6 matches found
exchange-scanner
Microsoft Exchange Server Scanner Description This tool scans several common public-facing services on a target host in order to detect Microsoft Exchange Server and fingerprint its software version if possible. To do this, it uses the following techniques: Outlook Web Access OWA fingerprinting b...
Vulnerability-Exploit-Correlation-Engine
Vulnerability-Exploit-Correlation-Engine Passive-analysis CLI...
curl: FTP PASV command response can cause curl to connect to arbitrary host
A malicious server can use the PASV response to trick curl into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. If cu...
CVE-2020-8284
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service...
trusting FTP PASV responses
When curl performs a passive FTP transfer, it first tries the EPSV command and if that is not supported, it falls back to using PASV. Passive mode is what curl uses by default. A server response to a PASV command includes the IPv4 address and port number for the client to connect back to in order...
