CVE-2018-7496

An Information Exposure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The server response header and referrer-policy response header each provide unintended information disclosure...

To delete two headers in HTTP Response

In certain cases, we do not want to parse the HTTP headers to the end Client. NetScaler can do this job by deleting the HTTP header received from the Server. We can use Rewrite feature of NetScaler to achieve this. Configuration AppExperts Rewrite. Step 1 : To remove HTTP header named "Server" CL...

Mixmax: CRLF Injection on https://vpn.mixmax.com

Hey guys, I found that the site https://vpn.mixmax.com is vulnerable to a CRLF Injection. By injecting a Carriage Return and Line Feed character, we are able to make the server issue a set-cookie header. Proof-of-Concept: ==============...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web UI before 2.3.4 Build 85 for Tenable Nessus 5.x allows remote web servers to inject arbitrary web script or HTML via the server header...

CVE-2014-7280

Cross-site scripting XSS vulnerability in the Web UI before 2.3.4 Build 85 for Tenable Nessus 5.x allows remote web servers to inject arbitrary web script or HTML via the server header...

Mail.ru: Version Disclosure (NginX)

POC : url : https://calendar.mail.ru Open up your google chrome browser. Click right mouse button and choose Inspect Element. Put website url in address bar. https://calendar.mail.ru Now choose network option from Inspect Element menu. Response Headers Connection:close...

[EyeWitness] A Rapid Web Application Triage Tool

EyeWitness is a rapid web application triage tool designed to take screenshots of websites, provide some server header info, and identify default credentials if possible. The author would love for EyeWitness to identify more default credentials of various web applications. So as you find devices...

server_header

This plugin GETs the server header and saves the result to the knowledge base. Nothing strange, just do a GET request to the url and save the server headers to the kb. A smarter way to check the server type is with the hmap plugin. Plugin type Infrastructure Options This plugin doesnt have any us...

php_eggs

This plugin tries to find the documented easter eggs that exist in PHP and identify the remote PHP version using the easter egg content. The easter eggs that this plugin verifies are: PHP Credits, Logo, Zend Logo, PHP Logo 2: http://php.net/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000...

dav

This plugin finds WebDAV configuration errors. These errors are generally server configuration errors rather than a web application errors. To check for vulnerabilities of this kind, the plugin will try to PUT a file on a directory that has WebDAV enabled, if the file is uploaded successfully, th...

Joomla Version Scanner

This module scans a Joomla install for information about the underlying operating system and Joomla version. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Joomla Version Scanner', 'Descriptio...

http-waf-fingerprint NSE Script

Tries to detect the presence of a web application firewall and its type and version. This works by sending a number of requests and looking in the responses for known behavior and fingerprints such as Server header, cookies and headers values. Intensive mode works by sending additional WAF specif...

RealNetworks RealPlayer RealPix Server Header Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2008-3361

Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Server header...

CVE-2008-3361

Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Server header...

IntelliTamper 2.07 (server header) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl IntelliTamper 2.07 Remote Code Execution server header By: Koshi Guido Landi finally did it, thought i'd throw one in there. This example assumes you're scanning "http://127.0.0.1" For example, exploit may not work if you were to scan...

IntelliTamper 2.07 (server header) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl IntelliTamper 2.07 Remote Code Execution server header By: Koshi Guido Landi finally did it, thought i'd throw one in there. This example assumes you're scanning "http://127.0.0.1" For example, exploit may not work if you were to scan...

IntelliTamper 2.07 - server header Remote Code Execution

!/usr/bin/perl IntelliTamper 2.07 Remote Code Execution server header By: Koshi Guido Landi finally did it, thought i'd throw one in there. This example assumes you're scanning "http://127.0.0.1" For example, exploit may not work if you were to scan "http://127.0.0.1:80" or even changing it as...

IntelliTamper 2.07 - server header Remote Code Execution

IntelliTamper 2.07 - server header Remote Code Execution !/usr/bin/perl IntelliTamper 2.07 Remote Code Execution server header By: Koshi Guido Landi finally did it, thought i'd throw one in there. This example assumes you're scanning "http://127.0.0.1" For example, exploit may not work if you wer...

IntelliTamper 2.07 (server header) Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits ================================================================ IntelliTamper 2.07 server header Remote Code Execution Exploit ================================================================ !/usr/bin/perl IntelliTamper 2.07 Remote Code...