HP LaserJet Pro printers remote admin password extraction

Some of the networked HP LaserJet printers have hidden URLs hardcoded in the firmware. The URLs are not authenticated and can be used to extract admin password in plaintext v among other information like WiFi settings including WPS PIN. Models affected: HP LaserJet Pro P1102w, HP LaserJet Pro...

Windows Gather Razer Synapse Password Extraction

This module will enumerate passwords stored by the Razer Synapse client. The encryption key and iv is publicly known. This module will not only extract encrypted password but will also decrypt password using public key. Affects versions earlier than 1.7.15. This module requires Metasploit:...

Windows Gather Spark IM Password Extraction

This module will enumerate passwords stored by the Spark IM client. The encryption key is publicly known. This module will not only extract encrypted password but will also decrypt password using public key. This module requires Metasploit: https://metasploit.com/download Current source:...

Trend Micro Control Manager 5.5/6.0 AdHocQuery - (Authenticated) Blind SQL Injection

!/usr/bin/env python Exploit Title: Trend Micro Control Manager 5.5/6.0 AdHocQuery BlindSQL Injection post-auth Disclosure Date: 09/27/2012 Author: otoy @otoyrood & modpr0be @modpr0be Contact: researchatspentera.com Platform: Windows Tested on: Windows 2003 Standard Edition Software Link:...

Windows Gather TortoiseSVN Saved Password Extraction

This module extracts and decrypts saved TortoiseSVN passwords. In order for decryption to be successful this module must be executed under the same privileges as the user which originally encrypted the password. This module requires Metasploit: https://metasploit.com/download Current source:...

Windows Gather Microsoft Outlook Saved Password Extraction

This module extracts and decrypts saved Microsoft Outlook versions 2002-2010 passwords from the Windows Registry for POP3/IMAP/SMTP/HTTP accounts. In order for decryption to be successful, this module must be executed under the same privileges as the user which originally encrypted the password. ...

Windows Gather VNC Password Extraction

This module extract DES encrypted passwords in known VNC locations This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather VNC Password Extraction', 'Description' = %q This module extrac...

Windows Gather WinSCP Saved Password Extraction

This module extracts weakly encrypted saved passwords from WinSCP. It searches for saved sessions in the Windows Registry and the WinSCP.ini file. It cannot decrypt passwords if a master password is used. This module requires Metasploit: https://metasploit.com/download Current source:...

Lexmark X656de Printer Information Leakage

============================================================================ Foofus.net Security Advisory: foofus-20111107 ============================================================================ Title: Lexmark Multifunction Printer Information exposure Version: X656de Vendor: Lexmark Release...

Windows Gather Google Picasa Password Extractor

This module extracts and decrypts the login passwords stored by Google Picasa. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Google Picasa Password Extractor', 'Description' = ...

Windows Gather FTP Navigator Saved Password Extraction

This module extracts saved passwords from the FTP Navigator FTP client. It will decode the saved passwords and store them in the database. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Window...

Windows Gather SmartFTP Saved Password Extraction

This module finds saved login credentials for the SmartFTP FTP client for windows. It finds the saved passwords and decrypts them. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class...

Windows Gather WS_FTP Saved Password Extraction

This module extracts weakly encrypted saved FTP Passwords from WSFTP. It finds saved FTP connections in the wsftp.ini file. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather WSFTP...

Windows Gather CoreFTP Saved Password Extraction

This module extracts saved passwords from the CoreFTP FTP client. These passwords are stored in the registry. They are encrypted with AES-128-ECB. This module extracts and decrypts these passwords. This module requires Metasploit: https://metasploit.com/download Current source:...

Windows Gather FlashFXP Saved Password Extraction

This module extracts weakly encrypted saved FTP Passwords from FlashFXP. It finds saved FTP connections in the Sites.dat file. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather...

SmartFTP Saved Password Extraction

$Id:$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'rex' require...

Apple Airport Extreme Password Extraction (WDBRPC)

This module can be used to read the stored password of a vulnerable Apple Airport Extreme access point. Only a small number of firmware versions have the WDBRPC service running, however the factory configuration was vulnerable. It appears that firmware versions 5.0.x as well as 5.1.x are...

SphereCMS Blind SQL Injection Vulnerability

www.BugReport.ir AmnPardaz Security Research Team Title: SphereCMS Blind SQL Injection Vulnerability Vendor: http://sphere.xlentprojects.se/ Vulnerable Version: 1.1 alpha Latest version till now Exploitation: Remote with browser Fix: N/A - Description: SphereCMS is a CMS which allow managing foru...

4images 1.7.1 Remote SQL Injection Vulnerability

No description provided by source. Exploit Title: 4images 1.7.1 Remote SQL Injection Vulnerability Date: 20-12-2009 Author: Master Mind Version: 1.7.1 CVE : N/A ============================================================= Script Name : 4images 1.7.1 Language : php Author : Master Mind Home :...

PJblog V3.0 注入漏洞

漏洞文件：action.asp 第14行 strcname=request"cname" set checkcdb=conn.execute"select from blogContent where logcname="""&strcname&"""" PJblog V3.0 官方补丁 ?php / PJblog V3.0 0day exp code by 小蟑螂&bink www.0kee.com www.t00ls.net 09.04.22 / $url="http://www.pjhome.net"; //注入地址 $varname="puterjam"; //管理员...