BeRoot - Windows Privilege Escalation Tool

BeRoots is a post exploitation tool to check commun Windows misconfigurations to find a way to escalate our privilege. A compiled version is available here. It will be added to the pupy project as a post exploitation module so it will be executed all in memory without touching the disk. Except on...

Pentesting Active Directory Environments: CrackMapExec

Pentesting Active Directory Environments: CrackMapExec CrackMapExec a.k.a CME is a post-exploitation tool that helps automate assessing the security of large Active Directory networks. Built with stealth in mind, CME follows the concept of “Living off the Land”: abusing built-in Active Directory...

The vulnerability of the iOS operating system allows a hacker to bypass the code access procedure and unlock the device.

The vulnerability of the SpringBoard component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious individual to bypass the code access procedure and unlock the device using uncertain vectors...

mongoaudit - A Powerful MongoDB Auditing and Pentesting Tool

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing with pip This is the recommended installation method in case you have python and pip . pip install mongoaudit Alternative installer Use this if and only...

MongoDB Security Audit: mongoaudit

MongoDB Security Audit mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. It is widely known that there are quite a few holes in MongoDB’s default configuration settings. This fact, combined with abundant lazy syst...

CVE-2016-3017

IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations...

CVE-2016-3017

IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations...

CVE-2016-3017

IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations...

Information disclosure

IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations...

CVE-2016-3017

IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, allow attackers to circumvent restrictions on the execution of JavaScript APIs.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, are related to security configuration errors. Exploiting these vulnerabilities can allow a malicious actor to bypas...

The vulnerability of the Microsoft Windows operating system, which allows a perpetrator to bypass the security mechanisms for secure downloads

The vulnerability of the Microsoft Windows operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious individual to bypass the security mechanisms for secure loading by using administrative privileges to install the necessary policies...

Onion Services Security Scan: OnionScan

OnionScan is a free and open source tool for investigating the Dark Web. For all the amazing technological innovations in the anonymity and privacy space, there is always a constant threat that has no effective technological patch – human error. Whether it is operational security leaks or softwar...

Climber - Check UNIX/Linux Systems For Privilege Escalation

Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections over...

The vulnerability of the Windows operating system, which allows a hacker to gain access to user accounts

The vulnerability of the Netlogon service in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain access to user accounts due to configuration errors in the domain controller...

Hackers Can Abuse SAP Apps Connected to SCADA

Much in the same way the Target hackers used a HVAC management system to catapult onto the corporate network, attackers focused on oil and gas and other critical industries may be finding similar openings via enterprise applications such as SAP. Researchers from ERPScan, during last week’s Black...

ssl-enum-ciphers NSE Script

This script repeatedly initiates SSLv3/TLS connections, each time trying a new cipher or compressor while recording whether a host accepts or rejects it. The end result is a list of all the ciphersuites and compressors that a server accepts. Each ciphersuite is shown with a letter grade A through...

The vulnerability of the iOS operating system allows a hacker to replace the content of web pages.

The vulnerability of the Safari browser on the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to replace the content of web pages by using the “open window” button on the website...

The vulnerability of the iOS operating system allows a hacker to replace the actual clicks with clicking on URL links.

The vulnerability of the WebKit component of the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to substitute actual clicks on URL links with clicks on specially crafted web pages...

The vulnerability of the Adobe Reader DC PDF viewer program, which allows a hacker to circumvent access restrictions

The vulnerability of the Adobe Reader DC PDF viewer program is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass restrictions on access to the JavaScript API...