Youzer - Fake User Generator For Active Directory Environments

Fake User Generator for Active Directory Environments Introduction The goal of Youzer is to create information rich Active Directory environments. This uses the python3 library 'faker' to generate random accounts. pip3 install faker You can either supply a wordlist or have the passwords generated...

Getting your head under the hood and out of the sand: Automotive security testing

We’ve been doing automotive pen testing for several years now. Along the way we’ve had some fascinating experiences, working with some insightful and forward-thinking OEMs. But we’ve also worked with some OEMs and suppliers that consider pen testing to be a box checking exercise and frankly, buri...

D-Link Agrees to 10 Years of Security Audits to Settle FTC Charges

Taiwanese networking equipment manufacturer D-Link has agreed to implement a "comprehensive software security program" in order to settle a Federal Trade Commission FTC lawsuit alleging that the company didn't take adequate steps to protect its consumers from hackers. Your wireless router is the...

oscp

This is an offensive tool for penetration testing and vulnerability assessment. It is a Python script called reconscan.py that is designed to be used as a preparation for the OSCP Offensive Security Certified Professional exam. The script is multithreaded and can be run against several hosts at...

SQLMap v1.3.7 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

PTF v2.3 - The Penetration Testers Framework Is A Way For Modular Support For Up-To-Date Tools

The PenTesters Framework PTF is a Python script designed for Debian/Ubuntu/ArchLinux based distributions to create a similar and familiar distribution for Penetration Testing. As pentesters, we've been accustom to the /pentest/ directories or our own toolsets that we want to keep up-to-date all o...

TwitterShadowBan - Twitter Shadowban Tests

One-page web app, testing Twitter users for conventional and QFD shadowbans. Setup Browser compatibility needs transpiling. Nothing fancy, just the usual babel magic. git clone https://github.com/shadowban-eu/TwitterShadowBanV2 && cd TwitterShadowBanV2 npm install Since we are using a php backend...

Lynis 2.7.5 - Security Auditing Tool for Unix/Linux Systems

We are excited to announce this major release of auditing tool Lynis. Several big changes have been made to core functions of Lynis. These changes are the next of simplification improvements we made. There is a risk of breaking your existing configuration. Lynis is an open source security auditin...

One-Lin3r v2.0 - Gives You One-Liners That Aids In Penetration Testing Operations, Privilege Escalation And More

One-Lin3r is simple modular and light-weight framework gives you all the one-liners that you will need while penetration testing Windows, Linux, macOS or even BSD systems or hacking generally with a lot of new features to make all of this fully automated ex: you won't even need to copy the...

Huamei Zhuosoft Detects SQL Injection Vulnerability in Resource Service Platform

Hunan Huamei Information System Co., Ltd. is an IT services and industry solutions provider for government market regulators, inspection and testing organizations, certification and accreditation companies, as well as corporate laboratories and other industry clients. Huamei Zhuo soft testing...

The vulnerability of the built-in software in Intel NUC Kits stems from insufficient input data validation. This allows attackers to gain access to protected information, cause system failures, or enhance their privileges.

The vulnerability of the built-in software in the Intel NUC Kit is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to access protected information, cause service failures, or increase their privileges...

BackBox Linux 6.0 - Ubuntu-based Linux Distribution Penetration Test and Security Assessment

BackBox Linux is a penetration testing and security assessment oriented Linux distribution providing a network and systems analysis toolkit. It includes some of the most commonly known/used security and analysis tools, aiming for a wide spread of goals, ranging from web application analysis to...

US to Russia on Nuke Experiments: Do as We Say, Not as We Do

The US is quietly ramping up its plutonium experiments even as Washington raises concerns about Russian testing...

The vulnerability of the KMD module in Intel Graphics Driver allows a hacker to trigger a service failure.

The vulnerability of the KMD module in the Intel Graphics Driver lies due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause system failures...

SUSE SLED12 / SLES12 Security Update : openssh (SUSE-SU-2019:1524-1)

This update for openssh fixes the following issues : Security vulnerabilities addressed : CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during file transfers bsc1121816. CVE-2019-611...

Exploit for Injection in Oracle Agile_Plm

CVE-2019-2725 bypass tips coded in python3,payloadhereh...

The vulnerability of the microprogrammed logic controller Modicon’s software, related to insufficient checking of exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to insufficient testing of exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause malfunctions by sending specially crafted Modbus packets to the...

Exploit for OS Command Injection in Exim

PoC-CVE-2019-10149Exim MNEMO-CERT ha desarrollado una PoC que...

When Time is of the Essence – Testing Controls Against the Latest Threats Faster

A new threat has hit head the headlines Robinhood anyone?, and you need to know if you're protected right now. What do you do? Traditionally, you would have to go with one of the options below. Option 1 – Manually check that IoCs have been updated across your security controls. This would require...

When Time is of the Essence – Testing Controls Against the Latest Threats Faster

A new threat has hit head the headlines Robinhood anyone?, and you need to know if you're protected right now. What do you do? Traditionally, you would have to go with one of the options below. Option 1 – Manually check that IoCs have been updated across your security controls. This would require...