WiFiPhisher — Automated Phishing Attacks Against Wi-Fi Networks

A Greek security researcher, named George Chatzisofroniou, has developed a WiFi social engineering tool that is designed to steal credentials from users of secure Wi-Fi networks. The tool, dubbed WiFiPhisher, has been released on the software development website GitHub on Sunday and is freely...

ZTE-and-TP-Link-RomPager

Date: 10-05-2014 Server Version: RomPager/4.07 UPnP/1.0 Tested Routers: ZTE ZXV10 W300 TP-Link TD-W8901G TP-Link TD-W8101G TP-Link TD-8840G Firmware: FwVer:3.11.2.175TC3086 HwVer:T14.F75.0 Tested on: Kali Linux x86 !/usr/bin/env python -- coding: utf-8 -- Exploit Title: ZTE and TP-Link RomPager D...

Oxwall-1.7.0

Oxwall suffers from an authenticated arbitrary PHP code execution. The vulnerability is caused due to the improper verification of uploaded files in '/admin/settings/user' script thru the 'avatar' and 'bigAvatar' POST parameters. This can be exploited to execute arbitrary PHP code by uploading a...

WordPress Sexy Squeeze Pages Cross Site Scripting

WordPress Sexy Squeeze Pages Plugin / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Software info |App. : WordPress Sexy Squeeze Pages Plugin |Software: http://instasqueeze.com/jv/ |Vulnerability Style : Cross Site Scripting |Date : "26.11.2014"...

WordPress Html5 Mp3 Player Full Path Disclosure

WordPress - Html5 Mp3 Player with Playlist Plugin / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Software info |App. : WordPress - html5-mp3-player-with-playlist Plugin |Software: https://wordpress.org/plugins/html5-mp3-player-with-playlist/...

Videos Tube 2.0 SQL Injection / XSS / Shell Upload

Videos Tube 2.0 / || / / / KnocKout, Septemb0x , BARCOD3 , UnDeRTaKeR / /\ /\ \ \ \ | / \ / Turkey / \ | \ \ / // / \ / / / / Software info |Web App. : Videos Tube |Price : FREE |Version : 2.0, updated the lastest version. |Software: http://www.phpscriptlerim.com/ucretsiz/videos-tube.html...

Windows OLE - Remote Code Execution "Sandworm" Exploit (MS14-060)

No description provided by source. !/usr/bin/python Windows OLE RCE Exploit MS14-060 CVE-2014-4114 – Sandworm Author: Mike Czumak Tv3rn1x - @SecuritySift Written: 10/21/2014 Tested Platforms: Windows 7 SP1 w/ exploit script run on Kali Linux You are free to reuse this code in part or in whole wit...

Aireplay-ng 1.2 beta3 - "tcp_test" Length Parameter Stack Overflow

No description provided by source. / Exploit Title: Aireplay "tcptest" Length Parameter Inconsistency Date: 10/3/2014 Exploit Author: Nick Sampanis Vendor Homepage: http://www.aircrack-ng.org/ Version: Aireplay-ng 1.2 beta3 Tested on: Kali Linux 1.0.9 x64 CVE : CVE-2014-8322 Description: Affected...

Mouse Media Script 1.6 Cross Site Scripting

Exploit Title: Mouse Media Script Stored XSS Vulnerability Google Dork: "is your best source of fun." inurl:/view/popular Date: 04-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.6 Software Link: http://codecanyon.net/item/mouse-media-script/7773254 Software Test Link: http://media.nisgeo.co...

Let the top of the Bash broken shell vulnerability is no longer difficult to understand under-the vulnerability warning-the black bar safety net

On the security of popular science: let the top of the Bash broken shell vulnerability is no longer difficult to understand onwe describe a lot of the basics, now it's time for us to build an environment of actual combat. Required environment description Virtual machine: Recommended to use...

