHP Crawler 0.8 - Remote File Inclusion Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability Affected software: PHP-Crawler 0.8 Vendor: http://sourceforge.net/projects/php-crawler/ Risk: Critical http://target/path/footer.php?footerfile=SHELL Found by Piker piker0x90atgmaildotcom D.O.M Labs...

PHP Crawler 0.8 (footer) Remote File Inclusion Vulnerability

No description provided by source. Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability Affected software: PHP-Crawler 0.8 Vendor: http://sourceforge.net/projects/php-crawler/ Risk: Critical http://target/path/footer.php?footerfile=SHELL Found by Piker piker0x90atgmaildotcom D.O.M Labs -...