WebNMS Framework 5.2 SP1 Traversal / Weak Obfuscation / User Impersonation

Multiple vulnerabilities in WebNMS Framework Server 5.2 and 5.2 SP1 Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 04/07/2016 / Last updated: 08/08/2016 Background on the affected...

Repeated Character Conversion Obfuscation

Although various security products provide coverage against many web vulnerabilities, Metasploit exploits could potentially bypass these security products by using JavaScript obfuscation techniques. An example of such a technique is the repeated character conversion obfuscation. Such techniques...

The Social-Engineer Toolkit v1.5 Released

The Social-Engineer Toolkit v1.5 Released The Social Engineering Toolkit SET is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It's main purpose is to augment and simulate social-engineering attacks and allow the tester to...