Bitbucket Keysight SQL Injection Vulnerability

Bitbucket Keysight is a database connection plugin available for Atlassian products from the Bitbucket organization. A SQL injection vulnerability exists in the Keysight Database Connector plugin before 1.5.0, which originates from a malicious user being able to bypass access control and submit...

Windows Gather WS_FTP Saved Password Extraction

This module extracts weakly encrypted saved FTP Passwords from WSFTP. It finds saved FTP connections in the wsftp.ini file. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather WSFTP...

Windows Gather SmartFTP Saved Password Extraction

This module finds saved login credentials for the SmartFTP FTP client for windows. It finds the saved passwords and decrypts them. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class...