payloads

payloads Git All the Payloads! Una colección de payloads de ataques web. ¡Las pull requests son bienvenidas! Uso ejecuta ./get.sh para descargar payloads externos y descomprimir cualquier archivo de payload que esté comprimido. Créditos de payloads fuzzdb - https://github.com/fuzzdb-project/fuzzd...

payloads

payloads Git All the Payloads! A collection of web attack payloads. Pull requests are welcome! Usage run ./get.sh to download external payloads and unzip any payload files that are compressed. Payload Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...

fuzzdb

FuzzDB 的创建旨在通过动态应用程序安全测试提高发现应用程序安全漏洞的可能性。它是首个也是最全面的开源字典，包含故障注入模式、可预测资源位置以及用于匹配服务器响应的正则表达式。 攻击模式 - FuzzDB 包含全面的攻击载荷原语，用于故障注入测试。 这些模式按攻击类型和适当的平台类型分类，已知会导致诸如操作系统命令注入、目录列表、目录遍历、源码暴露、文件上传绕过、身份验证绕过、XSS、HTTP 头部 CRLF 注入、SQL 注入、NoSQL 注入等问题。例如，FuzzDB 收录了 56 种可能被解释为空字节的模式，并包含了常用方法列表，如 "get, put, test"...

py3webfuzz

Py3webFuzz ';-- Python Web Fuzzing 模块库 Python3 模块兼容 作者 Jonathan Angeles @ex0day Github: https://github.com/jangelesg/py3webfuzz 贡献者 Nathan Hamiel @nathanhamiel 描述 基于 pywebfuzz，Py3webfuzz 是一个 Python3 模块，用于通过暴力破解、模糊测试和分析来辅助识别 Web 应用程序和 Web 服务中的漏洞。该模块通过提供常见的测试值、生成器和其他实用程序，在模糊测试 Web 应用程序、API 端点以及开发 W...

fuzzdb-collect

Based on the provided code and context, I will analyze the situation and provide a concise summary. Summary: The provided code appears to be a Python script designed to perform...

fuzzdb-collect

Based on the provided code and context, it appears to be a Python script designed to perform a brute-force attack on file extensions. The script is part of...

Trendmicro InterScan 6.5-SP2_Build_Linux_1548 Arbitrary File Write Vulnerability

Exploit for windows platform in category remote exploits Title: Trendmicro InterScan Arbitrary File Write Publication Date: 2017.02.15 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2017-001.txt 1. Vulnerability Details Affected Vendor: Trendmicro Affected Product: InterSc...

[fuzzdb] Attack and Discovery Pattern Database for Application Fuzz Testing

fuzzdb aggregates known attack patterns, predictable resource names, server response messages, and other resources like web shells into the most comprehensive Open Source database of malicious and malformed input test cases. What's in fuzzdb? Predictable Resource Locations - Because of the...

SmarterMail 7.x LDAP Injection

Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author : David Hoyt sqlhacker – Hoyt LLC Contact : [email protected] Home : http://cloudscan.me Dork : insite: SmarterMail Enterprise 7.2 Bug : LDAP Injection + Cross Site Scripting STORED Tested on : SmarterMail 7.x 7.2.3925 //...

SmarterMail 7.x (7.2.3925) Stored Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ==================================================================== SmarterMail 7.x 7.2.3925 Stored Cross Site Scripting Vulnerability ==================================================================== Vendor: smartertools.com SmarterMail 7...

SmarterMail 7.2.3925 - LDAP Injection

SmarterMail 7.2.3925 - LDAP Injection Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author : David Hoyt sqlhacker – Hoyt LLC Contact : [email protected] Home : http://cloudscan.me Dork : insite: SmarterMail Enterprise 7.2 Bug : LDAP Injection + Cross Site Scripting STORED Test...

SmarterMail 7.1.3876 Directory Traversal

Vendor: smartertools.com SmarterMail 7.x 7.1.3876 | Bug : Directory Traversal, OS Command Injection, Other Critcal Vulns Vendor: smartertools.com SmarterMail 7.x 7.1.3876 Date: 2010-09-12 Author : sqlhacker – http://cloudscan.me Thanks to : Burp Suite Pro - engagement tool : FuzzDB Contact :...

SmarterMail 7.1.3876 Directory Traversal Vulnerability

No description provided by source. Vendor: smartertools.com SmarterMail 7.x 7.1.3876 Date: 2010-09-12 Author : sqlhacker – http://cloudscan.me Thanks to : Burp Suite Pro - engagement tool : FuzzDB Contact : [email protected] Home : http://cloudscan.me Dork : insite: SmarterMail Enterprise 7.1 Bug ...

SmarterMail 7.1.3876 - Directory Traversal

SmarterMail 7.1.3876 - Directory Traversal Note: Fixed by the vendor in version 7.2.3925 http://www.smartertools.com/smartermail/releasenotes/v7.aspx Vendor: smartertools.com SmarterMail 7.x 7.1.3876 | Bug : Directory Traversal, OS Command Injection, Other Critcal Vulns Vendor: smartertools.com...