390 matches found
sane-backends information disclosure vulnerability
sane-backends is a source package that contains the SANE library, which is the backend and network scanning part. A remote information disclosure vulnerability exists in sane-backends. An attacker can exploit the vulnerability to obtain sensitive information or launch other attacks...
vsaudit - VOIP Security Audit Framework
This is an opensource tool to perform attacks to general voip services It allows to scans the whole network or single host to do the gathering phase, then it is able to search for most known vulnerabilities on the founds alive hosts and try to exploit them. Install dependencies To start using...
Cobbler Network Install Detection
Binary data 9768.prm...
CVE-2016-7964
The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to restrict access to private networks. This allows users to scan ports of internal networks via SSRF, such as 10.0.0.1/8, 172.16.0.0/12, and...
Dotclear 2.9.1 SSRF / XSPA
Dotclear 2.9.1 SSRF/XSPA Vulnerability + Software: https://dotclear.org/ + Author: Wiswat Aswamenakul + Affected version: only tested on 2.9.1 previous version might be affected + Platform: tested on Ubuntu 14.04, PHP 5.5.9 + Description Dotclear has a feature to import blog content through RSS...
Using free http proxy IP for the network scanning-vulnerability warning-the black bar safety net
How from free proxy IP, find a vulnerability, here is my definition of discovered vulnerabilities, is because I personally feel that this vulnerability is a technical comparison of the difference, the more likely is the discovery, analysis, and summary. As a Information Security for the novice, b...
Updated CryptXXX Ransomware Big Money Potential
CryptXXX ransomware has received a major overhaul by its authors, putting it on the fast track to unseat Locky as top moneymaker for criminals. Researchers at Proofpoint said that on May 26, cybercriminals released an updated CryptXXX 3.100 version of the ransomware that includes a new StillerX...
PT-2015-3384
Name of the Vulnerable Software and Affected Versions Apache Flex BlazeDS versions 3.0.x through 3.0.0.354170 Apache Flex BlazeDS versions 4.5 through 4.5.1.354169 Apache Flex BlazeDS versions 4.6.2 through 4.6.2.354169 Apache Flex BlazeDS versions 4.7 through 4.7.0.354169 Description The issue...
WakeMeOnLan v1.71 - Turn on computers on your network with Wake-on-LAN packet
This utility allows you to easily turn on one or more computers remotely by sending Wake-on-LAN WOL packet to the remote computers. When your computers are turned on, WakeMeOnLan allows you to scan your network, and collect the MAC addresses of all your computers, and save the computers list into...
Cloud application security: preventing security vulnerabilities-vulnerability warning-the black bar safety net
Currently, cloud-based applications are widely used, and with amazing speed growing. Since cloud-based applications can be accessed through the Internet, and anyone, anywhere can access – therefore, application security becomes particularly important. This is why the creation and management of...
New Variant of Havex Malware Scans for OPC Servers at SCADA Systems
At the beginning of the month, we have reported about the new surge of a Stuxnet-like malware “Havex”, which was previously targeting organizations in the energy sector, had been used to carry out industrial espionage against a number of companies in Europe and compromised over 1,000 European and...
Supermicro IPMI/BMC Cleartext Password Scanner
!/bin/bash Supermicro IPMI/BMC Cleartext Password Scanner v20140622 by 1N3 http://treadstonesecurity.blogspot.ca Usage: sh supermicroscan.sh proxy ABOUT: Supermicro’s implementation of IPMI/BMC allows remote, unauthenticated attackers to request the file PSBlock via port 49152. This plain text...
Localize: Numerous open ports/services
Looks like you have numerous open ports that also show service versions. An attacker can leverage this information when trying an attack. Ports should be filtered and banners should be removed/generalized. nmap -sV www.localize.io Starting Nmap 6.40-2 http://nmap.org at 2014-04-18 11:08 PDT Stats...
MITMer - Automated Man-In-The-Middle Attack Tool
MITMer is a man-in-the-middle and phishing attack tool that steals the victim’s credentials of some web services like Facebook. Dependencies: python2 scapy python2-nfqueue How to: Run it as root. sudo python2 mitmer.py Select a network interface. After scanning the network for available hosts,...
[WakeMeOnLan] Turn on computers on your network with Wake-on-LAN packet
This utility allows you to easily turn on one or more computers remotely by sending Wake-on-LAN WOL packet to the remote computers. When your computers are turned on, WakeMeOnLan allows you to scan your network, and collect the MAC addresses of all your computers, and save the computers list into...
[Zarp v0.1.2] The Python Network Attack Tool
Zarp is a network attack tool centered around the exploitation of local networks. This does not include system exploitation, but rather abusing networking protocols and stacks to take over, infiltrate, and knock out. Sessions can be managed to quickly poison and sniff multiple systems at once,...
Review : GFI LanGuard - Network Security Scanner & Vulnerability Management Tool
I'm a firm believer in multitasking. I tend to work on several things simultaneously; the more monitors I have connected the more things I can do in parallel, and I can bounce back and forth between tasks, given that no one interrupts me. When I find an application that can do more than one thing...
http-robtex-reverse-ip NSE Script
Obtains up to 100 forward DNS names for a target IP address by querying the Robtex service . TEMPORARILY DISABLED due to changes in Robtex's API. See Script Arguments http-robtex-reverse-ip.host IPv4 address of the host to lookup slaxml.debug See the documentation for the slaxml library. http.hos...
Nmap 5.61 TEST2 - IPv6 OS detection Added
Nmap 5.61 TEST2 - IPv6 OS detection Added Nmap Added IPv6 OS detection, CPE, 30 more scripts, and more features in latest release Nmap 5.61 TEST2. Change Log for Nmap 5.61TEST2 Added IPv6 OS detection system! The new system utilizes many tests similar to IPv4, and also some IPv6-specific ones tha...