vucsa

脆弱なクライアント-サーバーアプリケーション VuCSA 脆弱なクライアント-サーバーアプリケーション VuCSA は、非HTTPのクライアント-サーバーアプリケーションに対するペネトレーションテストの方法を学習・説明するために作られています。 Java（JavaFX グラフィカルユーザーインターフェース）で書かれています。 現在、この脆弱なアプリケーションには以下のチャレンジが含まれています： 1. バッファオーバーリード（シミュレーション） 2. コマンド実行 3. SQLインジェクション 4. 列挙 5. XML 6. 水平アクセス制御 7. 垂直アクセス制御 8. RCE...

VuCSA - Vulnerable Client-Server Application - Made For Learning/Presenting How To Perform Penetration Tests Of Non-Http Thick Clients

Vulnerable Client-Server Application Vulnerable client-server application VuCSA is made for learning/presenting how to perform penetration tests of non-http thick clients. It is written in Java with JavaFX graphical user interface. Currently the vulnerable application contains the following...

IBM Network Station Manager 2.0 R1 Race Condition Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/900/info IBM's Network Station Manager is a client/server application which facilitates management for IBM Network Stations. It is possible to locally gain root priviliges on hosts running the NetStation daemon. NetStatio...

McKesson Pathways Homecare 6.5 - Weak Username and Password Encryption

McKesson Pathways Homecare 6.5 - Weak Username and Password Encryption source: https://www.securityfocus.com/bid/3653/info McKesson Pathways Homecare is a client/server application which is used to track patient information, billing information and medical records for home care patients. The...

McKesson Pathways Homecare 6.5 - Weak 'Username' and Password Encryption

source: https://www.securityfocus.com/bid/3653/info McKesson Pathways Homecare is a client/server application which is used to track patient information, billing information and medical records for home care patients. The administrative username and password are encrypted in the pwhc.ini file on...