web-traffic-generator

web-traffic-generator Un generador de tráfico HTTP/S "orgánico" rápido y sucio. Acerca de Es solo un script de Python simple mal escrito que "navega" sin rumbo por internet empezando desde ROOTURLS predefinidas y "haciendo clic" aleatoriamente en enlaces de páginas hasta alcanzar la MAXDEPTH...

GoEnumerator

ACERCA DE GoEnumerator GoEnumerator es una herramienta que estoy escribiendo por diversión pero también para usar en mi propia enumeración, por lo que seguiré añadiendo más funciones para intentar acelerar los primeros pasos en cualquier enumeración de CTF o prueba de penetración profesional, e i...

HTMLSmuggler

HTMLSmuggler ✉️ HTMLSmuggler - 用于绕过IDS并通过HTML走私传递有效载荷的JS载荷生成器。 描述 关于什么是HTML走私的完整解释可以在这里找到。 HTML走私的主要目标是通过将恶意载荷（例如可执行文件/压缩包等）伪装成看似无害的HTML和JavaScript代码，来绕过网络安全控制，如防火墙和入侵检测系统。通过利用Web应用的动态特性，攻击者可以将恶意内容传递到用户的浏览器，而不会触发安全警报或被传统安全机制检测到。得益于这种技术，恶意文件的下载在现代IDS解决方案中不会以任何方式显示出来。...

skyhook

Skyhook Skyhook es una utilidad basada en REST que se usa para introducir y extraer archivos de redes protegidas por implementaciones de IDS. Viene con un cliente web preempaquetado que utiliza una combinación de React, vanilla JS y WebAssembly para gestionar transferencias de archivos. Enlaces...

HTTP-revshell - Powershell Reverse Shell Using HTTP/S Protocol With AMSI Bypass And Proxy Aware

HTTP-revshell is a tool focused on redteam exercises and pentesters. This tool provides a reverse connection through the http/s protocol. It use a covert channel to gain control over the victim machine through web requests and thus evade solutions such as IDS, IPS and AV. Help server.py unisessio...

RunCMS 1.6 - Remote Blind SQL Injection Exploit (IDS evasion)

No description provided by source. // / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / // / exploit get hash of admin password / / / / Exploit is invisible for / / RUNCMS sql injection detecting mechanism / // // / tested on RUNCMS english version 1.6 / // // / Date of Public EXPLOIT:...

Apache Tomcat security restrictions bypass Vulnerability(CVE-2 0 1 3-4 2 8 6)-vulnerability warning-the black bar safety net

Affected system: Apache Group Tomcat 8.0.0-RC1 - 8.0.0-RC5 Apache Group Tomcat 7.0.0 - 7.0.47 Apache Group Tomcat 6.0.0 - 6.0.37 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 6 5 7 7 3 CVECAN ID: CVE-2 0 1 3-4 2 8 6 Apache Tomcat is a...

Apache Tomcat 安全限制绕过漏洞

BUGTRAQ ID: 65773 CVECAN ID: CVE-2013-4286 Apache Tomcat是一个流行的开源JSP应用服务器程序。 Tomcat 8.0.0-RC1 - 8.0.0-RC5、7.0.0 - 7.0.47、6.0.0 - 6.0.37版本存在漏洞CVE-2005-2090修复不完整问题，远程攻击者可利用此漏洞对Web缓存投毒、逃避IDS签名、启动跨站脚本、HTML注入、会话劫持攻击等。 0 Apache Group Tomcat 8.0.0-RC1 - 8.0.0-RC5 Apache Group Tomcat 7.0.0 - 7.0.47 Apache...

PHPMYWIND sql 一枚 无视GPC

简要描述： 今天又去重新看了看phpmywind 在官网上下的 版本还是4.6.6 无需登录 无需单引号。 详细说明： 在order.php中 ifempty$COOKIE'shoppingcart' header'location:shoppingcart.php'; exit; //不允许游客下单跳转登陆 ifempty$COOKIE'username' header'location:member.php?c=login'; exit; 让这两个不为空就好。 $action = isset$action ? $action : ''; $datagroup =...

Fully automated MySQL5 boolean based enumeration tool

Fully automated MySQL5 boolean based enumeration tool Blackhatacademy Developers releases Fully automated MySQL5 boolean based enumeration tool. By default, this script will first determine username, version and database name before enumerating the informationschema information. When the -q flag ...

DCE-RPC Big Endian Evasion Technique

DCE/RPC stands for "Distributed Computing Environment / Remote Procedure Calls". It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having...

linux/x86 Self-modifying shellcode for IDS evasion 64 bytes

No description provided by source. / | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / // // / //|// //// //,//,/ xenomuta\x40phreaker\x2enet http://xenomuta.tuxfamily.org/ - Methylxantina 256mg Description: linux/x86 Self-modifying ShellCode for IDS evasion creates...

linux/x86 Self-modifying shellcode for IDS evasion 64 bytes

Exploit for linux/x86 platform in category shellcode =========================================================== linux/x86 Self-modifying shellcode for IDS evasion 64 bytes =========================================================== / Description: linux/x86 Self-modifying ShellCode for IDS evasio...

linux/x86 - Self-modifying shellcode for IDS evasion 64 bytes

linux/x86 Self-modifying shellcode for IDS evasion 64 bytes. Shellcode exploit for linx86 platform / | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / // // / //|// //// //,//,/ xenomuta\x40phreaker\x2enet http://xenomuta.tuxfamily.org/ - Methylxantina 256mg...

runcms-sqlids.txt

// / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / // / exploit get hash of admin password / / / / Exploit is invisible for / / RUNCMS sql injection detecting mechanism / // // / tested on RUNCMS english version 1.6 / // // / Date of Public EXPLOIT: December 25, 2007 / / Written by:...

RunCMS 1.6 Remote Blind SQL Injection Exploit (IDS evasion)

No description provided by source. // / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / // / exploit get hash of admin password / / / / Exploit is invisible for / / RUNCMS sql injection detecting mechanism / // // / tested on RUNCMS english version 1.6 / // // / Date of Public&...

RunCMS 1.6 Remote Blind SQL Injection Exploit (IDS evasion)

Exploit for unknown platform in category web applications =========================================================== RunCMS 1.6 Remote Blind SQL Injection Exploit IDS evasion =========================================================== // / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / /...

RunCMS 1.6 - Blind SQL Injection (IDS Evasion)

RunCMS 1.6 - Blind SQL Injection IDS Evasion // / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / // / exploit get hash of admin password / / / / Exploit is invisible for / / RUNCMS sql injection detecting mechanism / // // / tested on RUNCMS english version 1.6 / // // / Date of Public...

RunCMS 1.6 - Blind SQL Injection (IDS Evasion)

// / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / // / exploit get hash of admin password / / / / Exploit is invisible for / / RUNCMS sql injection detecting mechanism / // // / tested on RUNCMS english version 1.6 / // // / Date of Public EXPLOIT: December 25, 2007 / / Written by:...

Oracle 10g LT.FINDRICSET Local SQL Injection Exploit (IDS evasion)

No description provided by source. // / Oracle 10g LT.FINDRICSET SQL Injection Exploit / // / sploit grant DBA to scott / / evil cursor injection / / No "create procedure" privileg needed! / / + Funny IDS evasion vith base64 / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT:...