RFCpwn

RFCpwn Un kit de herramientas de enumeración y explotación de SAP que utiliza llamadas RFC de SAP Twitter: @icryo Este es un kit de herramientas para demostrar el impacto de cuentas de servicio comprometidas. Esta PoC no está destinada para su uso en entornos de producción, no se garantiza...

HashDump-BypassEDR

1 Project Overview By leveraging the extended capabilities of the system whitelisted program Reg.exe, we cleverly bypass the interception points of antivirus software, achieving the goal of bypassing EDR to dump hashes. According to actual testing, this method is effective against Windows-series...

CVE-2016-5639

CVE-2016-5639 Crestron AirMedia AM-100 Traversal and Hashdump Metasploit Modules Two similar modules that take advantage of CVE-2016-5639 to dump hashes and retrieve files through path traversal. I made these modules separate because I wanted experience writing something that could "dump" hashes,...

OSCP-Prep

This is a comprehensive guide for information security infosec professionals, particularly those preparing for the OSCP Offensive Security Certified Professional exam. The guide is a collection of various files, including a PDF document, a text file, and a set of cheat sheets. The PDF document,...

mysql any user password the probability of landing vulnerability-vulnerability warning-the black bar safety net

When connected to MariaDB/MySQL, enter the password with the desired correct password comparison, due to incorrect handling, cause even if the memcmpreturned a non-zero value, it will make MySQL think that the two passwords are the same. That is as long as you know the user name, continually try ...

TorrentTrader 1.0 RC2 SQL Injection Exploit

No description provided by source. !/usr/bin/php ? / TorrentTrader 1.0 RC2 SQL Injection Proof of Concept By aCiDBiTS acidbitsathotmail.com 31-August-2004 "TorrentTrader http://www.torrenttrader.com/ is a feature packed and highly customisable open-source BitTorrent tracker." This PoC dumps the...