SessionGopher

Copyright 2017 FireEye, created by Brandon Arvanaghi @arvanaghi Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by...

SharpDecryptPwd

SharpDecryptPwd This project is no longer updated, the refactored source code project is as follows https://github.com/RowTeam/SharpDecryptPwd Introduction Parses passwords saved on Windows systems for some programs, including: Navicat, TeamViewer, FileZilla, WinSCP, Xmangager series products...

SharpDecryptPwd

SharpDecryptPwd A password retrieval tool for common Windows programs: SharpDecryptPwd Usage SharpDecryptPwd.exe Author: Uknow Github: https://github.com/uknowsec/SharpDecryptPwd Reference: https://rcoil.me/2019/09/SharpDecryptPwd/ Usage: SharpDecryptPwd.exe -NavicatCrypto SharpDecryptPwd.exe...

Lucky-Spark

LUCKY-SPARK ⟪ LUCKY-SPARK ⟫ is a stager designed for shellcode payloads staged with http/https like sliver or on github raw. It uses modern obfuscation and evaion methods like sliding window just-in-time decryption of the payload and cpu instruction patching. By default it creates an executable...

FileZilla FTP Code Execution

The vulnerability of the FileZilla Client FTP client is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain full control over the system...

Exposed FileZilla Configuration File - Exposure Detection

Detected publicly accessible FileZilla client configuration files sitemanager.xml, recentservers.xml, filezilla.xml. !/usr/bin/env python3 -- coding: utf-8 -- """Detected publicly accessible FileZilla client configuration files sitemanager.""" from kittysploit import from...

Filezilla Detection

Filezilla internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Filezilla internal file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Filezilla Detection', 'description': 'Filezilla...

FileZilla FTP Service - Detect

FileZilla FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FileZilla FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'FileZilla FTP Servic...

WinRM Gather PuTTY WinSCP FileZilla

Collect PuTTY, WinSCP, and FileZilla saved sessions through WinRM !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.winrm.winrmsessionmixin import WinRMSessionMixin import re class ModulePost, WinRMSessionMixin: info = "name": "WinRM Gather PuTTY WinSCP...

Windows Gather PuTTY WinSCP FileZilla Sessions

Collect saved PuTTY registry sessions, WinSCP registry sessions, and FileZilla XML site entries on a Windows shell or Meterpreter session. !/usr/bin/env python3 -- coding: utf-8 -- """ Extract saved PuTTY, WinSCP, and FileZilla session data from a Windows session. """ from kittysploit import from...

Linux Distros Unpatched Vulnerability : CVE-2019-25683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FileZilla 3.40.0 contains a denial of service vulnerability in the local search functionality that allows local attackers to crash the application by supplying ...

EUVD-2019-20101

FileZilla 3.40.0 contains a denial of service vulnerability in the local search functionality that allows local attackers to crash the application by supplying a malformed path string. Attackers can trigger the crash by entering a crafted path containing 384 'A' characters followed by 'BBBB' and...

CVE-2019-25683

FileZilla 3.40.0 contains a denial of service vulnerability in the local search functionality that allows local attackers to crash the application by supplying a malformed path string. Attackers can trigger the crash by entering a crafted path containing 384 'A' characters followed by 'BBBB' and...

CVE-2019-25683

FileZilla 3.40.0 contains a denial of service vulnerability in the local search functionality that allows local attackers to crash the application by supplying a malformed path string. Attackers can trigger the crash by entering a crafted path containing 384 'A' characters followed by 'BBBB' and...

UBUNTU-CVE-2019-25683

FileZilla 3.40.0 contains a denial of service vulnerability in the local search functionality that allows local attackers to crash the application by supplying a malformed path string. Attackers can trigger the crash by entering a crafted path containing 384 'A' characters followed by 'BBBB' and...

CVE-2019-25683 FileZilla 3.40.0 Denial of Service via Local Search

FileZilla 3.40.0 contains a denial of service vulnerability in the local search functionality that allows local attackers to crash the application by supplying a malformed path string. Attackers can trigger the crash by entering a crafted path containing 384 'A' characters followed by 'BBBB' and...

CVE-2019-25683 FileZilla 3.40.0 Denial of Service via Local Search

FileZilla 3.40.0 contains a denial of service vulnerability in the local search functionality that allows local attackers to crash the application by supplying a malformed path string. Attackers can trigger the crash by entering a crafted path containing 384 'A' characters followed by 'BBBB' and...

CVE-2019-25683

FileZilla 3.40.0 contains a denial of service vulnerability in the local search functionality that allows local attackers to crash the application by supplying a malformed path string. Attackers can trigger the crash by entering a crafted path containing 384 'A' characters followed by 'BBBB' and...

CVE-2019-25683

FileZilla 3.40.0 is reported vulnerable to a local-denial-of-service in the local search function. A crafted search directory input consisting of 384 'A' characters followed by 'BBBB' and 'CCCC' sequences can crash the application when performing a local search. CVSS data indicates local attack v...

FileZilla log information leakage vulnerability

FileZilla is an open-source FTP/SFTP client for the Windows platform, developed by FileZilla. Version 3.40.0 of FileZilla contains a vulnerability related to log information disclosure. This vulnerability stems from a denial-of-service vulnerability in the local search function, which could allow...