42 matches found
nullscan
Description A modular framework designed to chain and automate security tests. It parses target definitions from the command line and runs corresponding modules and their nullscan-tools afterwards. It can also take hosts and start nmap first in order to perform a basic portscan and run the module...
inter-recon
inter-recon Script to perform automatic initial web and vulnerability recon. It has some checks in case of errors. There is a possibility to skip some checks, to restart them and/or to continue with the last point you stopped. This is because sometimes there are network issues like time limit on...
Masscan Workspace Integrator
Run masscan or import existing -oJ JSON and write open hosts/ports directly into the active workspace database. JSON is captured from stdout via -oJ - — no intermediate files needed. Pair with auxiliary/external/nmap for service/version enrichment. !/usr/bin/env python3 -- coding: utf-8 -- """Run...
Nmap Workspace Integrator
Run nmap or import existing XML and write structured hosts/ports/OS/service versions directly into the active workspace database. XML is captured from stdout via -oX - — no intermediate files needed. !/usr/bin/env python3 -- coding: utf-8 -- """Run nmap and persist hosts/services into the workspa...
TCP Port Scanner
Scan TCP ports on one or more hosts using parallel connect probes. !/usr/bin/env python3 -- coding: utf-8 -- """Parallel TCP connect port scanner for authorized engagements.""" from future import annotations import ipaddress import socket from concurrent.futures import ThreadPoolExecutor,...
EUVD-2002-1757
Malware in sbrugna...
Pywirt - Python Windows Incident Response Toolkit
With this application, it is aimed to accelerate the incident response processes by collecting information in windows operating systems via winrm. Features Information is collected in the following contents. IP Configuration Users Groups Tasks Services Task Scheduler Registry Control Active TCP &...
Tetanus - Mythic C2 Agent Targeting Linux And Windows Hosts Written In Rust
Tetanus is a Windows and Linux C2 agent written in rust. Installation To install Tetanus, you will need Mythic set up on a machine. In the Mythic root directory, use mythic-cli to install the agent. payload start tetanus" sudo ./mythic-cli install github https://github.com/MythicAgents/tetanus su...
CVE-2017-20016
A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerability affects unknown code of the component Portscan. The manipulation with an unknown input leads to denial of service. The attack can be initiated remotely. The exploit has bee...
CVE-2017-20016
A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerability affects unknown code of the component Portscan. The manipulation with an unknown input leads to denial of service. The attack can be initiated remotely. The exploit has bee...
Code injection
UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerability affects unknown code of the component Portscan. The manipulation with an unknown input leads to denial of service. The attack can be initiated...
CVE-2017-20016 WEKA INTEREST Security Scanner Portscan memory allocation
A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerability affects unknown code of the component Portscan. The manipulation with an unknown input leads to denial of service. The attack can be initiated remotely. The exploit has bee...
CVE-2017-20016 WEKA INTEREST Security Scanner Portscan memory allocation
A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerability affects unknown code of the component Portscan. The manipulation with an unknown input leads to denial of service. The attack can be initiated remotely. The exploit has bee...
CVE-2017-20016: Memory Allocation with Excessive Size Value
A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerability affects unknown code of the component Portscan. The manipulation with an unknown input leads to denial of service. The attack can be initiated remotely. The exploit has bee...
PT-2022-7889 · Unknown · Weka Interest Security Scanner
Name of the Vulnerable Software and Affected Versions: WEKA INTEREST Security Scanner versions up to 1.8 Description: A vulnerability has been found in the Portscan component, which can be exploited to cause a denial of service. The attack can be initiated remotely and the exploit has been...
WEKA INTEREST Security Scanner Security Vulnerabilities
WEKA INTEREST Security Scanner is a commonly used software for data exploration by the University of Waikato team in New Zealand. A security vulnerability exists in WEKA INTEREST Security Scanner version 1.8 Portscan, which results in a denial of service when unknown input is used in certain...
Post-Exploitation Framework for Linux Written in Bash: Orc
Orc is a simple post-exploitation written in bash. I wrote this because I myself needed a more featureful post-exploitation toolkit for Linux. It’s part of a larger bundle of scripts and tools, but I’ll add those as I write and re-write them. It takes the form of an ENV script, so load orc into a...
SSRFmap - Automatic SSRF Fuzzer And Exploitation Tool
SSRF are often used to leverage actions on other services, this framework aims to find and exploit these services easily. SSRFmap takes a Burp request file as input and a parameter to fuzz. Server Side Request Forgery or SSRF is a vulnerability in which an attacker forces a server to perform...
Sprecher Automation SPRECON-E-C / PU-2433 Traversal / DoS
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Sprecher Automation SPRECON-E-C, PU-2433 vulnerable version: 8.49 most vulnerabilities, see "Vulnerable version" for details fixed...
Lithium Forum - (Compose Message) SSRF Vulnerability
Document Title: =============== Lithium Forum - Compose Message SSRF Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2030 Release Date: ============= 2017-02-20 Vulnerability Laboratory ID VL-ID: ==================================== 2030...