CVE-2021-24356

CVE-2021-24356 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Suscriptor + Instalación Arbitraria de Plugins Descripción La falta de comprobaciones de capacidad y una comprobación de nonce insuficiente en la acción AJAX del plugin, hizo posible que usuarios autenticados instalaran plugins...

changeme

changeme A default credential scanner. About changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials. change...

peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

Lab_Reportlab

Laboratorio Reportlab Este laboratorio se configuró para probar el CVE-2023-33733. Configuración y Ejecución Configuración root@kitploit: pip3 install -r requirements.txt Ejecución root@kitploit: python3 app.py...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

vulnx

VulnX Vulnx 🕷️ is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms...

wordpress_DoS

WordPress 4.9.8 es vulnerable a ataques DoS. Información adicional Encontramos una denegación de servicio DoS en WordPress versión 4.9.8. Un usuario remoto no autenticado puede realizar una serie de solicitudes en las páginas vulnerables, lo que provoca un aumento del procesamiento, del swap y de...

scrounger

Description Scrounger - a person who borrows from or lives off others. There is no better description for this tool for two main reasons, the first is because this tool takes inspiration from many other tools that have already been published, the second reason is because it lives off mobile...

CVE-2021-22986-Poc

CVE-2021-22986-Poc Este es un PoC para BIGIP iControl RCE sin autenticación POC : curl -ksu admin:redacted https://192.168.123.134/mgmt/tm/access/bundle-install-tasks -d '"filePath":"id"' | jq . curl -ksu : https://192.168.123.134/mgmt/shared/authn/login -d...

kali-linux-docker

Docker Oficial de Kali Linux Esta imagen Docker de Kali Linux proporciona una instalación base mínima de la última versión de la Distribución Rolling de Kali Linux. No se añaden herramientas a esta imagen, por lo que necesitarás instalarlas tú mismo. Para más detalles sobre los metapaquetes de Ka...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

winevt_logs_analysis

Winevt logs analysis Remote connections Simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions. You should pip install -r requirements.txt so the script can work and parse some of...

Cl0neMast3r

Cl0neMast3r 关于： Cl0neMast3r 是一个 Python 脚本，旨在让你的生活更轻松。 现在你可以轻松地从 GitHub 选择你喜欢的工具，并通过一次点击将其安装到你的系统上。 更好的是，你可以确保你拥有最新版本的工具。 所有这些以及更多功能，你都可以通过 Clone Master 实现。 Clone Master 主要为渗透测试人员 和漏洞猎人 打造 😉 截图： 查看所有截图 选项： Cl0neMast3r 为你提供了许多选项：...

cuckooautoinstall

Sobre CuckooAutoinstall Cuckoo Sandbox . script de autoinstalación ¿Qué es Cuckoo Sandbox? Cuckoo Sandbox es un sistema de análisis de malware. ¿Qué significa eso? Significa que puedes lanzarle cualquier archivo sospechoso y obtener un informe con detalles sobre el comportamiento del archivo dent...

printix-CVE-2022-29551

CVE-2022-29551 Lanzamiento Simple | Versión para imprimir Una vulnerabilidad de "Método o función peligrosa expuesta" en PrintixService.exe, en "Printix Secure Cloud Print Management" de Kofax Printix, versión 1.3.1156.0 y anteriores, permite a un atacante local o remoto la capacidad de instalar...

Kentico - Installer Privilege Escalation

Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 are susceptible to a privilege escalation attack. An attacker can obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard. id: CVE-2017-17736 info: name: Kentico - Installer...

MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting

paintballrefjosh/MaNGOSWebV4 4.0.8 contains a reflected XSS caused by unsanitized input in install/index.php step parameter, letting attackers execute arbitrary scripts in the victim's browser, exploit requires victim to visit a maliciously crafted URL id: CVE-2017-6478 info: name: MaNGOSWebV4...

osCommerce 2.3.4.1 - Remote Code Execution

osCommerce Online Merchant 2.3.4.1 contains a remote code execution caused by insecure default configuration and missing authentication in the installer workflow, letting unauthenticated attackers execute arbitrary PHP code via install4.php, exploit requires accessible /install/ directory after...

DotNetNuke 07.04.00 - Administration Authentication Bypass

The installation wizard in DotNetNuke DNN before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx. id: CVE-2015-2794 info: name: DotNetNuke 07.04.00 - Administration Authentication Bypass author: 0xr2r severity...