astrospeak.com XSS vulnerability

Vulnerable URL:...

FBZX 2.10 - Local Stack Buffer Overflow

FBZX 2.10 - Local Stack Buffer Overflow Exploit Author: Juan Sacco - http://www.exploitpack.com Program: fbzx - ZX Spectrum Emulator for X Tested on: GNU/Linux - Kali Linux 2.0 x86 Description: FBZX v2.10 and prior is prone to a stack-based buffer overflow vulnerability because the application...

FBZX 2.10 - Local Stack Buffer Overflow

Exploit Author: Juan Sacco - http://www.exploitpack.com Program: fbzx - ZX Spectrum Emulator for X Tested on: GNU/Linux - Kali Linux 2.0 x86 Description: FBZX v2.10 and prior is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks ...

Joomla com_ebcontent SQL Injection Vulnerability

Exploit for php platform in category web applications Joomla comebcontent SQL Injection Vulnerability Test on: kali linux Hompage: dont have Version: all version Dork: inurl:option=comebcontent Vuln: http://site.com/index.php?option=comebcontent&view=article&tmpl=component&id=sql...

Social Engineering — Free Online Training for Hackers

For most of us Hacking is Technological in Nature. But, we usually forget the most important element of hacking that makes a successful hack from 10% to over 90%... ...The Human Element. And here the Social Engineering comes in. Social Engineering deals with non-technical kind of intrusion and...

Kaboozu CMS Shell Upload

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / = 1 Kasımda oylar MHP'ye, ona göre.. = / / / Kaboozu CMS x.x.x - Remote Shell Upload Vulnerability 0day My + Discovered by: KnocKout Contact :...

Linux/x86-64 - Bindshell 31173 port with Password Shellcode (92 bytes)

/ ;Title: bindshell with password in 92 bytes ;Author: David Velázquez a.k.a d4sh&r ;Contact: https://mx.linkedin.com/in/d4v1dvc ;Description: x64 Linux bind TCP port shellcode on port 31173 with 4 bytes as password in 94 bytes ;Tested On: Linux kali64 3.18.0-kali3-amd64 x8664 GNU/Linux ;Compile ...

Kallithea 0.2.9 - 'came_from' HTTP Response Splitting

Kallithea 0.2.9 camefrom HTTP Response Splitting Vulnerability Vendor: Kallithea Product web page: https://www.kallithea-scm.org Version affected: 0.2.9 and 0.2.2 Summary: Kallithea, a member project of Software Freedom Conservancy, is a GPLv3'd, Free Software source code management system that...

WordPress mTheme-Unus Local File Inclusion Exploit

WordPress mTheme-Unus theme versions prior to 2.3 suffer from a local file inclusion vulnerability. Exploit Title: Wordpress themes mTheme-Unus LFI Vulnerability Date: 2015-09-27 Exploit Author: FullSecurity.org Google Dork: ilnurl:/wp-content/themes/mTheme-Unus/ Vendor Homepage:...

WordPress mTheme-Unus Local File Inclusion

Exploit Title: Wordpress themes mTheme-Unus LFI Vulnerability Date: 2015-09-27 Exploit Author: FullSecurity.org Google Dork: ilnurl:/wp-content/themes/mTheme-Unus/ Vendor Homepage: https://wordpress.org/ Tested on : Kali Linux Description : Wordpress Themes mTheme-Unus not filtering data so we ca...

Wordpress Better-wp-security Plugin Remote Code Execution Vulnerability

Exploit for php platform in category web applications +++++++++++++++++++++ | + Exploit Title: Wordpress Better-wp-security Plugin Remote Code Execution | + Exploit Author: Tonel Team | + Vendor Homepage : https://wordpress.org/plugins/better-wp-security/ | + Download Link :...

Blackhat 2015 Arsenal

Last month at Blackhat Arsenal 2015, Pete and I @willis presented on Serpico. This was our second time at Arsenal. Yet again, awesome people, great venue, and overall a highlight for me of BH/DC/LV. We got some excellent feedback on the project, so thank you to anyone who stopped by. Last year I...

Sn1per - Automated Pentest Recon Scanner

Sn1per is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. Features Automatically collects basic recon ie. whois, ping, DNS, etc. Automatically launches Google hacking queries against a target domain Automatically enumerates open ports...

Rogue Wi-Fi Access Point: 3vilTwinAttacker

This tool create an rogue Wi-Fi access point , purporting to provide wireless Internet services, but snooping on the traffic 3vilTwinAttacker is security tool that provide the Rogue access point to Man-In-The-Middle and network attacks. purporting to provide wireless Internet services, but snoopi...

BSIGN 0.4.5 - Buffer Overflow Exploit

Exploit for linux platform in category local exploits Exploit Author: Juan Sacco - http://www.exploitpack.com Program: bsign - embed and verify secure hashes and digital signatures Tested on: GNU/Linux - Kali Linux 2.0 Description: BSIGN v0.4.5 and prior is prone to a stack-based buffer overflow...

WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload

Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload Date: 2015/8/29 Exploit Author: Arash Khazaei Vendor Homepage: https://wordpress.org/plugins/wp-responsive-thumbnail-slider/ Software Link: https://downloads.wordpress.org/plugin/wp-responsive-thumbnail-slider.zip Version:...

NetRipper - Smart Traffic Sniffing for Penetration Testers

NetRipper is a post exploitation tool targeting Windows systems which uses API hooking in order to intercept network traffic and encryption related functions from a low privileged user, being able to capture both plain-text traffic and encrypted traffic before encryption/after decryption. NetRipp...

FENIX 0.92 Buffer Overflow

Exploit Author: Juan Sacco - http://www.exploitpack.com Program: fenix - development environment for making 2D games Tested on: GNU/Linux - Kali Linux 2.0 Description: FENIX v0.92 and prior is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate...

FENIX 0.92 - Local Buffer Overflow

Exploit Author: Juan Sacco - http://www.exploitpack.com Program: fenix - development environment for making 2D games Tested on: GNU/Linux - Kali Linux 2.0 Description: FENIX v0.92 and prior is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate...

BSIGN 0.4.5 - Local Buffer Overflow

BSIGN 0.4.5 - Local Buffer Overflow Exploit Author: Juan Sacco - http://www.exploitpack.com Program: bsign - embed and verify secure hashes and digital signatures Tested on: GNU/Linux - Kali Linux 2.0 Description: BSIGN v0.4.5 and prior is prone to a stack-based buffer overflow vulnerability...