17 matches found
CVE-2024-44000
EN GenCookieSessionHijack は、WordPressサイトで安全でない形で公開されたデバッグログを悪用してセッションCookieを抽出するために設計されたPoCツールです。これにより、攻撃者はアクティブな管理者セッションを乗っ取り、WordPress管理ダッシュボードへの不正アクセスを得ることができます。 特徴 WordPressのデバッグログからCookieを抽出します。 セッションCookieを識別してフィルタリングします（例：wordpressloggedin）。 管理者アクセスのためにセッションハイジャックを自動的に試行します。...
CVE-2024-44000-LiteSpeed-Cache
PoC Exploit de LiteSpeed Cache CVE-2024-44000 CVE-2024-44000 es una vulnerabilidad en el plugin LiteSpeed Cache, un popular plugin de WordPress. Esta vulnerabilidad afecta la gestión de sesiones en LiteSpeed Cache, permitiendo a los atacantes obtener acceso no autorizado a datos sensibles. El...
teams_dump
PoC zum Auslesen und Entschlüsseln von Cookies in der neuesten Version von Microsoft Teams extract.py extrahiert nur ohne Argumente extract.exe ist nur extract.py, gepackt als exe teamsdump.py Werte in der Datenbank auflisten root@kitploit: python.exe .\teamsdump.py teams --list Table: meta Colum...
SharpChromium
SharpChromium Einleitung SharpChromium ist ein .NET 4.0+ CLR-Projekt zum Abrufen von Daten aus Google Chrome, Microsoft Edge und Microsoft Edge Beta. Derzeit können folgende Daten extrahiert werden: Cookies im JSON-Format Verlauf mit zugehörigen Cookies für jeden Verlaufseintrag Gespeicherte...
cookie_crimes
Estrazione dei Cookie di Chrome Senza Root Questo strumento stampa i cookie di Chrome di un utente. Non è necessaria la password dell'utente né i permessi di root per usarlo. bel bel bel bel bel. Se non sei il tipo di persona che ha regolarmente la capacità di eseguire codice sui computer altrui,...
GlobalUnProtect
GlobalUnProtect PoC tool per decrittare e raccogliere configurazione, cookie e file HIP di GlobalProtect da installazioni client Windows. Post del blog: https://rotarydrone.medium.com/4a1d8fc7773e Utilizzo Eseguire come standalone o in-memory tramite execute-assembly o equivalente. Raccoglie tutt...
DumpChromeSecrets
!IMPORTANT Dieses Projekt wird nicht mehr gewartet. Bitte verwenden Sie stattdessenDumpBrowserSecrets, das Chrome, Edge, Brave, Firefox, Opera, Opera GX und Vivaldi unterstützt. DumpChromeSecrets Extrahiert Daten aus modernen Chrome-Versionen, einschließlich Refresh-Tokens, Cookies, gespeicherter...
EUVD-2001-0001
Malware in sbrugna...
CVE-2025-47269 code-server session cookie can be extracted by having user visit specially crafted proxy URL
code-server runs VS Code on any machine anywhere through browser access. Prior to version 4.99.4, a maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Failure to properly validate the port for a proxy request can result in proxying to a...
CVE-2025-47269 code-server session cookie can be extracted by having user visit specially crafted proxy URL
code-server runs VS Code on any machine anywhere through browser access. Prior to version 4.99.4, a maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Failure to properly validate the port for a proxy request can result in proxying to a...
code-server's session cookie can be extracted by having user visit specially crafted proxy URL
Summary A maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Details Failure to properly validate the port for a proxy request can result in proxying to an arbitrary domain. The malicious URL https:///proxy/[email protected]/path would be...
MS15-018 Microsoft Internet Explorer 10 and 11 Cross-Domain JavaScript Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "MS15-018 Microsoft Internet Explorer 10 and 11 Cross-Domain JavaScript Injection", 'Description' = %q This module exploits a universal cross-site...
Exploit for Improper Input Validation in Paloaltonetworks Pan-Os
CVE-2024-3400-pot Simple honeypot for CVE-2024-3400 Palo Alto...
Cross site scripting
An issue was discovered in Form Tools through 3.0.20. When an administrator creates a customer account, it is possible for the customer to log in and proceed with a change of name and last name. However, these fields are vulnerable to XSS payload insertion, being triggered in the admin panel when...
Chrome Cookie Extraction
Extract cookies from Chrome using Chrome’s Remote Debugging Protocol Recent assessments: 0xEmma at March 15, 2020 7:03pm UTC reported: Although this can lead to cookie leaks, the typical session cookie expires. And the complexity of this attack requires local access to a system, which, generally...
vBulletin vBay <=1.1.9 Error-Based SQL Injection
Exploit for php platform in category web applications !/usr/bin/env python -W ignore::DeprecationWarning """ VBay input variable "type" being assigned with the datatype NOHTML. Using this data type allows malicious attacks to still be executed. At line 448, it is used within the insert into...
