7644 matches found
Newcomers scratch contact of hacking knowledge learning method-vulnerability warning-the black bar safety net
Today there are many people ask me:“I read your article, but I'm new, Is there any learning method?” My answer is:“of course there Ah, but people and people are different, the method is their summary out, and my previous articles the noun are the same as me in learning based on their own experien...
CVE-2005-1744: Incomplete Cleanup
BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without having to log in again, which may be in violation of newly changed security constraints or role...
CVE-2003-1095
BEA WebLogic Server/Express 7.0 and 7.0.0.1 are affected by CVE-2003-1095 due to improper handling of memory session persistence: authentication data is not cleared on redeploy, potentially allowing re-authenticated access without re-signing in. The issue is described across multiple feeds (NVD/N...
CVE-2003-1095
BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication information when a web application is redeployed, which could allow users of that application to gain access without having to re-authenticate...
CVE-2003-1095: Undefined Security Weakness
BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication information when a web application is redeployed, which could allow users of that application to gain access without having to re-authenticate...
Putty < 0.54 SSH2 Authentication Password Persistence Weakness
Binary data 1999.prm...
Qualcomm Eudora 6.0.3 - MIME Message Nesting Denial of Service
Qualcomm Eudora 6.0.3 - MIME Message Nesting Denial of Service source: https://www.securityfocus.com/bid/10137/info It has been reported that Eudora is prone to a denial of service vulnerability when handling e-mail containing excessive MIME nesting. The problem is known to occur when the...
Yum Package Manager Persistence
This module will run a payload when the package manager is used. This module modifies a yum plugin to launch a binary of choice. grep -F 'enabled=1' /etc/yum/pluginconf.d/ will show what plugins are currently enabled on the system. root persmissions are likely required. Verified on Centos 7.1...
udev Persistence
This module will add a script in /lib/udev/rules.d/ in order to execute a payload written on disk. It'll be executed with root privileges everytime a network interface other than l0 comes up. Execution is triggered through at command, so it must be installed on the target. Module Options msf use...
CVE-2003-1095
BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication information when a web application is redeployed, which could allow users of that application to gain access without having to re-authenticate...
Exploit for a security hole in the pickle module for Python versions <= 2.1.x
""" Exploit for a security hole in the pickle module for Python versions = 2.1.x Pickle is the name of a Python module for object persistence. It can convert arbitrary Python objects into byte streams and back. Though the documentation for Python 1.5.2 read The pickle module doesn't handle code...
CVE-2002-0209
Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing SLB and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the...
CVE-2002-0209: Undefined Security Weakness
Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing SLB and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the...
CVE-2002-0209
Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing SLB and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the...
Windows Persistence Bits Job
This module establishes persistence through a BITS job that downloads and executes a payload. Background Intelligent Transfer Service BITS is a Windows service for transferring files in the background using idle network bandwidth. BITS jobs are persistent and will resume across reboots until...
update-motd.d Persistence
This module will add a script in /etc/update-motd.d/ in order to persist a payload. The payload will be executed with root privileges everytime a user logs in. Root privileges are likely required to write to /etc/update-motd.d/. Verified on Ubuntu 22.04 Module Options msf use...
Windows Persistent Task Scheduler
This module establishes persistence by creating a scheduled task to run a payload. Module Options msf use exploit/windows/persistence/task/scheduler msf undefinedscheduler show actions ...actions... msf undefinedscheduler set ACTION msf undefinedscheduler show options ...show and set options... m...
at(1) Persistence
This module executes a metasploit payload utilizing at1 to execute jobs at a specific time. It should work out of the box with any UNIX-like operating system with atd running. Verified on Kali linux and OSX 13.7.4 Module Options msf use exploit/multi/persistence/at msf undefinedat show actions...
Apache .htaccess Persistence
This module writes a persistence payload into an Apache .htaccess file using modcgi. The .htaccess file itself acts as a CGI shell, executing commands passed via the query string. Inspired by the htshells project by wireghoul. Module Options msf use exploit/linux/persistence/apache/htaccess msf...
SSH Key Persistence
This module will add an SSH key to a specified user or all, to allow remote login via SSH at any time. No payload is required for this module to work. If an SSH key is not provided, a new 4096 bit RSA keypair will be generated. The private key will be stored as loot for later use. Module Options...