CVE-2024-32640-SQLI-MuraCMS

Muraider - Automating the detection & Exploitation of CVE-2024-32640 \ SQLi in Mura/Masa CMS Usage Detection: python3 CVE-2024-32640.py --url https://target.com/ Ghauri Exploitation Pass '-g' or '--ghauri' as argument: Parse in any arguments that you wish to use with Ghauri, following their...

ghauri

Si te gusta Ghauri, considera apoyar al desarrollador Ghauri Una herramienta avanzada multiplataforma que automatiza el proceso de detección y explotación de fallos de inyección SQL. Requisitos Python 3 Python pip3 Instalación cd al directorio ghauri. instala los requisitos: python3 -m pip instal...

Barcha

🚀 Barcha Barcha is your Swiss‑Army knife for SQL Injection reconnaissance 🔍. Written in Go, it automates: Shodan enumeration of SSL hosts 🕵️‍♂️ Liveness & redirect checks ignores bad certs 🔄 Automated Ghauri tests for each host 🛡️ SQLite logging of every scan 🔖 🌟 Features 📡 Shodan Dork :...

Time-Based Blind SQL injection leads to database extraction

Proof of Concept Login your account. then copy the coope and paste on below raw request POST /ajaxtable.php HTTP/1.1 Host: demo.librenms.org User-Agent: Mozilla/5.0 Windows NT 10.0; rv:78.0 Gecko/20100101 Firefox/78.0 Content-Length: 221 Accept: / Accept-Language: en-US,en;q=0.5 Content-Type:...