Joomla! Component Jw_allVideos - Arbitrary File Retrieval

A directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos JwallVideos plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ modified dot dot in the file parameter. id: CVE-2010-0696 info: name: Joomla! Component...

WordPress Simple Job Board <2.9.4 - Local File Inclusion

WordPress Simple Job Board prior to version 2.9.4 is vulnerable to arbitrary file retrieval vulnerabilities because it does not validate the sjbfile parameter when viewing a resume, allowing an authenticated user with the downloadresume capability such as HR users to download arbitrary files from...

Jira Server Pre-Auth - Arbitrary File Retrieval (WEB-INF, META-INF)

The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check. id: CVE-2020-29453 info: name: Jira Server Pre-Auth - Arbitrary File...

Joomla! Component simpledownload <=0.9.5 - Arbitrary File Retrieval

A directory traversal vulnerability in the SimpleDownload comsimpledownload component before 0.9.6 for Joomla! allows remote attackers to retrieve arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-2122 info: name: Joomla! Component simpledownload =0.9.5 -...

WordPress Email Subscribers & Newsletters <4.2.3 - Arbitrary File Retrieval

WordPress Email Subscribers & Newsletters plugin before 4.2.3 is susceptible to arbitrary file retrieval via a flaw that allows unauthenticated file download and user information disclosure. An attacker can obtain sensitive information, modify data, and/or execute unauthorized administrative...

androrat

androrat Remote Administration Tool for Android Androrat is a client/server application developed in Java Android for the client side and in Java/Swing for the Server. The name Androrat is a mix of Android and RAT Remote Access Tool. It has been developed in a team of 4 for a university project. ...

wifi-password

wifi-password Obtén rápidamente tu contraseña WiFi y, si es necesario, genera un código QR de tu WiFi para que los teléfonos puedan conectarse fácilmente. Funciona en macOS , Linux y Windows Instalación Instalar usando pip root@kitploit: $ python3 -m pip install --user wifi-password Instalar usan...

wifi-password

wifi-password Quickly fetch your WiFi password and if needed, generate a QR code of your WiFi to allow phones to easily connect. Works on macOS and Linux , Windows Installation Install using pip root@kitploit: $ python3 -m pip install --user wifi-password Install using git root@kitploit: $ git...

linux_screenshot_xwindows

Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...

wcw-cyberring-pav-decryptor

WCW CyberRing PAV 解密器 对一个1999年专有视频DRM系统的密码分析，通过静态二进制分析和已知明文攻击，恢复了51分钟丢失的媒体内容。 来自恢复的"CyberRing"比赛的一帧。WCW摔角手在蓝幕前拍摄，然后合成到带有火焰效果的CGI竞技场中。这就是1999年互动娱乐的样子。 背景 WCW Internet Powerdisk 是1999年随 WCW 杂志分发的一张促销CD-ROM。它包含了61个视频片段（比赛精彩片段、摔角手简介、节目开场），这些片段由一个名为 PAVENCRYPT 的专有系统加密，该系统由一家名为 UIT 的公司开发。 播放需要捆绑的 ULI...

gdog

Gdog A stealthy Python based Windows backdoor that uses Gmail as a command and control server This project was inspired by the gcathttps://github.com/byt3bl33d3r/gcat from byt3bl33d3r. Requirements Python 2.x PyCrypto module WMI module Enum34 module Netifaces module Features Encrypted...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

gOSINT

gOSINT Codacy Badge OSINT Swiss Army Knife in Go Take a look at the develop branch for more updates. Introduction gOSINT is a multiplatform OSINT Swiss army knife in Golang. If you want, feel free to contribute and/or leave a feedback! Like my project? Please consider donation : What gOSINT can d...

CVE-2024-24919

Exploit POC de Checkpoint con fines de prueba para recuperar archivos sensibles de Checkpoint basado en este artículo: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/ No soy responsable de ningún uso indebido de este script; la intención aquí es que los defensores prueben...

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

WhoamiAlternatives

Alternatives to whoami whoami の代替手段 whoami.exe やそれに類するバイナリを呼び出さずに現在のユーザー名を取得するための実験です。 方法 1: PRTLUSERPROCESSPARAMETERS PEB 構造体から環境変数を取得し、その中からユーザー名を解析します。 NtQueryInformationProcess 関数は、PEB ベースアドレスへのポインタを含む "PROCESSBASICINFORMATION" 構造体を返します。 PEB 構造体には、RTLUSERPROCESSPARAMETERS 構造体へのポインタ...

InSpy

InSpy ⛔ OBSOLETO. Este repositorio ya no se mantiene. Introducción InSpy es una herramienta de enumeración de LinkedIn basada en Python. La versión 3.0 introduce la automatización de la recuperación de dominios y correos electrónicos, además de cabeceras aleatorias y soporte de salida XML...

SMBCrunch

SMBCrunch Una de las tareas que más tiempo consume para un red teamer es sumergirse en sistemas de archivos y recursos compartidos, intentando identificar cualquier información potencialmente sensible. SMBCrunch permite a un red teamer identificar rápidamente recursos compartidos de archivos de...

modsecurity-backdoor

ModSecurity Backdoor Description This is a proof-of-concept of malicious software running inside of ModSecurity WAF. Software has two main functions: Retrieving content of files. Running commands and retrieving output remote shell. Additionaly, it includes these functions: Dynamic setting of...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...