WAFW00F - Identifies and Fingerprints Web Application Firewall (WAF) Products

WAFW00F allows one to identify and fingerprint Web Application Firewall WAF products protecting a website. How does it work? To do its magic, WAFW00F does the following: Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions If that is not successful, it...

Microsoft Windows Forced Firewall Bypass

/ A Proof of Concept how bypass windows firewall Tested at windows 7 Author: Antonio Costa aka Cooler, CoolerVoid [email protected] Greetz: M0nad, I4K, Slyfunky, Sigsegv, RaphaelSC, MMxM, F-117, Clandestine, LoganBr, Welias, Luanzeiro, Alan JUmpi... This bypass the windows firewall, Search...

CVE-2016-4423

The attemptAuthentication function in Component/Security/Http/Firewall/UsernamePasswordFormAuthenticationListener.php in Symfony before 2.3.41, 2.7.x before 2.7.13, 2.8.x before 2.8.6, and 3.0.x before 3.0.6 does not limit the length of a username stored in a session, which allows remote attacker...

ManageEngine Firewall Analyzer runQuery guest user SQL Injection

An SQL injection vulnerability exists in ManageEngine Firewall Analyzer. This vulnerability is due to the use of hardcoded credentials and insufficient validation of request parameters in HTTP requests to the runQuery servlet. By sending crafted requests to an affected server, a remote attacker c...

FortiGate Firewall Has Design Flaw Vulnerability

FortiGate Fita Firewall is a network firewall product from Fortinet Fita for defense against attacks such as network and malicious code at the network and content layers. FortiGate Firewall has a design flaw vulnerability. It allows attackers to obtain sensitive information, log in to the system...

Information Disclosure Vulnerability in Feta Firewall

Fortinet is a multi-layered threat defense system. An information disclosure vulnerability exists in the Fita Firewall. In HTTP mode, the login interface and the administrator create an account, using plaintext transmission, and no mandatory requirements for weak passwords are made when creating ...

No updates from gateway servers

Challenge No data come from the gateway servers. The Svc.VeeamGateSvc.log on the Gateway server default path C:\ProgramData\Veeam\Backup contains the following entry: Failed to establish target connection to endpoint: xxx.xxx.xxx.xxx:9999 where xxx.xxx.xxx.xxx points to the Veeam Managed Backup...

drchrono: node.drchrono.com - Information Disclosure and Windows Host Exposed

This host has the following TCP ports open; 21 - FTP 22 - SSH 135 - Windows RPC Dynamic 445 - Microsoft DS 3389 - Remote Desktop 5986 - PowerShell Remoting 47001 - WinRM The server appears to be secured well on the whole. However the services SSH and FTP do all give out some information. Please s...

pfSense Firewall <= 2.2.6 - Services CSRF

No description provided by source...

Kingsoft KingGate Firewall suffers from roo privilege command execution vulnerability

KingGate Firewall is a firewall product. Kingsoft KingGate Firewall has a roo privilege command execution vulnerability. It allows attackers to exploit the vulnerability to gain server privileges...

CVE-2016-4577

Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to...

CVE-2016-4577

The CVE-2016-4577 issue affects Huawei USG/NGFW products (USG6300/USG6500/USG6600/USG9500 and NGFW Module) where the Smart DNS function is vulnerable to a buffer overflow. The root cause is processing of crafted packets with illegitimate parameters, enabling remote attackers to cause a denial of ...

Command Execution Vulnerability in the Firewall System of Shenzhen SZXS Electronic Technology Co.

Shenzhen SHENZHEN SHENZHEN Electronic Technology Co., Ltd. is an IT solution service provider. A command execution vulnerability exists in the firewall system of Shenzhen SZS Electronic Technology Co., Ltd, which allows execution of arbitrary system commands...

Netdata - Real-Time Performance Monitoring

netdata is a highly optimized Linux daemon providing real-time performance monitoring for Linux systems, Applications, SNMP devices, over the web ! It tries to visualize the truth of now , in its greatest detail , so that you can get insights of what is happening now and what just happened, on yo...

Generate TCP/UDP Outbound Traffic On Multiple Ports

This module generates TCP or UDP traffic across a sequence of ports, and is useful for finding firewall holes and egress filtering. It only generates traffic on the port range you specify. It is up to you to run a responder or packet capture tool on a remote endpoint to determine which ports are...

Meteocontrol WEB'log Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-133-01 Meteocontrol WEB'log Vulnerabilities that was published May 12, 2016, on the NCCIC/ICS‑CERT web site. Independent researcher Karn Ganeshen has identified one authentication and two information exposure...

CANToolz aka YACHT (Yet Another Car Hacking Tool) - Framework for Black-Box CAN Network Analysis

CANToolz is a framework for analysing CAN networks and devices. This tool based on different modules which can be assembled in pipe together and can be used by security researchers and automotive/OEM security testers for black-box analysis and etc. You can use this software for ECU discovery, MIT...

PHPWebFTP 3.3b Cross Site Scripting

PHPWebFTP ver 3.3b - xss vulnerability , by NA. NA at tutanota.com Vendor has notified Description ---------------- phpWebFTP enables connections to FTP servers, even behind a firewall not allowing traffic. phpWebFTP bypasses the firewall by making a FTP connection from your web server to the FTP...

Juniper ScreenOS 6.3.x < 6.3.0r4 Firewall Private Address Information Disclosure

The version of Juniper ScreenOS running on the remote host is 6.3.x prior to 6.3.0r4. It is, therefore, affected by an information disclosure vulnerability that allows an unauthenticated, remote attacker to gain access to the private address of the firewall. Note that Nessus has not tested for th...

IPFire < 2.19 Core Update 101 - Remote Command Execution

Exploit Title: IPFire 2.19 Update Core 101 XSS to CSRF to Remote Command Execution Date: 04/05/2016 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.ipfire.org Version: lesser-than 2.19 Core Update 101 Category: Remote Command Execution / XSS Google dork: Tested on: IPFire...