Pure Blood v2.0 - A Penetration Testing Framework Created For Hackers / Pentester / Bug Hunter

A Penetration Testing Framework created for Hackers / Pentester / Bug Hunter. Web Pentest / Information Gathering: Banner Grab Whois Traceroute DNS Record Reverse DNS Lookup Zone Transfer Lookup Port Scan Admin Panel Scan Subdomain Scan CMS Identify Reverse IP Lookup Subnet Lookup Extract Page...

Smartshop 1 SQL Injection

Exploit Title: Smartshop 1 - SQL Injection Date: 2018-06-02 Exploit Author: L0RD or [email protected] Software Link: https://github.com/smakosh/Smartshop/archive/master.zip Vendor Homepage: https://www.behance.net/gallery/49080415/Smartshop-Free-e-commerce-website Version: 1 Tested on...

Smartshop 1 - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Smartshop 1 - SQL Injection Exploit Author: L0RD or email protected Software Link: https://github.com/smakosh/Smartshop/archive/master.zip Vendor Homepage: https://www.behance.net/gallery/49080415/Smartshop-Free-e-commerce-websi...

Smartshop 1 - id SQL Injection

Smartshop 1 - id SQL Injection Exploit Title: Smartshop 1 - SQL Injection Date: 2018-06-02 Exploit Author: L0RD or [email protected] Software Link: https://github.com/smakosh/Smartshop/archive/master.zip Vendor Homepage:...

Facebook Clone Script 1.0.5 - search SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Facebook Clone Script 1.0.5 - 'search' SQL Injection Exploit Author: L0RD Vendor Homepage: https://www.phpscriptsmall.com/product/facebook-clone/ Version: 1.0.5 Tested on: Win 10 POC : SQLi : Parameter : search Type : Union base...

Zechat 1.5 - SQL Injection Cross-Site Request Forgery

Zechat 1.5 - SQL Injection Cross-Site Request Forgery Exploit Title: Zechat 1.5 - 'hashtag' / 'v' SQL Injection / Cross site request forgery Date: 2018-05-22 Exploit Author: Borna nematzadeh L0RD or [email protected] Vendor Homepage: https://bylancer.com Version: 1.5 Tested on: Kali...

Zechat 1.5 - SQL Injection / Cross-Site Request Forgery

Exploit Title: Zechat 1.5 - 'hashtag' / 'v' SQL Injection / Cross site request forgery Date: 2018-05-22 Exploit Author: Borna nematzadeh L0RD or [email protected] Vendor Homepage: https://bylancer.com Version: 1.5 Tested on: Kali linux...

XATABoost 1.0.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: XATABoost CMS Sql Injection Google Dork: inurl:php?id= Powered by XATABOOST Exploit Author: MgThuraMoeMyint Vendor Homepage: http://www2.xataboost.com Version: 1.0.0 Tested on: Kali Linux SQL Injection Type: Union Based Example...

XATABoost 1.0.0 - SQL Injection

XATABoost 1.0.0 - SQL Injection Exploit Title: XATABoost CMS Sql Injection Google Dork: inurl:php?id= Powered by XATABOOST Date: 02.01.2018 Exploit Author: MgThuraMoeMyint Vendor Homepage: http://www2.xataboost.com Version: 1.0.0 Tested on: Kali Linux SQL Injection Type: Union Based Example URL:...

XATABoost 1.0.0 - SQL Injection

Exploit Title: XATABoost CMS Sql Injection Google Dork: inurl:php?id= Powered by XATABOOST Date: 02.01.2018 Exploit Author: MgThuraMoeMyint Vendor Homepage: http://www2.xataboost.com Version: 1.0.0 Tested on: Kali Linux SQL Injection Type: Union Based Example URL:...

XATABoost 1.0.0 SQL Injection

Exploit Title: XATABoost CMS Sql Injection Google Dork: inurl:php?id= Powered by XATABOOST Date: 02.01.2018 Exploit Author: MgThuraMoeMyint Vendor Homepage: http://www2.xataboost.com Version: 1.0.0 Tested on: Kali Linux SQL Injection Type: Union Based Example URL:...

SQL Injection Vulnerability in doAjaxGetCip Function of Tibco Call Center System

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. A SQL injection vulnerability exists in the doAjaxGetCip function of the Tibco Call Center System. Vulnerability file: /userweb/php/index/user.class.php, exploit: UNION...

Mail.ru: [3k.mail.ru] SQL Injection

Добрый день. Функция поиска уязвимо к атаке SQL Injection. Вектор атаки - Union Based PoC. http://3k.mail.ru/info/library/index.php?obj=cat&id=212&searchST='+and+0+union+select+1,2,concatws0x3a,user,version,4,5,6,7-- a Вывод на странице: master3k@localhost:5.0.90-log...

Mail.ru: [orsotenslimselfie.lady.mail.ru] SQL Injection

Добрый день. GET параметр lastid уязвимо к SQL иньекции. Вектор атаки Union Based. PoC http://orsotenslimselfie.lady.mail.ru/ajax/contest?perPage=20&lastid=7913+union+select+concatversion,0x3a,user,2,3,4,version,6,7,8,9,10--+ вывод в JSON респонсе - 5.0.92-community-log:[email protected]...

Mail.ru: [afisha.mail.ru] SQL Injection

Добрый день. Параметр id попадает в SQL запрос без фильтрации. Вектор атаки - Union Based SQLi PoC http://mmkf.afisha.mail.ru/imgview.html?id=3713444279+and0unionselectconcatws0x2c,version,@@versioncompileos вывод в сорцах страницы - 5.0.92-community-log:unknown-linux-gnu...

WordPress Polls Widget Plugin 1.0.7 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : wordpress poll widget version 1.0.7 SQL Injection vulnerability Author : WICS Date : 7/12/2015 Software Link : https://wordpress.org/plugins/polls-widget/ Affected Version: 1.0.7 and below Overview: Poll widget is wordpress...

WordPress Plugin Polls Widget 1.0.7 - SQL Injection

Exploit Title : wordpress poll widget version 1.0.7 SQL Injection vulnerability Author : WICS Date : 7/12/2015 Software Link : https://wordpress.org/plugins/polls-widget/ Affected Version: 1.0.7 and below Overview: Poll widget is wordpress plugin which provide fancy user Polling layout to website...

cmseasy csrf导致sql注入绕过union getshell

简要描述： 上一次做了一个csrf+sql注入getshell的 这一次我继续发一个，由于此属于一个get类型的，所以很简单的，管理员根本就不用去点击，就能触发sql并且getshell 详细说明： 首先我们分析一下sql语句： admin/live/header.php:line:16-21 include'../../include/config.inc.php'; includeCEROOT.'/include/admin/check.inc.php'; includeCEROOT.'/include/celive.class.php'; $adminheader = new...

Horizon Web Builder (fshow.php) SQL Injection Vulnerability

No description provided by source. Exploit Title: Horizon SQLi Google Dork: intext:Site by Horizon : inurl:uid=HORIZON3 Date: 03/05/2011 Author: Iolo Morganwg Category: Web App Version: PHP Tested on: Windows XP Vendor: http://www.horizonsolutions.tv/ Notes: Both params are vulnerable to union...

MyBB HM My Country Flags - SQL Injection

No description provided by source. Exploit title: HM My Country Flags SQL Injection Author: JoinSe7en Contact: join7 +at+ riseup.net Tested on: Linux Category: Web Applications Software link: http://mods.mybb.com/view/hm-my-country-flags HM My Country Flags has a SQL Injection vulnerability. If w...