SSOh-No

SSOh-No This tool is designed to enumerate users, password spray and perform brute force attacks against any organisation that utilises Azure AD or O365. Generally, this endpoint provides extremely verbose errors which can be leveraged to enumerate users and validate their passwords via brute...

VPN provider 'Proxy.sh' sniffed the traffic of US based server to Catch Hackers

The very first question we always try to figure before choosing a trusted VPN service - Can't a VPN provider just look at my traffic all they want and see what I'm doing? Well, a reputated VPN provider today answers the Question and admitted that they sniffed the traffic on one of its United...

Abyss password bruteforcing

Unlimited number of password attempt on 9999 port with no logging...

cpmdaemon.txt

/ ---------------------------------- cpmdaemon password changer script ---------------------------------- This is a s0d advisory ... Wellcome to our world. You can find this advisory on www.s0d.org on the advisories section. Author: + Enrique Alfonso Sanchez Montellano El Nahual Shouts: + 0x90,...

RedHat Linux 5.2 i3866.0 - No Logging

RedHat Linux 5.2 i3866.0 - No Logging source: https://www.securityfocus.com/bid/320/info A vulnerability in PAM allows local malicious users to brute force passwords via the su command without any logging of their activity. su is a command that allows users to change identifies by supplying a...

RedHat Linux 5.2 i386/6.0 - No Logging

source: https://www.securityfocus.com/bid/320/info A vulnerability in PAM allows local malicious users to brute force passwords via the su command without any logging of their activity. su is a command that allows users to change identifies by supplying a password. If the password is correct su...