egressbuster

EgressBuster 저작권 2015 TrustedSec - EgressBuster 제작: David Kennedy ReL1K 회사: TrustedSec 면책 조항: 이것은 테스트 목적으로만 사용되며 명시적 동의가 있는 경우에만 사용할 수 있습니다. 불법적인 목적으로 사용하지 마십시오. EgressBuster의 라이선스에 대한 LICENSE를 읽어주세요. 기능 EgressBuster는 특정 영역의 이그레스 필터링 효과를 테스트하는 방법입니다. 침투 테스트를 수행할 때, 많은 회사들이 외부 인터넷 접근을 차단하기 위해 이그레스...

outis

outis outis는 맞춤형 원격 관리 도구RAT 또는 그와 비슷한 것입니다. Meterpreter나 Empire-Agent를 생각하면 됩니다. 하지만 이 도구의 초점은 익스플로잇 툴킷익스플로잇은 없음이나 대상의 지속적인 관리가 아닙니다. 초점은 서버와 대상 시스템 간에 통신하고, 다양한 방법과 플랫폼을 사용하여 파일을 전송하고, 소켓을 공유하고, 셸을 실행하는 등의 작업을 수행하는 것입니다. 이름에 관하여 호메로스의 오디세이에 나오는 키클롭스 폴리페모스는 이름 확인에 문제가 있었습니다. 그가 오디세우스의 이름을 물었을 때,...

NamedPipePTH

NamedPipePTH 이 프로젝트는 로컬 네임드 파이프 사용자 가장Impersonation에서 인증을 위해 Pass-the-Hash를 사용하는 PoC 코드입니다. 설명하는 블로그 포스트도 있습니다: https://s3cur3th1ssh1t.github.io/Named-Pipe-PTH/ 이 코드는 Invoke-SMBExec.ps1 및 RoguePotato 프로젝트의 코드를 기반으로 합니다. 저는 과거에 특정 Offensive Security 프로젝트 상황에 직면했었는데, 이미 낮은 권한 사용자 계정의 NTLM 해시를 가지고...

Malicious code in ts-eslint-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1ffed26d2d64bf9076210504de22b87e27a065821dedbc708fb05f7c47db74 The package [email protected] presents as a TypeScript/ESLint/Jest helper but ships lib/collect.js, which imports childprocess and invokes...

ASKEY RTF3505VW-N1 - Privilege Escalation Exploit

Exploit Title: ASKEY RTF3505VW-N1 - Privilege escalation Exploit Author: Leonardo Nicolas Servalli Vendor Homepage: www.askey.com Platform: ASKEY router devices RTF3505VW-N1 Tested on: Firmware BRSVg000R3505VMN1001s327 Vulnerability analysis:...

Command Injection

@graphql-tools/git-loader is vulnerable to command injection. The vulnerability exist due to the usage of exec and execSync which allows the spawning of a shell...

Hack-Tools v0.3.0 - The All-In-One Red Team Extension For Web Pentester

The all-in-oneRed Team browser extension for Web Pentesters HackTools, is a web extension facilitating your web application penetration tests , it includes cheat sheets as well as all the tools used during a test such as XSS payloads, Reverse shells and much more. With the extension you no longer...

Ajenti 2.1.31 Command Injection Exploit

This Metasploit module exploits a command injection in Ajenti version 2.1.31. By injecting a command into the username POST parameter to api/core/auth, a shell can be spawned. This module requires Metasploit: https://metasploit.com/download Current source:...

Ajenti auth username Command Injection

This module exploits a command injection in Ajenti == 2.1.31. By injecting a command into the username POST parameter to api/core/auth, a shell can be spawned. Module Options msf use exploit/unix/webapp/ajenti/authusernamecmdinjection msf undefinedauthusernamecmdinjection show actions ...actions...

Mandrake 7.0/7.1,RedHat Kon2 0.3.9 fld Input File Overflow

No description provided by source. source: http://www.securityfocus.com/bid/1371/info KON Kanji On Console is a package for displaying Kanji text under Linux and comes with two suid binaries which are vulnerable to buffer overflows. fld, one of the vulnerable programs, accepts options input from ...

Symantec Altiris DS - SQL Injection (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Symantec Altiris ...

linux/x86 setuid(0) && execve(/bin/sh,0,0) 27 bytes

Exploit for linux/x86 platform in category shellcode ============================================================= linux/x86 setuid0 && execve/bin/sh,0,0 shellcode 27 bytes ============================================================= Special Thanks Inj3ct0r Exploit DataBase I Love Inj3ct0r.Com...

thinkedit-rfi.txt

r0ut3r Presents... Another r0ut3r discovery! writ3r at gmail.com ThinkEdit Remote File Inclusion Exploit Software: ThinkEdit 1.9.2 Vendor: http://www.thinkedit.org/ Released: 2006/12/08 Discovered & Exploit By: r0ut3r writ3r at gmail.com Note: The information provided in this document is for...

GFHost PHP GMail - Remote Command Execution

GFHost PHP GMail - Remote Command Execution GFHost explo Spawn bash style Shell with webserver uid Greetz SPAX, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my @results; my $probe; my @U; $U1 =...

ProFTPd 1.2.7 1.2.9rc2 - Remote Code Execution Brute Force

ProFTPd 1.2.7 1.2.9rc2 - Remote Code Execution Brute Force / ProFTPd 1.2.7 - 1.2.9rc2 remote r00t exploit -------------------------------------------- By Haggis This exploit builds on the work of bkbll to create a working, brute-force remote exploit for the \n procesing bug in ProFTPd. Tested on...

Microsoft Windows - WebDAV Remote Code Execution (2)

Microsoft Windows - WebDAV Remote Code Execution 2 // / 29/05/2003 - by Alumni - / / Microsoft IIS WebDAV New Exploit / / spawns shell on port 32768 / // include include include define SHELLCODELEN 753 define NOP 0x90 define BUFFERLEN 1024 define RET 0x41424344 define GMHOFF 30 define GPAOFF 38...

Microsoft Windows - WebDAV Remote Code Execution (2)

// / 29/05/2003 - by Alumni - / / Microsoft IIS WebDAV New Exploit / / spawns shell on port 32768 / // include include include define SHELLCODELEN 753 define NOP 0x90 define BUFFERLEN 1024 define RET 0x41424344 define GMHOFF 30 define GPAOFF 38 define IPOFF 161 define DEFPORT 32768 //define...

HP-UX 10.20/11.0 - crontab '/tmp' File

source: https://www.securityfocus.com/bid/1845/info crontab is a binary in the cron package of the HP-UX cron implementation which allows a user to create a file of scheduled commands. A vulnerabiltiy in crontab exists that allows a user to read any file on an HP-UX system. crontab as implemented...