Nmap NSE net: sniffer-detect

Checks if a target on a local Ethernet has its network card in promiscuous mode. The techniques used are described at http://www.securityfriday.com/promiscuousdetection01.pdf. OpenVAS Vulnerability Test $Id: gbnmapsnifferdetectnet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper...

Nmap NSE net: nbstat

Attempts to retrieve the target's NetBIOS names and MAC address. By default, the script displays the name of the computer and the logged-in user; if the verbosity is turned up, it displays all names the system thinks it owns. OpenVAS Vulnerability Test $Id: gbnmapnbstatnet.nasl 5499 2017-03-06...

Nmap NSE net: whois

Queries the WHOIS services of Regional Internet Registries RIR and attempts to retrieve information about the IP Address Assignment which contains the Target IP Address. In using this script your IP address will be sent to iana.org. Additionally your address and the address of the target of the...

Windows LoadLibrary Path

Load an arbitrary library path This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Executes a command on the target machine module MetasploitModule CachedSize = 202 include Msf::Payload::Windows::LoadLibrary end...

Fedora 15 : systemtap-1.4-9.fc15 (2011-7314)

Two divide-by-zero flaws were found in the way systemtap interpreted certain corrupted DWARF expressions. A privileged user able to execute arbitrary systemtap scripts could be tricked into triggering this flaw to crash the target machine. An unprivileged user in the stapusr group may be able to...

wordpress plugins editormonkey remote upload vulnerability-vulnerability warning-the black bar safety net

editormonkey is wordpress a backend editor plug-in. Before many days in the inj3ct0r published on, are successively reproduced, the personal feel is not very perfect. Are uploaded directly to get an x. php. jpg the shell. Can use FCK 0day directly get a phpshell on. The GOOGLE dork is:...

26 Underground Hacking Exploit Kits available for Download !

List of Hacking Exploit Kits : 1. Unknow 2. Tor 3. Target-Exploit 4. Smart pack 5. RDS 6. My poly sploit 7. multisploit 8. mypack-009 9. mypack-091 10. mypack-086 11. mypack-081 12. Mpack 13. Infector 14. Ice-pack-1 15. Ice-pack-2 16. Ice-pack-3 17. G-pack 18. Fire pack -1 19. Fire Pack -2 20...

Anonymous Vs Sony : Word By Word Q/A b/w Reporters and Sony during Conference !

Anonymous Vs Sony : Word By Word Q/A b/w Reporters and Sony during Conference ! Q. The accuracy of approximately 10 million credit flow A. There is no firm evidence of leakage. Cannot say wether a leak or not. There is no report so far. Q. prospect of resuming services. A. We want to restart the...

CentOS 5 : scsi-target-utils (CESA-2011:0332)

An updated scsi-target-utils package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

scsi security update

CentOS Errata and Security Advisory CESA-2011:0332 An updated scsi-target-utils package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring...

iSCSI target user-space tools double free

Double free in tgt...

Vulnerability in Facebook Email feature Exposed !

Vulnerability in Facebook Email feature Exposed ! This time Facebook username feature is Vulnerable. After Facebook applications, now Facebook username feature can be used to do on Facebook profiles. Not only spam's but this bug can be used to post illegitimate messages to Facebook users from the...

[SECURITY] [DSA 2209-1] tgt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2209-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 02, 2011 http://www.debian.org/security/faq -...

http-affiliate-id NSE Script

Grabs affiliate network IDs e.g. Google AdSense or Analytics, Amazon Associates, etc. from a web page. These can be used to identify pages with the same owner. If there is more than one target using an ID, the postrule of this script shows the ID along with a list of the targets using it. Support...

MySql.Com Hacked with Blind SQL Injection by Jackh4xor !

MySql.Com Hacked with Blind SQL Injection by Jackh4xor ! The Mysql website offers database software, services and support for your business, including the Enterprise server, the Network monitoring and advisory services and the production support. The wide range of products include: Mysql clusters...

Saltstack Minion Payload Deployer

This exploit module uses saltstack salt to deploy a payload and run it on all targets which have been selected default all. Currently only works against nix targets. Module Options msf use exploit/linux/local/saltstack/saltminiondeployer msf undefinedsaltminiondeployer show actions ...actions...

ACTi ASOC 2200 Web Configurator 2.6 Remote Root Command Execution

!/usr/bin/python This was written for educational purpose and pentest only. Use it at your own risk. Author will be not responsible for any damage! !!! Special greetz for my friend sinner01 !!! Toolname : actiroot.py Coder : baltazar a.k.a b4ltazar Version : About : ACTi ASOC 2200 Web Configurato...

POP Peeper 3.7 SEH Overflow

!/usr/bin/ruby Title: POP Peeper 3.7 SEH Exploit Tested on: Windows XP SP2 EN Target: POP Peeper 3.7.0.0 Download Link: http://www.poppeeper.com/download.php Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Greetz: offsec team, inj3ct0r team appdata = ENV'APPDATA' file = appdata...

Fake Webcam 6.1 - Local Crash (PoC)

!/usr/bin/ruby Title: Fake Webcam v.6.1 Local Crash PoC Impact: Crashes the process Tested on: Windows XP SP1/SP2 EN Target: Fake Webcam v.6.1 Download Link: http://www.fakewebcam.com/Download/setup.exe Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Greetz: offsec team, inj3ct0r...

Adobe ColdFusion - Directory Traversal

$Id: coldfusiontraversal.rb 11986 2011-03-16 10:15:54Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...