Arbitrary TCP Connection Proxy: BinProxy

Arbitrary TCP Connection Proxy BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem. BinProxy is a tool for understanding and manipulating binary network traffic. BinProxy gives you a TCP proxy and an interface to write protocol-specific...

DMitry - Deepmagic Information Gathering Tool

DMitry Deepmagic Information Gathering Tool is a UNIX/GNULinux Command Line Application coded in C language. DMitry has the ability to gather as much information as possible about a host. Base functionality is able to gather possible subdomains, email addresses, uptime information, tcp port scan,...

[SECURITY] Fedora 23 Update: 389-ds-base-1.3.4.14-1.fc23

389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...

How to Collect SSR for Citrix Insight Services (CIS) Using the CLI in Citrix Hypervisor 8.2 CU1

How to Collect Data for Citrix Insight Service CIS using the CLI in Citrix Hypervisor 8.2 CU1 and later without the use of XenCenter...

Intercepting Proxy for Performing Web Application Security Testing: The Pappy Proxy

Intercepting Proxy for Performing Web application security testing The Pappy P roxy A ttack P roxy P rox Y Proxy is an intercepting proxy for performing web application security testing. Its features are often similar, or straight up rippoffs from Burp Suite . However, Burp Suite is neither open...

Usermode Archive Sandbox: ZipJail

Usermode Archive Sandbox ZipJail is a usermode sandbox for unpacking archives using the unzip , rar , 7z , and unace utilities. Through the use of the tracy library it limits the attack surfaces to an absolute minimum in case a malicious archive tries to exploit known or unknown vulnerabilities i...

Huawei UMA suffers from command line injection vulnerability (CNVD-2016-06968)

Huawei UMA Unified Maintenance Audit is a unified audit system. It provides a unified O&M operation portal, controls and records O&M operations performed by users, and supports auditing by command view and video playback. A command execution vulnerability exists in Huawei UMA. As the system does...

[SECURITY] Fedora 25 Update: rubygem-railties-5.0.0.1-2.fc25

Rails internals: application bootup, plugins, generators, and rake tasks. Railties is responsible to glue all frameworks together. Overall, it: handles all the bootstrapping process for a Rails application; manager rails command line interface; provides Rails generators core;...

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor, who operates locally and has completed the authentication process, to cause service failures or execute arbitrary code by enteri...

Hydra 8.3 - Network Logon Cracker

A very fast network logon cracker which support many different services. See feature sets and services coverage page - incl. a speed comparison against ncrack and medusa.Number one of the biggest security holes are passwords, as every password security study shows. This tool is a proof of concept...

IBM Spectrum Scale and GPFS Command Execution Vulnerabilities

IBM Spectrum Scale and IBM GPFS General Parallel File System are both products of IBM Corporation in the U.S. IBM GPFS is a set of enterprise file management systems optimized for petabyte-scale storage management.IBM Spectrum Scale is a set of IBM GPFS-based data and IBM Spectrum Scale is a data...

PT-2016-2535 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions prior to 8.41 Description: The issue is caused by a buffer overflow in the Cisco Adaptive Security Appliance software. It allows an authenticated, local attacker to potentially execute...

OpenStego - Steganography Application (Data Hiding and Watermarking)

OpenStego is a steganography application that provides two functionalities: 1. Data Hiding: It can hide any data within a cover file e.g. images. 2. Watermarking: Watermarking files e.g. images with an invisible signature. It can be used to detect unauthorized file copying. Usage For GUI: java -j...

OPENSUSE-SU-2016:1980-1 Security update for redis

This update for redis fixes the following issues: - CVE-2013-7458: unsafe permissions of command line history boo991250...

Arbitrary Command Execution Vulnerability in Multiple Cisco Products

The Cisco RV110W RV130W and RV215W are Cisco router products. An arbitrary command execution vulnerability exists in the CLI command parser of the Cisco RV110W Wireless-N VPN Firewall, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router, which allows an authenticated, loc...

Cisco RV110W, RV130W, and RV215W Routers Command Shell Injection Vulnerability

A vulnerability in the command-line interface CLI command parser of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an authenticated, local attacker to inject arbitrary shell commands that are executed ...

World Of Warcraft recruitment: a command line can hijack your game with the hijacking code and video-bug warning-the black bar safety net

! Recently there has been a relates to the social worker, the technology, the new game attack of the Scam, the attacker uses the world of Warcraft World of Warcraft, WoW game plug-in a hidden function. New attacks Imagine this Scene: the game one looks like a well-known Guild members of a role,...

[SECURITY] Fedora 24 Update: pdfbox-1.8.11-2.fc24

Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is...

Cisco IOS XR Native OS Command Injection Vulnerability

Cisco IOS XR is the United States Cisco Cisco company's IOS software series in a fully modular, distributed network interconnection operating system. A security vulnerability exists in the CLI in Cisco IOS XR versions 6.x through 6.0.1. A local attacker could exploit the vulnerability to execute...

Python Steganography Tool: Matroschka

Python Steganography Tool Матрёшка mɐˈtrʲɵʂkə is a command-line steganography tool written in pure Python. You can use it to hide and encrypt images or text in the least significant bits of pixels in an image. Encryption The encryption uses HMAC-SHA256 to authenticate the hidden data. Therefore t...