13 matches found
DC-1-VulnHub-
No d...
Black_Box-Penetration-Testing
BlackBox-Penetration-Testing Black-box penetration test again...
vulnhub-writeups
VulnHub Writeups Author: Roman Mares Company: Delt...
IMF-1-walkthrough
IMF: 1 — Boot2Root Walkthrough Platform: VulnHub Diff...
ctf-writeups-Doli1
🛡️ Doli 1 — CTF Writeup VulnHub VAPT Report For...
Exploits-and-code-snippets
Exploits-and-code-snipp...
Exploits-and-code-snippets
Exploits-and-code-snipp...
vulnhub-machines-writeups
vulnhub-machines-writeups Collec...
Autoenum - Automatic Service Enumeration Script
Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing environments i.e. HTB, VulnHub, OSCP and draws a bit from a number of existing tools including AutoRecon https://github.com/Tib3rius/AutoRecon, Auto-Rec...
vulhub
It is an open-source collection of pre-built vulnerable docker environments. The primary vulnerability is a Flask SSTI Server-Side Template Injection vulnerability. The target product/service is Flask, a Python web framework. The vulnerability class/vector is SSTI, which allows an attacker to...
PlaySMS 1.4 - sendfromfile.php?Filename Authenticated Code Execution Exploit
This Metasploit module exploits a code injection vulnerability within an authenticated file upload feature in PlaySMS version 1.4. This issue is caused by improper file name handling in sendfromfile.php file. Authenticated Users can upload a file and rename the file with a malicious payload. This...
PlaySMS - 'import.php' (Authenticated) CSV File Upload Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'PlaySMS import.php Authenticated CSV File Upload Code Execution', 'Description' = %q This module exploits an authenticated file upload remote cod...
PlaySMS import.php Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'PlaySMS import.php Authenticated CSV File Upload Code Execution', 'Description' = %q This module exploits an authenticated file upload remote cod...