Passive Spider - Information Gathering from Search Engine Tool

Passive Spider uses search engines currently only Bing supported to find interesting information about a target domain. INSTALL git clone https://github.com/RandomStorm/passive-spider.git cd passive-spider gem install bundler && bundle install Place your search engine API keys in the apikeys.conf...

web_spider

This plugin is a classic web spider, it will request a URL and extract all links and forms from the response. Three configurable parameter exist: onlyforward ignoreRegex followRegex IgnoreRegex and followRegex are commonly used to configure the webspider to spider all URLs except the "logout" or...

Andiparos - Security tool that can be used for web application security assessments

Andiparos is a fork of the famous Paros Proxy. It is an open source web application security assessment tool that gives penetration testers the ability to spider websites, analyze content, intercept and modify requests, etc. The advantage of Andiparos is mainly the support of Client Certificates ...

WordPress Spider Video Player 2.1 Cross Site Scripting

==================================================================== Exploit Title : WordPress Spider Video Player 2.1 Cross site scripting Vulnerability Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://web-dorado.com/ Google Dork :...

Spider contacts, 1.3.3,

Spider contacts, 1.3.3, SQL Injection Extension Update Details We have fixed the vulnerability on Spider Contacts. We have changed the version to 1.3.4 on JED and also added corresponding text to the description. UpdateNoticeURL http://web-dorado.com/products/joomla-contacts.html...

spider contact lite, sqli

spider contact lite , , as per http://vel.joomla.org/vel-blog/976-spider-contacts-1-3-3.html Extension Update Details We have fixed the vulnerability on Spider Contacts Lite. We have changed the version to 1.3.4 on JED and also added corresponding text to the description. UpdateNoticeURL...

[waraxe-2013-SA#105] - Multiple Vulnerabilities in Spider Catalog Wordpress Plugin

waraxe-2013-SA105 - Multiple Vulnerabilities in Spider Catalog Wordpress Plugin =================================================================================== Author: Janek Vind "waraxe" Date: 22. May 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-105.html Description of...

[waraxe-2013-SA#104] - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin

waraxe-2013-SA104 - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin =================================================================================== Author: Janek Vind "waraxe" Date: 22. May 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-104.html Descriptio...

http-stored-xss NSE Script

Unfiltered '' greater than sign. An indication of potential XSS vulnerability. See also: http-dombased-xss.nse http-phpself-xss.nse http-xssed.nse http-unsafe-output-escaping.nse Script Arguments http-stored-xss.formpaths The pages that contain the forms to exploit. For example, /upload.php,...

http-comments-displayer NSE Script

Extracts and outputs HTML and JavaScript comments from HTTP responses. Script Arguments http-comments-displayer.singlepages Some single pages to check for comments. For example, "/", "/wiki". Default: nil crawler mode on http-comments-displayer.context declares the number of chars to extend our...

WordPress Spider Event Calendar Plugin 1.3.0 - Multiple Vulnerabilities

Spider Event Calendar plugin is prone to multiple vulnerabilities: 1. Insufficient access check for AJAX operations in "calendar.php"; 2. SQL Injection in "calendar.php" function "spidercalendarquickupdate"; 3. SQL Injection in "calendar.php" function "spidercalendarquickedit"; 4. SQL Injection i...

WordPress Spider Catalog Plugin 1.4.6 - Multiple Vulnerabilities

Spider Catalog plugin is prone to multiple vulnerabilities. These vulnerabilities are: 1. SQL Injection in Spider Catalog Shortcodes; 2. SQL Injection in "catalog.php" function "catalogaftersearchresults"; 3. SQL Injection in "Categories.php" function "changecat"; 4. SQL Injection in...

WordPress Plugin Spider Event Calendar 1.3.0 - Multiple Vulnerabilities

WordPress Plugin Spider Event Calendar 1.3.0 - Multiple Vulnerabilities waraxe-2013-SA104 - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin =================================================================================== Author: Janek Vind "waraxe" Date: 22. May 2013 Locatio...

WordPress Plugin Spider Event Calendar 1.3.0 - Multiple Vulnerabilities

waraxe-2013-SA104 - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin =================================================================================== Author: Janek Vind "waraxe" Date: 22. May 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-104.html Descriptio...

WordPress Plugin Spider Catalog 1.4.6 - Multiple Vulnerabilities

waraxe-2013-SA105 - Multiple Vulnerabilities in Spider Catalog Wordpress Plugin =================================================================================== Author: Janek Vind "waraxe" Date: 22. May 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-105.html Description of...

Spider Event Calendar 1.3.0 Cross Site Scripting / Path Disclosure / SQL Injection

waraxe-2013-SA104 - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin =================================================================================== Author: Janek Vind "waraxe" Date: 22. May 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-104.html Descriptio...

Spider Catalog 1.4.6 Cross Site Scripting / Path Disclosure / SQL Injection

waraxe-2013-SA105 - Multiple Vulnerabilities in Spider Catalog Wordpress Plugin =================================================================================== Author: Janek Vind "waraxe" Date: 22. May 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-105.html Description of...

CVE-2013-3532

SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter...

Sql injection

SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter...

CVE-2013-3532

CVE-2013-3532 describes an SQL injection in the Web Dorado Spider Video Player (SpiderVPlayer) WordPress plugin, version 2.1, exposed via the settings.php theme parameter. The root cause is unparameterized SQL handling, permitting remote attackers to execute arbitrary SQL commands. Impact per sou...