sparta

SPARTA v2.0 http://sparta.secforce.com Authors: SECFORCE Antonio Quina @st3r30byt3 Leonidas Stavliotis @lstavliotis Description SPARTA is a python GUI application which simplifies network infrastructure penetration testing by aiding the penetration tester in the scanning and enumeration phase. It...

CVE-2021-37748

Exploits for the CVE-2021-37748 Full writeup: https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/...

xencrypt

Xencrypt Cifrador de PowerShell v 1.0 Autores Xentropy @SamuelAnttila SecForce @SECFORCELTD Si quieres leer sobre el diseño detrás de esta herramienta y cómo hacer tu propio cifrador, hay un artículo que escribí al respecto aquí: Escribe un cifrador en cualquier idioma Nota No seas un script...

WordPress Plugin Time Capsule 1.21.16 - Authentication Bypass

Exploit Title: Wordpress Time Capsule Plugin 1.21.16 - Authentication Bypass Date: 2020-01-16 Exploit Author: B. Canavate Vendor Homepage: https://wptimecapsule.com/ Software Link: https://wptimecapsule.com/ Version: Wordpress Time Capsule Plugin 1.21.16 Tested on: LAMP stack with most recent...

Apache mod_proxy Proof Of Concept

!/usr/bin/env python import socket import string import getopt, sys knownports = 0,21,22,23,25,53,69,80,110,137,139,443,445,3306,3389,5432,5900,8080 def sendrequesturl, apachetarget, apacheport, internaltarget, internalport, resource: get = "GET " + url + "@" + internaltarget + ":" + internalport...