IPeakCMS 3.5 SQL Injection

Exploit Title: IPeakCMS 3.5 - Boolean-based blind SQLi Date: 07.12.2020 Exploit Author: MoeAlbarbari Vendor Homepage: https://ipeak.ch/ Software Link: N/A Version: 3.5 Tested on: BackBox Linux CVE : CVE-2021-3018 Check the CMS version :goto www.site.com/cms/ and you will notice that in the login...

IncomCMS 2.0 - Insecure File Upload

Exploit Title: IncomCMS 2.0 - Insecure File Upload Google Dork: intext:"Incom CMS 2.0" Date: 07.12.2020 Exploit Author: MoeAlBarbari Vendor Homepage: https://www.incomcms.com/ Version: 2.0 Tested on: BackBox linux CVE: CVE-2020-29597 Upload your files Upload your file...

BackBox Linux 6.0 - Ubuntu-based Linux Distribution Penetration Test and Security Assessment

BackBox Linux is a penetration testing and security assessment oriented Linux distribution providing a network and systems analysis toolkit. It includes some of the most commonly known/used security and analysis tools, aiming for a wide spread of goals, ranging from web application analysis to...

Androspy - Backdoor Crypter & Creator With Automatic IP Poisener

Androspy : is Backdoor Crypter & Creator with Automatic IP Poisener Coded By Belahsan Ouerghi Dependencies keytool jarsigner Apache2 Metasploit-Framework xterm Installation sudo apt-get install git git clone https://github.com/TunisianEagles/Androspy.git cd Androspy chmod +x setup.sh sudo...

WinSpy - A Windows Reverse Shell Backdoor Creator With An Automatic IP Poisener

WinSpy: Windows Reverse Shell Backdoor Creator With ip poisener. Dependencies 1 - metasploit-framework 2 - xterm 3 - apache2 4 - whiptail Installation sudo apt-get install git git clone https://github.com/TunisianEagles/winspy.git cd winspy chmod +x setup.sh ./setup.sh chmod +x winspy.sh...

Quasar - An Information Gathering Framework For Lazy Penetration Testers

Quasar Is An Information Gathering Framework For Penetration Testers Coded By Belahsan Ouerghi: Website Informations E-mail Address Checker Phone Number Information Credit Card Bin Checker Ip Locator Port Scanner Installation sudo apt-get install git git clone...

Wordpress endlesshorizon theme - Arbitrary file download Vulnerability

Exploit for php platform in category web applications -===================­====================­=================- Exploit title : Wordpress endlesshorizon theme - Arbitrary file download author : MrSqar Yemeni hacker Team : IT-Geeks Tested on : BackBox linux check if site is vulnerabe :...

Wordpress cafesalivation theme - Arbitrary file download Vulnerability

Exploit for php platform in category web applications -===================­====================­=================- Exploit title : Wordpress cafesalivation theme - Arbitrary file downloadliberator author : MrSqar Yemeni hacker Team : IT-Geeks Tested on : BackBox linux check if site is vulnerabe :...

Wordpress duena theme - Arbitrary file download Vulnerability

Exploit for php platform in category web applications -===================­====================­=================- Exploit title : Wordpress duena theme - Arbitrary file download author : MrSqar Yemeni hacker Team : IT-Geeks Tested on : BackBox linux check if site is vulnerabe :...

Wordpress newspro2891 theme - Arbitrary file download Vulnerability

Exploit for php platform in category web applications -===================­====================­=================- Exploit title : Wordpress newspro2891 theme - Arbitrary file download author : MrSqar Yemeni hacker Team : IT-Geeks dork : inurl:/wp-content/themes/newspro2891 Tested on : BackBox...

Wordpress liberator theme - Arbitrary file download Vulnerability

Exploit for php platform in category web applications -===================­====================­=================- Exploit title : Wordpress liberator theme arbitrary file download author : MrSqar Yemeni hacker Team : IT-Geeks Tested on : BackBox linux check if site is vulnerabe :...

WPScan v2.9.4 - Black Box WordPress Vulnerability Scanner

WPScan is a black box WordPress vulnerability scanner. INSTALL WPScan comes pre-installed on the following Linux distributions: BackBox Linux Kali Linux Pentoo SamuraiWTF BlackArch On macOS WPScan is packaged by Homebrew as wpscan. Windows is not supported We suggest you use the official Docker...

BackBox Linux Denial of Service Vulnerability

BackBox is a Linux distribution based on Ubuntu, an operating system for network penetration testing and security assessment. A denial of service vulnerability exists in BackBox Linux version 4.6 that allows remote attackers to cause a denial of service ksoftirqd CPU consumption via a large numbe...

Default credentials

DISPUTED BackBox Linux 4.6 allows remote attackers to cause a denial of service ksoftirqd CPU consumption via a flood of packets with Martian source IP addresses as defined in RFC 1812 section 5.3.7. This product enables net.ipv4.conf.all.logmartians by default. NOTE: the vendor reports "It has...

CVE-2017-7397

BackBox Linux 4.6 allows remote attackers to cause a denial of service ksoftirqd CPU consumption via a flood of packets with Martian source IP addresses as defined in RFC 1812 section 5.3.7. This product enables net.ipv4.conf.all.logmartians by default. NOTE: the vendor reports "It has been prove...

CVE-2017-7397

BackBox Linux 4.6 allows remote attackers to cause a denial of service ksoftirqd CPU consumption via a flood of packets with Martian source IP addresses as defined in RFC 1812 section 5.3.7. This product enables net.ipv4.conf.all.logmartians by default. NOTE: the vendor reports "It has been prove...

CVE-2017-7397

BackBox Linux 4.6 allows remote attackers to cause a denial of service ksoftirqd CPU consumption via a flood of packets with Martian source IP addresses as defined in RFC 1812 section 5.3.7. This product enables net.ipv4.conf.all.logmartians by default. NOTE: the vendor reports "It has been prove...

CVE-2017-7397

CVE-2017-7397 relates to BackBox Linux 4.6, where a denial-of-service is possible via a flood of packets with Martian source IPs (RFC 1812 5.3.7). The issue arises with net.ipv4.conf.all.log_martians enabled by default, potentially causing ksoftirqd CPU consumption. Connected documents corroborat...

PT-2017-17707 · Blackbox · Backbox Linux

Name of the Vulnerable Software and Affected Versions: BackBox Linux version 4.6 Description: The issue allows remote attackers to cause a denial of service, specifically ksoftirqd CPU consumption, via a flood of packets with Martian source IP addresses, as defined in RFC 1812 section 5.3.7. This...

BackBox Linux 4.4 - Ubuntu-based Linux Distribution Penetration Test and Security Assessment

BackBox is a Linux distribution based on Ubuntu. It has been developed to perform penetration tests and security assessments. Designed to be fast, easy to use and provide a minimal yet complete desktop environment, thanks to its own software repositories, always being updated to the latest stable...