sparta

SPARTA v2.0 http://sparta.secforce.com Authors: SECFORCE Antonio Quina @st3r30byt3 Leonidas Stavliotis @lstavliotis Description SPARTA is a python GUI application which simplifies network infrastructure penetration testing by aiding the penetration tester in the scanning and enumeration phase. It...

CVE-2021-37748

CVE-2021-37748 用のエクスプロイト 詳細な解説: https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/...

xencrypt

Xencrypt PowerShell crypter v 1.0 作者 Xentropy @SamuelAnttila SecForce @SECFORCELTD このツールの設計思想や独自のcrypterの作り方について知りたい方は、私が書いた記事があります： Write a crypter in any language 注意...

WordPress Plugin Time Capsule 1.21.16 - Authentication Bypass

Exploit Title: Wordpress Time Capsule Plugin 1.21.16 - Authentication Bypass Date: 2020-01-16 Exploit Author: B. Canavate Vendor Homepage: https://wptimecapsule.com/ Software Link: https://wptimecapsule.com/ Version: Wordpress Time Capsule Plugin 1.21.16 Tested on: LAMP stack with most recent...

Apache mod_proxy Proof Of Concept

!/usr/bin/env python import socket import string import getopt, sys knownports = 0,21,22,23,25,53,69,80,110,137,139,443,445,3306,3389,5432,5900,8080 def sendrequesturl, apachetarget, apacheport, internaltarget, internalport, resource: get = "GET " + url + "@" + internaltarget + ":" + internalport...