CVE-2021-37748

Exploits for the CVE-2021-37748 Full writeup: https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/...

xencrypt

Xencrypt PowerShell crypter v 1.0 저자 Xentropy @SamuelAnttila SecForce @SECFORCELTD 이 도구의 설계와 자신만의 crypter를 만드는 방법에 대해 읽고 싶다면, 제가 작성한 기사가 여기 있습니다: Write a crypter in any language 참고 스크립트 키디가 되지 마세요. GPLv3 라이선스로 제공하므로 직접 수정할 수 있습니다. 이 도구는 자신만의 crypter를 얼마나 쉽게 작성할 수 있는지 보여주는 데모로 제작되었습니다. 본래 목적에 맞게...

sparta

SPARTA v2.0 http://sparta.secforce.com Authors: SECFORCE Antonio Quina @st3r30byt3 Leonidas Stavliotis @lstavliotis Description SPARTA is a python GUI application which simplifies network infrastructure penetration testing by aiding the penetration tester in the scanning and enumeration phase. It...

WordPress Plugin Time Capsule 1.21.16 - Authentication Bypass

Exploit Title: Wordpress Time Capsule Plugin 1.21.16 - Authentication Bypass Date: 2020-01-16 Exploit Author: B. Canavate Vendor Homepage: https://wptimecapsule.com/ Software Link: https://wptimecapsule.com/ Version: Wordpress Time Capsule Plugin 1.21.16 Tested on: LAMP stack with most recent...

Apache mod_proxy Proof Of Concept

!/usr/bin/env python import socket import string import getopt, sys knownports = 0,21,22,23,25,53,69,80,110,137,139,443,445,3306,3389,5432,5900,8080 def sendrequesturl, apachetarget, apacheport, internaltarget, internalport, resource: get = "GET " + url + "@" + internaltarget + ":" + internalport...