XSStrike: A XSS Detection & Exploitation Kit

PenTestIT RSS Feed If you remember a couple of weeks back, I blogged about XSS Radar, a Google Chrome extension to help you discover cross-site scripting vulnerabilities. This post is about - XSStrike, a similar tool to help you find cross-site scripting vulnerabilities, but it is coded in Python...

XSStrike - Fuzz and Bruteforce Parameters for XSS

XSStrike is a python which can fuzz and bruteforce parameters for XSS. It can also detect and bypass WAFs. Installing XSStrike Use the following command to download it git clone https://github.com/UltimateHackers/XSStrike/ After downloading, navigate to XSStrike directory with the following comma...

Striker Soccer America 2015 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Striker Soccer America 2015 published at the 'play' market has multiple vulnerabilities...

Striker Soccer Brazil - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Striker Soccer Brazil published at the 'play' market has multiple vulnerabilities...

Soccer Striker 15 - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Soccer Striker 15 published at the 'play' market has multiple vulnerabilities...

Striker Soccer 2 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Striker Soccer 2 published at the 'play' market has multiple vulnerabilities...

Striker Soccer London - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Striker Soccer London published at the 'play' market has multiple vulnerabilities...

security flaw

Integer underflow in the isakmpidprint for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service crash via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as...

PT-2004-1387 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBSD versions 3.4 and earlier Description: The issue is related to multiple memory leaks in the isakmpd component, which can be exploited by remote attackers to cause a denial of service due to memory exhaustion. This can be achieved by...