CVE-2019-16146

Gophish through 0.8.0 allows XSS via a username...

Cross site scripting

Gophish through 0.8.0 allows XSS via a username...

CVE-2019-16146

Gophish through 0.8.0 allows XSS via a username...

CVE-2019-16146

CVE-2019-16146 affects the Gophish project, with exposure via the web UI: versions up to 0.8.0 are vulnerable to cross-site scripting through a username field. Root cause is improper sanitization/input handling in the user management/login context (XSS). The initial description consistently state...

CVE-2019-16146

Gophish through 0.8.0 allows XSS via a username...

PT-2019-14542 · Gophish · Gophish

Name of the Vulnerable Software and Affected Versions: Gophish versions prior to 0.8.1 Description: The issue allows for XSS via a username. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...

CVE-2019-16146: Improper Neutralization of Input During Web Page Generation

Gophish through 0.8.0 allows XSS via a username...

CLI for Ephemeral Penetration Testing: hideNsneak

This application assists in managing attack infrastructure for penetration testers by providing an interface to rapidly deploy, manage, and take down various cloud services. These include VMs, domain fronting, Cobalt Strike servers, API gateways, and firewalls. hideNsneak provides a simple...

Linkedin Information Gathering Tool: raven

raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin. Usage of this is application is pretty simple. It requires at least three parameters. The first one is the company name , the second one is the count...

“Breaking Bad Security” – Tutorial 1 – Email Phishing

Welcome to the first tutorial from our new video series, “Breaking Bad Security!” This security series is designed to inform you about different tests, tricks, and free tools you can use to validate your security controls and ensure your environment is secure. In this series, we will provide...

Open-Source Phishing Toolkit: gophish

Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily setup and execute hishing engagements and security awareness training. Installing Gophish Using Pre-Built Binaries Gophish is provided as a pre-built binary fo...