Infernal-Twin - This Is Evil Twin Attack Automated (Wireless Hacking)

This tool is created to aid the penetration testers in assessing wireless security. Author is not responsible for misuse. Please read instructions thoroughly. Usage sudo python InfernalWireless.py How to install $ sudo apt-get install apache2 $ sudo apt-get install mysql-server...

Network Security Testing: Evil Foca

Evil Foca is a tool for security pentesters and auditors whose purpose it is to test security in IPv4 and IPv6 data networks. The software automatically scans the networks and identifies all devices and their respective network interfaces, specifying their IPv4 and IPv6 addresses as well as the...

Evil FOCA - MITM, DoS, DNS Hijacking in IPv4 and IPv6 Penetration Testing Tool

Evil Foca is a tool for security pentesters and auditors whose purpose it is to test security in IPv4 and IPv6 data networks. The tool is capable of carrying out various attacks such as: MITM over IPv4 networks with ARP Spoofing and DHCP ACK Injection. MITM on IPv6 networks with Neighbor...

ZTE PC UI USB Modem Software - Local Buffer Overflow

!/usr/bin/python -w Title : ZTE PC UI USB MODEM SOFTWARE Buffer Overflow Date : 17/09/2015 Author : R-73eN Tested on : Windows Xp sp3 on software Eagle Speed PCWEAGLEALBp671A1V1.0.0B02 Since all the PC UI based software shares the same source code they are all vulnerable.Confirmed By ZTE The...

Hackable HTTP proxy: Toxy

toxy is a fully programmatic and hackable HTTP proxy to simulate server failure scenarios and unexpected network conditions It was mainly designed for fuzzing/evil testing purposes, when toxy becomes particularly useful to cover fault tolerance and resiliency capabilities of a system, especially ...

Mock SMTP Server 1.0 - Remote Crash (PoC)

!/usr/bin/python Exploit Title: Mock SMTP Server 1.0 Remote Crash PoC Date: 23-08-2015 Exploit Author: Shankar Damodaran Author's Twitter : @sh4nx0r Vendor Homepage: http://mocksmtpserver.codeplex.com Software Link: http://mocksmtpserver.codeplex.com/downloads/get/87077 Version: 1.0 Tested on:...

MASM32 Quick Editor Buffer Overflow

!/usr/bin/env python Exploit Title: MASM32 quick editor .QSE SEH Based Buffer Overflow ASLR & SAFESEH bypass Date: 2015-08-15 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: http://www.masm32.com/ Software Link: http://www.masm32.com/masmdl.htm Version: MASM32 11 qeditor 4.0g Tested...

WAIDPS - Wireless Auditing, Intrusion Detection & Prevention System

WAIDPS is an open source wireless swissknife written in Python and work on Linux environment. This is a multipurpose tools designed for audit penetration testing networks, detect wireless intrusion WEP/WPA/WPS attacks and also intrusion prevention stopping station from associating to access point...

WordPress Plugin dzs-zoomsounds 2.0 - Arbitrary File Upload

WordPress Plugin dzs-zoomsounds 2.0 - Arbitrary File Upload Exploit Title: WordPress dzs-zoomsounds Plugins Remote File Upload Vulnerability Vendor : http://digitalzoomstudio.net/docs/wpzoomsounds/ Author: bl4ck-dz Date: 28/05/2015 Infected File: upload.php Category: webapps Google...

Newsletter 4.3 SQL Injection

------------------------ Exploit Title : Newsletter 4.3 SQL Injection Vulnerability Exploit Author : Ashiyane Digital Security Team Vendor Homepage: www.conpresso.de - www.conpresso4.de Google Dork ONE: intext:Module Newsletter 4.3 Google Dork TWO: Module Newsletter 4.3 by www.conpresso4.de Date ...

VideoCharge Express 3.16.3.04 - Local Buffer Overflow

VideoCharge Express 3.16.3.04 - Local Buffer Overflow !/usr/bin/python Exploit Title: VideoCharge Vanilla BOF Exploit v3.16.3.04 Date: 10/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com Version: v3.16.3.04 Tested on: Win XP3 Software...

VideoCharge Vanilla 3.16.4.06 - BOF Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: VideoCharge v3.16.4.06 Date: 10/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com=20 Version: 3.16.4.06 Tested on: Win XP3 Software link:...

codeigniter -- multiple vulnerabilities

The CodeIgniter changelog reports: Security: Added HTTP "Host" header character validation to prevent cache poisoning attacks when baseurl auto-detection is used. Security: Added FSCommand and seekSegmentTime to the "evil attributes" list in CISecurity::xssclean...

Zhone GPON 2520 R4.0.2.566b - Crash PoC

Exploit for hardware platform in category dos / poc from httplib2 import Http from urllib import urlencode import sys,time main function if name == "main": iflensys.argv != 2: print '' print ' GPON Zhone R4.0.2.566b D.O.S.' print ' Tested on' print ' GPON Zhone 2520' print ' Hardware: 0040-48-02'...

Zhone GPON 2520 R4.0.2.566b - Crash (PoC)

from httplib2 import Http from urllib import urlencode import sys,time main function if name == "main": iflensys.argv != 2: print '' print ' GPON Zhone R4.0.2.566b D.O.S.' print ' Tested on' print ' GPON Zhone 2520' print ' Hardware: 0040-48-02' print ' Software: R4.0.2.566b' print ' ' print '...

Kali Linux NetHunter - Android penetration testing platform

NetHunter is a Android penetration testing platform for Nexus and OnePlus devices built on top of Kali Linux, which includes some special and unique features. Of course, you have all the usual Kali tools in NetHunter as well as the ability to get a full VNC session from your phone to a graphical...

WiFiPhisher — Automated Phishing Attacks Against Wi-Fi Networks

A Greek security researcher, named George Chatzisofroniou, has developed a WiFi social engineering tool that is designed to steal credentials from users of secure Wi-Fi networks. The tool, dubbed WiFiPhisher, has been released on the software development website GitHub on Sunday and is freely...

WordPress Plugin Download Manager 2.7.4 - Remote Code Execution

!/usr/bin/python Exploit Name: Wordpress Download Manager 2.7.0-2.7.4 Remote Command Execution Vulnerability discovered by SUCURI TEAM http://blog.sucuri.net/2014/12/security-advisory-high-severity-wordpress-download-manager.html Exploit written by Claudio Viviani 2014-12-03: Discovered...

SaveWeb Portal <= 3.4 (SITE_Path) Remote File Inclusion Vulnerabilities

No description provided by source. ///////////////////CYBER-WARRiOR.ORG\\\\\\\\\\\ SaveWeb Portal 3.4 - SITEPath Remote File Inclusion Vulnerability Author: xoron script: SaveWeb Portal Class : Remote cont@ct: x0r0nathotmaildotcom CODE: include$SITEPath.poll/poll.php Exploit:...

PgMarket <= 2.2.3 (CFG[libdir]) Remote File Inclusion Vulnerability

No description provided by source. C Y B E R - W A R R i O R T I M PgMarket 2.2.3 CFGlibdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: include $CFGlibdir . stdlib.inc.php; Exploit:...