Pixiewps - Bruteforce Offline the WPS Pin (Pixie Dust Attack)

Pixiewps is a tool written in C used to bruteforce offline the WPS pin exploiting the low or non-existing entropy of some APs pixie dust attack. It is meant for educational purposes only. All credits for the research go to Dominique Bongard. DEPENDENCIES Pixiewps requires libssl. To install it:...

用友某业务站敏感信息泄漏+sql注入

简要描述： 用友某业务站敏感信息泄漏+sql注入 详细说明： 用友新道： http://home.seentao.com/ http://seentao.yonyou.com/ phpcms搭建，存在爆authkey漏洞，拿到key，想干什么干什么。。 WooYun: PHPCMS最新版本authkey泄露可注射拿shell 漏洞证明： 仅测试： web server operating system: Windows web application technology: PHP 5.3.29, Apache 2.4.10 back-end DBMS: MySQL 5.0...

PHPCMS V9 /phpsso_server/phpcms/modules/phpsso/index.php SQL注入漏洞

/api/getmenu.phpfunction ajaxgetlist $cachefile = $GET'cachefile'; $cachefile = strreplacearray'/', '//', '', $cachefile; //$cachefile = pregreplace'/\x00-\x08\x0B\x0C\x0E-\x1F\x7F+/S', '', $cachefile; $path = $GET'path'; $path = strreplacearray'/', '//', '', $path; //$path =...