Belati - The Traditional Swiss Army Knife for OSINT

Belati is tool for Collecting Public Data & Public Document from Website and other service for OSINT purpose. This tools is inspired by Foca and Datasploit for OSINT. What Belati can do? WhoisIndonesian TLD Support Banner Grabbing Subdomain Enumeration Service Scanning for all Subdomain Machine W...

Educational Games for Kids - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Educational Games for Kids published at the 'play' market has multiple vulnerabilities...

Microsoft Windows taskschd.msc Privilege Escalation Vulnerability

Microsoft Windows taskschd.msc local SYSTEM privilege escalation exploit. Microsoft Windows 'taskschd.msc' Local SYSTEM Privilege Escalation Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational purpose ONLY...

Exploit for CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-201...

Brother MFC-J6520DW - Authentication Bypass Password Change

Brother MFC-J6520DW - Authentication Bypass Password Change ASCII hex -- md5 e.g. AuthCookie=c243a9ee18a9327bfd419f31e75e71c7 for 'test' password This information can be used to crack current password from exported cookie. Fix: Minimize network access to Brother MFC device or disable HTTPS...

beta.veoh.com XSS vulnerability

Vulnerable URL: http://beta.veoh.com/m/videos.php?category=categoryeducationalandhowto==='"/alert"openbugbounty"...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

cve-2017-5638 cve-2017-5638 Vulnerable site sample This proje...

Windows x86 - Reverse TCP Staged Alphanumeric Shellcode (332 Bytes)

Windows x86 - Reverse TCP Staged Alphanumeric Shellcode 332 Bytes. Shellcode exploit for Winx86 platform Windows x86 Reverse TCP Staged Alphanumeric Shellcode CreateProcessA cmd.exe Author: Snir Levi, Applitects 332 Bytes For Educational Purposes Only Date: 01.03.17 Author: Snir Levi Email:...

Windows/x86 - Reverse TCP Staged Alphanumeric Shellcode (332 Bytes)

Windows x86 Reverse TCP Staged Alphanumeric Shellcode CreateProcessA cmd.exe Author: Snir Levi, Applitects 332 Bytes For Educational Purposes Only Date: 01.03.17 Author: Snir Levi Email: email protected https://github.com/snir-levi/ IP - 127.0.0.1 PORT - 4444 Tested on: Windows 7 Windows 10 Usage...

This Ransomware Malware Could Poison Your Water Supply If Not Paid

Ransomware has been around for a few years, but in last two years, it has become an albatross around everyone's neck, targeting businesses, hospitals, financial institutions and personal computers worldwide and extorting millions of dollars. Ransomware is a type of malware that infects computers...

Study Abroad Educational Website Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Study Abroad Educational Website Script Script Buy Now:...

Shiksha Educational Website Script - SQL Injection

Shiksha Educational Website Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Shiksha Educational Website Script Script Buy Now: http://www.popularclones.com/products/Shiksha-Educational Author:...

Study Abroad Educational Website Script - SQL Injection

Study Abroad Educational Website Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Study Abroad Educational Website Script Script Buy Now:...

Shiksha Educational Website Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Shiksha Educational Website Script Script Buy Now: http://www.popularclones.com/products/Shiksha-Educational Author...

Shiksha Educational Website Script - SQL Injection

Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Shiksha Educational Website Script Script Buy Now: http://www.popularclones.com/products/Shiksha-Educational Author: Ihsan Sencan Author Web: http://ihsan.net Mail :...

Pirelli DRG A115 ADSL Router - Unauthenticated DNS Change

No description provided by source. !/bin/bash Pirelli DRG A115 ADSL Router Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessibl...

Tenda ADSL2 / 2+ Modem D840R - Unauthenticated DNS Change Exploit

Exploit for hardware platform in category web applications !/bin/bash Tenda ADSL2/2+ Modem D840R Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web...

Pirelli DRG A115 ADSL Router - DNS Change

Pirelli DRG A115 ADSL Router - DNS Change !/bin/bash Pirelli DRG A115 ADSL Router Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is...

Tenda ADSL2/2+ Modem D840R - DNS Change

!/bin/bash Tenda ADSL2/2+ Modem D840R Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

Backdooring Android APK: backdoor-apk

Backdooring Android APK backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without...