"Aircrack-ng 1.2 Beta 3" multiple vulnerabilities

"Aircrack-ng 1.2 Beta 3" multiple vulnerabilities Description: -------------------------------- Four vulnerabilities exist on aircrack-ng = 1.2 Beta 3 which allow remote/local code execution, privilege escalation and denial of service. Specifically, the following vulnerabilities were identified: ...

Microsoft Windows - OLE Remote Code Execution Sandworm (MS14-060)

Microsoft Windows - OLE Remote Code Execution Sandworm MS14-060 !/usr/bin/python Windows OLE RCE Exploit MS14-060 CVE-2014-4114 – Sandworm Author: Mike Czumak Tv3rn1x - @SecuritySift Written: 10/21/2014 Tested Platforms: Windows 7 SP1 w/ exploit script run on Kali Linux You are free to reuse this...

Aireplay-ng 1.2 beta3 - tcp_test Length Stack Overflow

Aireplay-ng 1.2 beta3 - tcptest Length Stack Overflow / Exploit Title: Aireplay "tcptest" Length Parameter Inconsistency Date: 10/3/2014 Exploit Author: Nick Sampanis Vendor Homepage: http://www.aircrack-ng.org/ Version: Aireplay-ng 1.2 beta3 Tested on: Kali Linux 1.0.9 x64 CVE : CVE-2014-8322...

Kali Linux "NetHunter" — Turn Your Android Device into Hacking Weapons

The developers of one of the most advance open source operating system for penetration testing, 'KALI Linux' have announced yesterday the release of a new Kali project, known as NetHunter, that runs on a Google Nexus device. Kali Linux is an open source Debian-based operating system for penetrati...

EGYWEB (Mantrac) <= Remote File Disclosure Exploit

database passwords can be drawn.. Usage Info python exploit.py http://TARGET.COM EGYWEB Mantrac Example and tested on; http://www.deltagroup.com.eg http://www.mantracvostok.ru http://www.mantracghana.com http://www.mantracnigeria.com http://www.mantrackenya.com http://www.mantractanzania.com...

Food Order Portal 8.3 Cross Site Request Forgery

Food Order Portal 8.3 - CSRF Remote Admin Delete PoC My + Author : KnocKout Contactonlymail : [email protected] HomePage : http://Cyber-Warrior.Org - http://h4x0resec.blogspot.com Greetz: DaiMon,furty,BackDoor,EthicalHacker,BARCOD3,SZE©,VolqaN,Septemb0x | Unuttuklarýmýz affola.. Turkey...

PHP Stock Management System 1.02 - Multiple Vulnerabilty

Exploit for php platform in category web applications Exploit Title: PHP Stock Management System 1.02 - Multiple Vulnerabilty Date : 9-9-2014 Author : jsass ​ Vendor Homepage: ​http://www.posnic.com/​ Software Link:​ http://sourceforge.net/projects/stockmanagement/ Version: ​1.02 Tested on: kali...

WordPress ShortCode Plugin 1.1 - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Title : WordPress ShortCode Plugin - Local File Inclusion Vulnerability Severity : High+/Critical Reporters : Mehdi Karout & Christian Galeone Google Dork : inurl:wp/wp-content/force-download.php Plugin Version : 1.1 Plugin Name : Download...

LY Website CMS SQL Injection

Title: LY Website CMS Sql Injection vulnerability + Date: 2014-08-15 + Author: Iran Security Group + Vendor Homepage: http://www.lywebsite.com/ + Tested on: Windows7 & Kali Linux + Vulnerable Files: /pro.php + Dork : inurl:/pro.php?CateId= intext:"Power By LY Website" POC:...

WordPress CK-And-SyntaxHighLighter Arbitrary File Upload

Title: Wordpress ck-and-syntaxhighlighter Plugin RFU vulnerability + Date: 2014-08-12 + Author: Hekt0r + Tested on: Windows7 & Kali Linux + Vendor Homepage: http://wordpress.org/ + Software Link: http://wordpress.org/plugins/ck-and-syntaxhighlighter/ + Dork :...