rsh Authentication Scanner

This module will test a shell rsh service on a range of machines and report successful logins. NOTE: This module requires access to bind to privileged ports below 1024. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

Design/Logic Flaw

SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain potentially sensitive information about open ports, via the apstoken parameter to the CrystalReports/viewrpt.cwr URI, related to an "internal port scanning"...

CVE-2010-3982

SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain potentially sensitive information about open ports, via the apstoken parameter to the CrystalReports/viewrpt.cwr URI, related to an "internal port scanning"...

CVE-2010-3982

SAP BusinessObjects Enterprise XI 3.2 is affected by a vulnerability in the CrystalReports/viewrpt.cwr URI where the apstoken parameter can cause remote TCP connections to arbitrary intranet hosts on any port, exposing potentially sensitive information about open ports (an related internal port s...

Nmap NSE: SMB Brute

This script attempts to get SMB login credentials by guessing usernames and passwords. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-brute.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbbrute.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMB Brute NSE script...

Nmap NSE: FTP Bounce

This script attempts to check if the FTP server allows port scanning using the FTP bounce method. This is a wrapper on the Nmap Security Scanner's http://nmap.org ftp-bounce.nse OpenVAS Vulnerability Test $Id: gbnmapftpbounce.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap FTP Bounce NSE...

TCP Port Scanner

Enumerate open TCP services by performing a full TCP connect on each port. This does not need administrative privileges on the source machine, which may be useful if pivoting. This module requires Metasploit: https://metasploit.com/download Current source:...

minerCPP 0.4b Buffer Overflow / Format String

!/usr/bin/env python minerCPP 0.4b Remote BOF+Format String Attack Exploit Software Link: http://sourceforge.net/projects/minercpp/ Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] Tested on Windows 7 In order to make...

Mandriva Update for squirrelmail MDVSA-2010:120 (squirrelmail)

Check for the Version of squirrelmail OpenVAS Vulnerability Test Mandriva Update for squirrelmail MDVSA-2010:120 squirrelmail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

mysql-variables NSE Script

Attempts to show all variables on a MySQL server. Script Arguments mysqluser The username to use for authentication. If unset it attempts to use credentials found by mysql-brute or mysql-empty-password. mysqlpass The password to use for authentication. If unset it attempts to use credentials foun...

Simple to crack router username and password-vulnerability warning-the black bar safety net

For how to hack Internet cafe router username and password, although in my previous article have also introduced some methods, but still on the Forum will see many rookie friend asked: the router password should how to hack? Gray pigeons on-line how to on the router make port mapping? Then this...

Simple to crack router username and password-vulnerability warning-the black bar safety net

For how to hack Internet cafe router username and password, although in my previous article have also introduced some methods, but still on the Forum will see many rookie friend asked: the router password should how to hack? Gray pigeons on-line how to on the router make port mapping? Then this...

Nagios-statd Daemon Detection

Nagios-statd Daemon is running at this port. Nagios-statd nagios-statd Daemon is the daemon program for nagios-stat. These programs together comprise a systems monitoring tool for various platforms. It is designed to be integrated with the Nagios monitoring tool, although this is not a requiremen...

TCP ACK Firewall Scanner

Map out firewall rulesets with a raw ACK scan. Any unfiltered ports found means a stateful firewall is not in place for them. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TCP ACK Firewall...

Vulnerability scanning tools nikto use of experience-vulnerability warning-the black bar safety net

http://www.cirt.net/ official website site http://www.feelids.com/ Author:swap A simple scan of the target basic WEB basic preparation Information, Server, PHP parser and other version information perl nkito.pl –h 192.168.0.1 Multi-port scanning Perl nikto.pl –h 192.168.0.1 –p 8 0, the 8 8, a 4 4...

Multiple FTP clients FTP bounce attack

Passive FTP implementation in multiple client allows to use FTP bounce attack for port scanning...

Google Chrome FTP PASV IP Malicious Port Scanning Vulnerability.

Advisory: Google Chrome FTP PASV IP Malicious Port Scanning Vulnerability. Version Affected: Google Chrome: 1.0.154.36 Description: Google Chrome FTP Client is vulnerable to FTP PASV malicious port scanning vulnerability. The username in the FTP ftp://username:[email protected] can be manipulat...

Using Nmap for your Windows network to find vulnerabilities-vulnerability warning-the black bar safety net

That said, If your network is vulnerable, or that your firewall has a vulnerability, or that your server is open shouldn't open ports, then your network is faced with is attack, is the damage of risk. To strike first. To prevent someone else ruin their own network, the first of his own“ruthless”a...

Adobe AIR < 1.5 Multiple Vulnerabilities (APSB08-23)

According to its version number, an instance of Adobe AIR on the remote Windows host is 1.1 or earlier. Such versions are potentially affected by several vulnerabilities APSB08-23 / APSB08-22 / APSB08-20 / APSB08-18: - A potential port-scanning issue. CVE-2007-4324 - Possible privilege escalation...

Flash movie can determine whether a TCP port is open

ActionScript 3 AS3 in Adobe Flash Player 9.0.47.0, and other versions and other 9.0.124.0 and earlier versions, allows remote attackers to bypass the Security Sandbox Model, obtain sensitive information, and port scan arbitrary hosts via a Flash SWF movie that specifies a connection to make, then...