Android Network Toolkit (ANTI) Review - Pentest at the push of a button

This Post reviews the newly released ANTI3 version. We've received a platinum account of ANTI3, before its official release, and this is our review: Recently White-Hat Hacker, Itzhak "Zuk" Avraham, the founder of zImperium unveiled its new app in Blackhat / Defcon19, introducing a new concept whe...

Mambo AHS Shop SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comahsshop SQL Injection Vulnerability Google Dork: inurl:index.php?option=comahsshop Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Gallery SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-gallery SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-gallery Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Myndir SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-myndir SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-myndir Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Press SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-press SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-press Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Shop SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-shop SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-shop Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Frettir SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-frettir SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-frettir Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Skyrslur Cross Site Scripting

------------------------------------------------------------------------------------------------------------------------------- Exploit Title: Mambo Component comn-skyrslur XSS & HTML Injection Vulnerability Google Dork: inurl:index.php?option=comn-skyrslur Date: 01/09/2011 Author: CoBRa21...

Mambo N-Namskeid Cross Site Scripting

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-namskeid XSS & HTML Injection Vulnerability Google Dork: inurl:index.php?option=comn-namskeid Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo Component com_n-myndir SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-myndir SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-myndir Date: 01/09/2011...

Citrix EdgeSight Load Tester Buffer Overflow

A stack overflow vulnerability exists in the Citrix EdgeSight Load Tester software installed on the remote host. By sending a specially crafted message to the server, a remote attacker can leverage this vulnerability to execute arbitrary code on the server as the SYSTEM account. Versions prior to...

Citrix EdgeSight Load Tester (ESLT) version detection

Binary data citrixesltdetect.nbin...

Nmap NSE net: smb-enum-processes

Pulls a list of processes from the remote server over SMB. This will determine all running processes, their process IDs, and their parent processes. It is done by querying the remote registry service, which is disabled by default on Vista; on all other Windows versions, it requires Administrator...

cPanel < 11.25 CSRF - Add User php Script

Exploit for php platform in category web applications Exploit Title: cPanel " Afterwards simply check for ninjashell.php in the directory. III. Counter-measures All cPanel versions starting from 11.25 and above have two in-built security features to prevent such attacks - security tokens and...

cPanel 11.25 - Cross-Site Request Forgery (Add User PHP Script)

cPanel 11.25 - Cross-Site Request Forgery Add User PHP Script Exploit Title: cPanel " Afterwards simply check for ninjashell.php in the directory. III. Counter-measures All cPanel versions starting from 11.25 and above have two in-built security features to prevent such attacks - security tokens...

cPanel < 11.25 - Cross-Site Request Forgery (Add User PHP Script)

Exploit Title: cPanel " Afterwards simply check for ninjashell.php in the directory. III. Counter-measures All cPanel versions starting from 11.25 and above have two in-built security features to prevent such attacks - security tokens and referrer security check. This means that if you are a cpan...

[eVuln.com] Multiple XSS in Alguest

New eVuln Advisory: Multiple XSS in Alguest Summary: http://evuln.com/vulns/151/summary.html Details: http://evuln.com/vulns/151/description.html -----------Summary----------- eVuln ID: EV0151 Software: Alguest Vendor: n/a Version: 1.1c-patched Critical Level: low Type: Cross Site Scripting Statu...

Microsoft HTML Help Compiler (hhc.exe) BOF POC

No description provided by source. Microsoft’s HTML Help Compiler hhc.exe is free tool to build Microsoft Compiled HTML Help .chm files. It is included within HTML Help Workshop and Visual Studio. The executable, hhc.exe, does not properly check the length of user-supplied command line arguments...

smb-enum-domains NSE Script

Attempts to enumerate domains on a system, along with their policies. This generally requires credentials, except against Windows 2000. In addition to the actual domain, the "Builtin" domain is generally displayed. Windows returns this in the list of domains, but its policies don't appear to be...

Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit (ruby)

Exploit for multiple platform in category remote exploits ============================================================= Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit ruby ============================================================= !/usr/bin/ruby Debian SSH Key Tester L4teral This tool...