273 matches found
Metasploit Weekly Wrap-Up
SAMR Auxiliary Module A new SAMR auxiliary module has been added that allows users to add, lookup, and delete computer accounts from an AD domain. This should be useful for pentesters on engagements who need to create an AD account to gain an initial foothold into the domain for lateral movement...
Malicious code in rex-design (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08797fcedbfba6352f704ba60e5df06ca756270b1fedabe5eb83784ae13a5395 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5776 Malicious code in rex-design (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08797fcedbfba6352f704ba60e5df06ca756270b1fedabe5eb83784ae13a5395 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Metasploit Wrap-Up
Dump Windows secrets from Active Directory This week, our very own Christophe De La Fuente added an important update to the existing Windows Secret Dump module. It is now able to dump secrets from Active Directory, which will be very useful for Metasploit users. This new feature uses the Director...
Native LDAP Server (Example)
This module provides a Rex based LDAP service to expose the native Rex LDAP server functionality created during log4shell development. Module Options msf use auxiliary/server/ldap msf auxiliaryldap show actions ...actions... msf auxiliaryldap set ACTION msf auxiliaryldap show options ...show and...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
MyLog4Shell log4j RCE Exploitation Detection You can use th...
Cryptominers Slither into Python Projects in Supply-Chain Campaign
A group of cryptominers was found to have infiltrated the Python Package Index PyPI, which is a repository of software code created in the Python programming language. Similar to other repositories like GitHub, npm and RubyGems, PyPI is part of the software supply chain. It offers a place where...
PT-2018-14211
Name of the Vulnerable Software and Affected Versions REDAXO versions prior to 5.6.3 Description A critical SQL injection issue has been found in the rex list class due to the prepareQuery function in core/lib/list.php. This can be exploited via the "sort" parameter in the...
SQL Injection Vulnerability in PHP Version of Rex Design Website Building System
R&S Design is an Internet solution provider in Guangdong, focusing on the study of the development status of small and medium-sized enterprises around the world, and is committed to promoting enterprises to embark on the road of comprehensive informatization. Rui Si Design website construction...
Metasploit Wrapup
Metasploit Hackathon We were happy to host the very first Metasploit framework open source hackathon this past week in the Rapid7 Austin. Eight Metasploit hackers from outside of Rapid7 joined forces with the in-house team and worked on a lot of great projects, small and large. @bcook started the...
Native DNS Server (Example)
This module provides a Rex based DNS service which can store static entries, resolve names over pivots, and serve DNS requests across routed session comms. DNS tunnels can operate across the Rex switchboard, and DNS other modules can use this as a template. Setting static records via hostfile...
Kids Dinosaur Rex Slide Puzzle - External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Kids Dinosaur Rex Slide Puzzle published at the 'play' market has multiple vulnerabilities...
Tyrannosaurus Rex Sim 3D - Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Tyrannosaurus Rex Sim 3D published at the 'play' market has multiple vulnerabilities...
Paris Rex - Dangerous filesystem permissions, Insecure KeyStore, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Paris Rex published at the 'play' market has multiple vulnerabilities...
T-Rex Survival Simulator - Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application T-Rex Survival Simulator published at the 'play' market has multiple vulnerabilities...
rex.se XSS vulnerability
Vulnerable URL: http://rex.se/SearchResult.asp?Query="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7588540 Google Pagerank| 1 VIP website status:| No Check rex.se SSL...
win32/xp [TR] sp3 MessageBox - shellcode 24 bytes
win32/xpTR sp3 MessageBox - 24Bytes Greetz : Bomberman&T-Rex Author : B3mB4m Proof : http://imgur.com/727ALiY I know there is nothing new.I wrote just to say "I am back" .. -Coming soon- arwin.c v2 .. Polymorphic shellcodes .. Win7,Win8,Win10 shellcodes .. RunPE & Migrate ? !!If bomberman allowed...
Printer File Upload Scanner
This module uploads a file to a set of printers using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule "Printer File Upload Scanner"...
Hackers Breach Dominos France, Demand Ransom Payment
A group of hackers calling itself ‘Rex Mundi’ claims it has breached vulnerable servers belonging to Domino’s France and Belgium, stealing the sensitive information of nearly 600,000 customers. The group is demanding a payment of €30,000 from Domino’s in exchange for information about the...
D-Link info.cgi POST Request Buffer Overflow
This module exploits an anonymous remote code execution vulnerability on different D-Link devices. The vulnerability is a stack based buffer overflow in the mycgi.cgi component, when handling specially crafted POST HTTP requests addresses to the /common/info.cgi handler. This module has been...