WiFiPhisher v1.2 - Automated victim-customized phishing attacks against Wi-Fi clients

Wifiphisher is a security tool that mounts automated victim-customized phishing attacks against WiFi clients in order to obtain credentials or infect the victims with malwares. It is primarily a social engineering attack that unlike other methods it does not include any brute forcing. It is an ea...

dedsploit - Framework For Attacking Network Protocols

Framework for attacking network protocols and network exploitation. I. Introduction I don't look back anymore. I don't regret. I look forward Aiden Pearce Yes, Watch Dogs has heavily influenced us when writing this framework. This entire project brought upon a lot of the ideals from the Watch Dog...

ATutor 2.2.2 - Cross-Site Request Forgery (Add New Course)

Exploit Title: ATutor2.2.2 Learning Management System Cross-Site Request Forgery Add New Course Date: 13-11-2016 Software Link: https://github.com/atutor/ATutor/releases/tag/atutor222 Vendor: http://www.atutor.ca/ Exploit Author: Saravana Kumar Contact: https://facebook.com/06saravanakumar...

Caph 1.1 Local Denial Of Service

Caph DOS Exploit by NA . Crashes the program and produces a segmentation fault Tested upon Kali Linux. Discovered by NA , NA at tutanota.com Description ============ It is a sandbox game, based on physics. The game aim is to make contact red object with green object. You can use various objects,...

GNU GTypist 2.9.5-2 - Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits Exploit Author: Juan Sacco Program affected: GNU Typist Affected value: ARG0 Version: 2.9.5-2 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description: Simple ncurses touch typing tutor Displays exercise lines,...

GNU GTypist 2.9.5-2 Buffer Overflow

Exploit developed using Exploit Pack v6.5 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: GNU Typist Affected value: ARG0 Version: 2.9.5-2 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description: Simple ncurses...

GNU GTypist 2.9.5-2 - Local Buffer Overflow

Exploit developed using Exploit Pack v6.5 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: GNU Typist Affected value: ARG0 Version: 2.9.5-2 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description: Simple ncurses...

GNU GTypist 2.9.5-2 - Local Buffer Overflow

GNU GTypist 2.9.5-2 - Local Buffer Overflow Exploit developed using Exploit Pack v6.5 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: GNU Typist Affected value: ARG0 Version: 2.9.5-2 Tested and developed under: Kali Linux 2.0 x86 -...

XhP CMS 0.5.1 - Cross-Site Request Forgery Persistent Cross-Site Scripting

XhP CMS 0.5.1 - Cross-Site Request Forgery Persistent Cross-Site Scripting Exploit Title: XhP CMS 0.5.1 - Cross-Site Request Forgery to Persistent Cross-Site Scripting Exploit Author: Ahsan Tahir Date: 19-10-2016 Software Link: https://sourceforge.net/projects/xhp/ Vendor:...

Pluck CMS 4.7.3 - Cross-Site Request Forgery (Add Page)

Exploit Title: Pluck CMS 4.7.3 - Add-Page Cross-Site Request Forgery Exploit Author: Ahsan Tahir Date: 18-10-2016 Software Link: http://www.pluck-cms.org/?file=download Vendor: http://www.pluck-cms.org/ Google Dork: "2005-2016. pluck is available" Contact: https://twitter.com/AhsanTahirAT |...

Dracnmap - Exploit Network and Gathering Information with Nmap

Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast scaning with the...

4nonimizer - A bash script for anonymizing the public IP managing the connection to TOR and different VPNs providers

What is 4nonimizer? It is a bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers OpenVPN, whether free or paid. By default, it includes several pre-configured VPN connections to different peers .ovpn files and...

Joomla com_ jomres SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla com jomres SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : index.php?option=com jomres "propertyuid" Software link : https://www.jomres.net/files/jomresjoomlacomponentinstaller.zip Vendor Homepage :...

Fluxion - WPA/WPA2 Security Hacked Without Brute Force

Fluxion is a remake of linset by vk496 with less bugs and more features. It's compatible with the latest release of Kali Rolling. Latest builds stable and beta HERE . If you new, please start reading the wiki Fluxion GUI How it works Scan the networks. Capture a handshake can't be used without a...

KeepNote 0.7.8 Remote Command Execution

Title : KeepNote 0.7.8 Remote Command Execution Date : 29/09/2016 Author : R-73eN Twitter : https://twitter.com/r73en Tested on : KeepNote 0.7.8 Kali Linux , and Windows 7 Software : http://keepnote.org/index.shtmldownload Vendor : DESCRIPTION: When the KeepNote imports a backup which is actuallt...

KeepNote 0.7.8 - Remote Command Execution Exploit

Exploit for multiple platform in category local exploits Title : KeepNote 0.7.8 Remote Command Execution Date : 29/09/2016 Author : R-73eN Twitter : https://twitter.com/r73en Tested on : KeepNote 0.7.8 Kali Linux , and Windows 7 Software : http://keepnote.org/index.shtmldownload Vendor :...

KeepNote 0.7.8 - Command Execution

KeepNote 0.7.8 - Command Execution Title : KeepNote 0.7.8 Remote Command Execution Date : 29/09/2016 Author : R-73eN Twitter : https://twitter.com/r73en Tested on : KeepNote 0.7.8 Kali Linux , and Windows 7 Software : http://keepnote.org/index.shtmldownload Vendor : DESCRIPTION: When the KeepNote...

WPA WPA2 Phishing Tool: Linset

WPA WPA2 Phishing Tool: Linset Linset Is Not a Social Enginering Tool To run linset in Kali-linux, only two2 additional programs are requiredrqr. They are lighttpd and php5-cgi. apt-get install lighttpd apt-get install php5-cgi After you unzip the download, place the linset folder found in the...

EKG Gadu 1.9~pre+r2855-3+b1 - Local Buffer Overflow

EKG Gadu 1.9pre+r2855-3+b1 - Local Buffer Overflow Exploit developed using Exploit Pack v6.01 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: EKG Gadu Affected value: USERNAME Version: 1:1.9pre+r2855-3+b1 Tested and developed under: Kali Linux 2....

Kali Linux 2016.2 - The Best Penetration Testing Distribution

This release brings a whole bunch of interesting news and updates into the world of Kali. New KDE, MATE, LXDE, e17, and Xfce Builds Although users are able to build and customize their Kali Linux ISOs however they wish, we often hear people comment about how they would love to see Kali with...