BlackArch Linux v2014.10.07 - Lightweight expansion to Arch Linux for pentesters and security researchers

BlackArch Linux ISOs including more than 1000 tools and lot's of improvements. Also, armv6h and armv7h repositories are filled with more than 1050 tools. A short ChangeLog: - tool fix: beef - fixed pam issues - added services and login.defs file - removed kde/openbox and i3-debug menu items...

FtpXQ FTP Server 3.0 - Remote Denial of Service Exploit (auth)

No description provided by source. !/usr/bin/python print print Iranian Pentesters Home print Www.Pentesters.Ir print PLATEN - H.jafari - print FtpXQ FTP Server 3.0 Remote Denial Of Service Exploit print author: PLATEN print E-mail && blog: print hjafari.blogspot.com print...

BlackArch Linux v2014.04.21 - Lightweight expansion to Arch Linux for pentesters and security researchers

BlackArch Linux is an Arch-based GNU/Linux distribution for pentesters and security researchers. The BlackArch package repository is compatible with existing Arch installs. Changelog v2014.04.21 added new system packages: mplayer, abs, ack, bc, bridge-utils, darkhttpd, flashplugin, inotify-tools,...

[MAC Address Scanner v1.5] Desktop Tool to Find MAC address of Remote Computers on Local Network

MAC Address Scanner is the free desktop tool to remotely scan and find MAC Address of all systems on your local network. It allows you to scan either a single host or range of hosts at a time. During the scan, it displays the current status for each host. After the completion, you can generate...

Python tools for Pentesters

If you are involved in vulnerability research, reverse engineering or penetration testing, I suggest to try out the Python programming language. It has a rich set of useful libraries and programs. This page lists some of them. Most of the listed tools are written in Python, others are just Python...

[MAC Address Scanner] Desktop Tool to Find MAC address of Remote Computers on Local Network

MAC Address Scanner is the free desktop tool to remotely scan and find MAC Address of all systems on your local network. It allows you to scan either a single host or range of hosts at a time. During the scan, it displays the current status for each host. After the completion, you can generate...

Ultimate Directory Traversal Attack Cheat Sheet

Document Title: =============== Ultimate Directory Traversal Attack Cheat Sheet References: =========== Download: http://www.vulnerability-lab.com/resources/documents/587.txt Release Date: ============= 2012-05-29 Vulnerability Laboratory ID VL-ID: ==================================== 587 Discove...

Ultimate Directory Traversal Attack Cheat Sheet

Document Title: =============== Ultimate Directory Traversal Attack Cheat Sheet References: =========== Download: https://www.vulnerability-lab.com/resources/documents/587.txt Release Date: ============= 2012-05-28 Vulnerability Laboratory ID VL-ID: ==================================== 587...

Passive DNS Network Mapper: dnsmap

Passive DNS Network Mapper dnsmap is mainly meant to be used by pentesters during the information gathering/enumeration phase of infrastructure security assessments . During the enumeration stage, the security consultant would typically discover the target company’s IP netblocks, domain names,...

Ultimate Cross Site Scripting Attack Cheat Sheet

Document Title: =============== Ultimate Cross Site Scripting Attack Cheat Sheet References: =========== Download: https://www.vulnerability-lab.com/resources/documents/531.txt Release Date: ============= 2012-04-21 Vulnerability Laboratory ID VL-ID: ==================================== 531...

FCKeditor all version File Upload-vulnerability warning-the black bar safety net

In The Name Of GOD + Title:FCKeditor all versian Arbitrary File Upload Vulnerability + Date: 2 0 1 1 + script:http://sourceforge. net/projects/fckeditor/ + Author : pentesters. ir + Website : WwW.PenTesters.IR ------------------- 1. create a. htaccess file: code: FilesMatch “php.gif” SetHandler...

Hash Code Cracker V 1.2 Released ~ Password Cracking from BreakTheSecurity

Hash Code Cracker V 1.2 Released Password Cracking from BreakTheSecurity BreakTheSecurity is proud to release the Hash Code Cracker Version 1.2. Our latest release supports Online Cracking function. Description: This password cracker is developed for PenTesters and Ethical hackers. Please Use thi...

PHP-Nuke 8.3 - 'upload.php' Arbitrary File Upload (1)

source: https://www.securityfocus.com/bid/48257/info Phpnuke is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code and run it in the context of the webserver process...

PHP-Nuke 8.3 - upload.php Arbitrary File Upload (2)

PHP-Nuke 8.3 - upload.php Arbitrary File Upload 2 source: https://www.securityfocus.com/bid/48257/info Phpnuke is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code a...

PHP-Nuke 8.3 - upload.php Arbitrary File Upload (1)

PHP-Nuke 8.3 - upload.php Arbitrary File Upload 1 source: https://www.securityfocus.com/bid/48257/info Phpnuke is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code a...

JetAudio 8.0.7.1000 DLL Hijacking Exploit

Exploit for windows platform in category local exploits Title: JetAudio 8.0.7.1000 DLL Hijacking Exploit Author: 4n0nym0us Arash Sa'adatfar Developer: Cowon Version:8.0.7.1000 Vulnerable extensions: mp3,wav,mp4,mpg,swf Vulnerable Dlls: mfc90enu.dll,mfc90loc.dll,wnaspi32.dll Tested On: Windows XP...

SMF 2.0 RC5 Shell Upload

Title : SMF 2.0 RC5 Remote Shell Upload Exploit Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote Shell Upload Tested on : Windows XP sp3 FR » In The name of Allah Go0Gle D0rk : "Power...

Pre Online Tests Generator Pro SQL Injection

In The Name Of GOD + Exploit Title: Pre Online Tests Generator Pro SQL Injection Vulnerability + Date: 2010-11-13 + Author : Cru3l.b0y + Software Link: http://www.preproject.com/preexampro.asp + Price : 95.00$ + Contact : [email protected] + Website : WwW.PenTesters.IR + Greeting: Behzad, Ahmad...

XM Easy Personal FTP 5.8 - Denial of Service

XM Easy Personal FTP 5.8 - Denial of Service !/usr/bin/python print "\n" print " Iranian Pentesters Home " print " Www.Pentesters.Ir " print " PLATEN - H.jafari - " print " XM Easy Personal FTP Server 5.8 Remote Denial Of Service " print " http://www.dxm2008.com/data/ftpserversetup.exe " print "...

XM Easy Personal FTP 5.8 DoS

No description provided by source. !/usr/bin/python print "\n" print " Iranian Pentesters Home " print " Www.Pentesters.Ir " print " PLATEN - H.jafari - " print " XM Easy Personal FTP Server 5.8 Remote Denial Of Service " print " http://www.dxm2008.com/data/ftpserversetup.exe " print " author:...