LFISuite

LFI Suite LFI Suite란 무엇인가? LFI Suite는 완전히 자동화된 도구로, 기능 섹션에 나열된 다양한 공격 방법을 사용하여 로컬 파일 포함Local File Inclusion 취약점을 스캔하고 악용할 수 있습니다. 기능 Windows, Linux 및 OS X에서 작동 자동 구성 자동 업데이트 8가지의 다양한 LFI 공격 방식을 제공합니다: /proc/self/environ php://filter php://input /proc/self/fd access log phpinfo data://...

AutoPWN-Suite

AutoPWN Suite AutoPWN Suiteは、脆弱性のスキャンとシステムの自動悪用を行うプロジェクトです。 機能 CLI 自動スキャンと悪用 ユーザー入力を必要とせずにネットワークIP範囲を検出 サービスのバージョンに基づく脆弱性検出 Webアプリの脆弱性テスト（LFI、XSS、SQLI） Webアプリのディレクトリバスティング ターミナルから直接脆弱性に関する情報を取得 発見された脆弱性に関連するエクスプロイトを自動ダウンロード ネットワーク上にトラフィックを生成するノイズモード ステルススキャンのための回避モード 特権レベルに基づいてスキャンタイプを自動選択...

mansstimap

mansstimap SSTI Manager - Advanced SSTI Detection & Exploita...

injectproof

InjectProof The SQL injection scanner that finds what sqlma...

Exploit for Argument Injection in Gnu Inetutils

Tell Me Root Batch Scanning Tool for the CVE-2026-24061 Telne...

Evince CBT File Command Injection Exploit

This Metasploit module exploits a command injection vulnerability in Evince before version 3.24.1 when opening comic book .cbt files. Some file manager software, such as Nautilus and Atril, may allow automatic exploitation without user interaction due to thumbnailer preview functionality. Note th...

ghostscript - executeonly Bypass with errorhandler Setup

ghostscript - executeonly Bypass with errorhandler Setup While documenting bug 1675, I noticed another problem with errordict in ghostscript. Full working exploit that works in the last few versions is attached, viewing it in evince, imagemagick, gimp, okular, etc should add a line to /.bashrc...

Exploitable Vulnerabilities: A Metasploit-Vulnerability Management Love Story

Integrating InsightVM or Nexpose Rapid7's vulnerability management solutions with Metasploit our penetration testing solution is a lot like Cupid playing "matchmaker" with vulnerabilities and exploit modules. When a vulnerability scan is imported into Metasploit, many things happen under the hood...

acroread: not supported anymore (important)

Adobe discontinued the Adobe Reader 9 for Linux in June 2013 and has not fixed and will not fix any further security issues in it. As there is no new version, it is officially out of support. The SUSE Security Team strongly recommends to not use it anymore. Installing this update will deinstall t...

SuSE 11.2 / 11.3 Security Update : acroread (SAT Patch Numbers 8688 / 8689)

Adobe has discontinued the support of Adobe Reader for Linux in June 2013. Newer security problems and bugs are no longer fixed. As the Adobe Reader is binary only software and we cannot provide a replacement, SUSE declares the acroread package of Adobe Reader as being out of support and...

The Mole - Another Automatic SQL Injection exploitation tool

The Mole - Another Automatic SQL Injection exploitation tool The Mole is an automatic SQL Injection exploitation tool. Only by providing a vulnerable URL and a valid string on the site it can detect the injection and exploit it, either by using the union technique or a boolean query based...

phpnukesearch-xss.txt

PHP-Nuke ALL versions Search Module multiple XSS and HTML injection ------------------------------------------------------------------- The well-known PHP-Nuke CMS is vulnerable to multiple XSS attacks and HTML injections through the Search Module. The request is made using POST, but the whole...