wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

wavecrack

Wavecrack 설명 여러 사용자가 사전 정의된 옵션을 사용하여 hashcat 크래킹 박스를 공유할 수 있는 사용자 친화적인 웹 인터페이스입니다. 스크린샷 홈페이지 크랙할 해시 추가 결과 및 통계 보기 개요 이 웹 애플리케이션은 hashcat을 사용하여 비동기식 비밀번호 크래킹 을 실행하는 데 사용할 수 있습니다. 인터페이스는 가능한 한 사용자 친화적 으로 설계되었으며, 비밀번호 크래킹 방법 선택과 다양한 공격 모드의 연속 자동화 를 용이하게 합니다. 또한 크랙된 비밀번호에 대한 통계 를 표시하고 CSV로 크랙된 비밀번호 목...

aws-key-disabler

AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...

cve-2015-1538-1

以下は、CVE-2015-1538（1）として知られる「stsc」脆弱性を悪用し、MP4を生成するPythonスクリプトです。これは私がStagefrightライブラリで報告した最も重大な脆弱性の1つです。このエクスプロイトの期待される結果は、mediaユーザーとしてのリバースシェルです。私のBlack HatおよびDEF...

snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

snmpwn

SNMPwn은 SNMPv3 사용자 열거 및 공격 도구입니다. 이는 보안 전문가 및 침투 테스터가 테스트 권한이 있는 호스트를 대상으로 사용하도록 설계된 합법적인 보안 도구입니다. SNMPv3 시스템이 존재하지 않는 SNMP 사용자에게 "알 수 없는 사용자 이름"으로 응답한다는 점을 이용하여, 대규모 사용자 목록을 순회하며 실제 존재하는 사용자를 찾아냅니다. 어떤 기능을 하나요? 제공한 호스트가 SNMP 요청에 응답하는지 확인합니다. 제공한 목록의 각 사용자를 테스트하여 SNMP 사용자를 열거합니다. 사용자 무차별 대입과...

DrSemu

Dr.Semu Dr.Semu는 격리된 환경에서 실행 파일을 실행하고, 프로세스의 동작을 모니터링하며, 사용자 또는 커뮤니티가 생성한 Dr.Semu 규칙에 기반하여 프로세스가 악성인지 여부를 탐지합니다. 이 도구는 초기 개발 단계에 있습니다 자기소개: @qazqaz Dr.Semu를 사용하면 프로세스의 동적 동작을 기반으로 악성코드를 탐지하는 규칙을 만들 수 있습니다. 리디렉션을 통한 격리 모든 작업은 사용자 모드에서 이루어집니다. Windows Projected File System ProjFS을 사용하여 가상 파일 시스템을...

CVE-2020-9461

CVE-2020-9461 ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ 保存型XSS - Oempro Octech Oempro 4.7から4.11では、認証済みユーザーによる保存型XSSが可能です。Media.CreateFolderコマンドのFolderNameパラメーターに脆弱性があります。 コマンド: Media.CreateFold...

CVE-2020-1958

CVE-2020-1958 PoC CVE-2020-1958 は、Apache Druid 0.17.0 における深刻度の高い LDAP インジェクションの脆弱性です。攻撃者は LDAP 検索フィルターをバイパスし、LDAP サーバー上に存在するユーザーの任意の LDAP 属性値を取得できます。 Apache Druid の公式 アドバイザリ より： LDAP 認証が有効な場合： 有効な LDAP 認証情報を持つ Druid API の呼び出し元は、credentialsValidator.userSearch フィルターバリアをバイパスできます。このフィルターは、有効な LDAP...

osi.ig

Open Source Information Instagram so recently ig started sending html response insted of json to "unknown" requests. i REALLY wanted this to work without login since i don't use ig anymore, tried few ways i knew to get it working without login but it didn't work :/ anyways since lot of people are...

CVE-2018-9995

ツール DVR認証情報を表示 Exploit Title: "DVR認証情報を取得" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel CodeHolic から最適化 エクスプロイト: $ curl "http://:/device.rsp?opt=user&cmd=list" -H "Cookie:...

Good Layers LMS Plugin <= 2.1.4 - SQL Injection

An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query witho...

ListingPro < 2.6.1 - Sensitive Data Disclosure

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the /listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email...

Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Meta

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive metadata, such as the wpcapabilities user meta that defines a user's role. During the registration...

ZZcms - Cross-Site Scripting

ZZcms 2019 contains a cross-site scripting vulnerability in the user login page. An attacker can inject arbitrary JavaScript code in the referer header via user/login.php, which can allow theft of cookie-based credentials and launch of subsequent attacks. id: CVE-2020-20285 info: name: ZZcms -...

WordPress WP Fastest Cache <= 0.9.0.2 - Authenticated Arbitrary File Deletion

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capability checking and insufficient path validation. This makes it possible for authenticated users with minimal permissions to delete...

Lightdash v0.1024.6 - Server-Side Request Forgery

Server-Side Request Forgery “SSRF” in the export dashboard functionality of Lightdash version 0.1024.6 allows remote authenticated threat actors to obtain the session cookie of any user who exports a crafted dashboard. When they are exported, dashboards containing HTML elements can trigger HTTP...

Hongdian H8922 3.0.5 Devices - Local File Inclusion

Hongdian H8922 3.0.5 devices are vulnerable to local file inclusion. The /logdownload.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ e.g., ../../etc/passwd This can be carried out wi...

WordPress Pie Register <= 3.7.1.4 - Authentication Bypass

An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting socialsite=true and manipulating the useridsocialsite parameter,...

Klog Server <=2.41 - Unauthenticated Command Injection

Klog Server 2.4.1 and prior is susceptible to an unauthenticated command injection vulnerability. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the apache user. The...