[Viproy] VoIP Penetration Testing Kit

Viproy Voip Pen-Test Kit is developed to improve quality of SIP Penetration Tests. It provides authentication feature that helps to create simple tests. It includes 7 different modules with authentication support: options tester, brute forcer, enumerator, invite tester, trust analyzer, proxy and...

Script local/remote file inclusion/reading and file name truncation vulnerability FUZZ tool details-vulnerability warning-the black bar safety net

Script file include vulnerability can be said is endless, bitter in the market, there is no good comprehensive functions of the targeted open-source tools to do the reference, now the file contains several typical vulnerability for an example. To Plug-in source code and detailed description: This...

oday or exp mining techniques overview-vulnerability warning-the black bar safety net

A lot of times we on various 0day or exp with strong passion, indeed, the hand grip of such powerful weapons of destruction will make the target's combat becomes very smooth, but the problem is that not everyone can grasp the latest 0day, and to be clear that there is a lot we do not know the 0da...

PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool

PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool This is the application that detected almost all of the web application vulnerabilities listed on the advisories page. PHP Vulnerability Hunter is an advanced automated whitebox fuzz testing tool capable of triggering a wide range o...

GFI Faxmaker - Fax Viewer v10.0[build 237] DoS (Poc)

Exploit for windows platform in category dos / poc !/usr/bin/python Title: GFI Faxmaker Fax Viewer v10.0build 237 DoS Poc. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Home: http://www.kioptrix.com Manifacturer's link: http://www.gfi.com Date Found: Oct 28th...

Nmap NSE net: dns-fuzz

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: dns-fuzz

This script launches a DNS fuzzing attack against any DNS server. The script induces errors into randomly generated but valid DNS packets. The packet template that we use includes one uncompressed and one compressed name. Use the 'dns-fuzz.timelimit' argument to control how long the fuzzing lasts...

Universal Fuzzer by Codenomicon !

Codenomicon is a Finland based Information Security company. Recently it has released a universal fuzzer, a fuzz testing solution that combines heuristics and multiple fuzzers with a graphical user interface, automated test executions and reporting features. Fuzzing has been popular between hacke...

mountall 2.15.2 (Ubuntu 10.04/10.10) - Local Privilege Escalation

source: https://www.securityfocus.com/bid/43084/info !/bin/sh by fuzz. For Anux inc. ubuntu 10.04 , 10.10 if -z "$1" then echo "usage: $0 " echo "see here http://www.reactivated.net/writingudevrules.html" exit fi cat usn985-exploit.sh usn985-sc.c /dev/.udev/rules.d/root.rules chmod +x...

超级巡警 <= v4 Build0316 ASTDriver.sys 本地特权提升漏洞

该漏洞是我2010年4月6日晚上，通过自己的IoControl Fuzz工具挖掘的。漏洞存在于超级巡警ASTDriver.sys这个驱动中，影响超级巡警v4 Build0316和以前的版本。利用该漏洞能够实现本地特权提升，进Ring0。 PAGEFAULTINNONPAGEDAREA 50 Invalid system memory was referenced. This cannot be protected by try-except, it must be protected by a Probe. Typically the address is just plain bad ...

Respect The Fuzzer

This image from Charlie Miller’s CanSecWest presentation credit InfoSec Events shows how a small home-brewed fuzzing tool found multiple exploitable vulnerabilities in Apple’s Preview, Microsoft’s PowerPoint and OpenOffice. At the Pwn2Own contest, all the vulnerabilities used in the winning...

eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Crash

Exploit for windows platform in category dos / poc =========================================================================== eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Crash PoC =========================================================================== Title: eDisplay...

Microsoft Releases New SDL Security Tools

Microsoft’s Security Development Lifecycle SDL team has released two new security tools to help developers test and verify the security of software programs. The tools — BinScope Binary Analyzer and MiniFuzz File Fuzzer — are available for download at no cost. The BinScope Binary Analyzer can be...

Dranzer: Fuzzing for ActiveX vulnerabilities

The United States Computer Emergency Response Team US-CERT has released a new ActiveX fuzzer to help developers pinpoint browser-based security vulnerabilities. The tool, called Dranzer, lets software developers test ActiveX controls for vulnerabilities before the software is released to the...

curl security update

7.15.5-2.1.el53.4 - another correction of the patch for CVE-2009-0037 7.15.5-2.1.el53.3 - forwardport one hunk from upstream curl-7.15.1 Related: 485290 7.15.5-2.1.el53.2 - fix hunk applied to wrong place due to nonzero patch fuzz Related: 485289 7.15.5-2.1.el53.1 - fix CVE-2009-0037 Resolves:...

Debian: Security Advisory (DSA-302)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 302-1 (fuzz)

The remote host is missing an update to fuzz announced via advisory DSA 302-1. OpenVAS Vulnerability Test $Id: deb3021.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 302-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Unfixed XSS vulnerability at www.clyde1.com

Security researcher FuZz, has submitted on 23/05/2007 a cross-site-scripting XSS vulnerability affecting www.clyde1.com, which at the time of submission ranked 286506 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. It is currently...

Unfixed XSS vulnerability at www.theatlantic.com

Security researcher FuZz, has submitted on 23/05/2007 a cross-site-scripting XSS vulnerability affecting www.theatlantic.com, which at the time of submission ranked 12558 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. It is current...

Unfixed XSS vulnerability at www.ananzi.co.za

Security researcher FuZz, has submitted on 23/05/2007 a cross-site-scripting XSS vulnerability affecting www.ananzi.co.za, which at the time of submission ranked 20655 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. It is currently...