TDS Protocol Login Request Corruption Fuzzer

This module sends a series of malformed TDS login requests. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TDS Protocol Login Request Corruption Fuzzer', 'Description' = %q This module sends a...

TDS Protocol Login Request Username Fuzzer

This module sends a series of malformed TDS login requests. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TDS Protocol Login Request Username Fuzzer', 'Description' = %q This module sends a...

PsTools in the penetration of little application-vulnerability warning-the black bar safety net

Author:zero soulzerosoul Blog: Recent bad luck, take down a network, Server area all not even outside, no rally socks out, cause penetration of the network within other segments of the time very hard. One of the MSSQL and Web are separated, the server although the take down, but sometimes up to...

BPHolidayLettings SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

BPHolidayLettings 1.0 - Blind SQL Injection

BPHolidayLettings 1.0 - Blind SQL Injection x========================================================================================================================================x | AntiSecuritydotorg |...

BPLawyerCaseDocuments - SQL Injection

BPLawyerCaseDocuments - SQL Injection x========================================================================================================================================x | AntiSecuritydotorg |...

BPHolidayLettings 1.0 Blind SQL Injection

Exploit for unknown platform in category web applications ========================================= BPHolidayLettings 1.0 Blind SQL Injection =========================================...

BPLawyerCaseDocuments SQL Injection

No description provided by source. x========================================================================================================================================x | AntiSecuritydotorg |...

BPLawyerCaseDocuments SQL Injection

Exploit for unknown platform in category web applications =================================== BPLawyerCaseDocuments SQL Injection ====================================...

BPHolidayLettings 1.0 Blind SQL Injection

No description provided by source. x========================================================================================================================================x | AntiSecuritydotorg |...

BPLawyerCaseDocument 1.0 SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

BPHolidayLettings 1.0 - Blind SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

BPLawyerCaseDocuments - SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

The tips provided right lianliankan-vulnerability warning-the black bar safety net

author:4lert Now on the network on the mention of the right methods varied, in fact, simply summarized, is the overflow, the third-party software bugs, social engineering, mention right. And today we want to discuss is the mention of the right to process some of the skills, master these skills ca...

Hack SA under the purview of the idea of adaptation-vulnerability warning-the black bar safety net

Last time already got this station of the SHELL, but the back door has long been K, today inadvertently and got the injection. D detection soon came out gratifying information, the SA permissions, go to the NB inside can list the directory but not the execution, telnet each other 1 4 3 3 can not ...

Modify the packet to get WebShell-vulnerability warning-the black bar safety net

Recorded about this time is how to capture-on change pack-of uploaded-of to get to the WEBSHELL. After careful analysis, this website from either the main station or sub-Station does not exist any injection vulnerability is, of course, this site needless to say use MSSQL Data, and also cannot fin...

Use a low-privileged Oracle database accounts give the OS access permissions-bug warning-the black bar safety net

Author:Mickey These days look at the article called"Penetration: from application down to OS Oracle"of the document,feel quite interesting,the document probably means that is,if the ORACLE service is using the administrator account to start,as long as you have a have resource and connect privileg...

Crack the MSSQL SA password-vulnerability warning-the black bar safety net

The code demonstrates the violence to crack the MSSQL account and password, including the administrator account sa password. Saw today online there is such an article“a SQL Server Sa password stored procedure”: a, the method is violence to crack the MSSQL account and password, including the...

Hack how to Access to access MSSQL Data-vulnerability warning-the black bar safety net

First of all note that, this method have long had, but with time probably in my head quiet for too long, it has been in the oblivion state. Thanks for the Trace information. Often encounter arbitrary File Download vulnerability, the General processing method is to put the database connection file...

SASPCMS 0.9 XSS / SQL Injection / Disclosure

www.BugReport.ir AmnPardaz Security Research Team Title: SASPCMS Multiple Vulnerabilities Vendor: http://www.lgasoft.com Vulnerable Version: 0.9 prior versions also may be affected Exploitation: Remote with browser Fix: N/A - Description: SASPCMS is an ASP Content Management System . SASPCMS witc...