XSSER - From XSS to RCE

From XSS to RCE 2.5 - Black Hat Europe Arsenal 2016 Demo Version 2.0 - 2015: https://www.youtube.com/playlist?list=PLIjb28IYMQgqqqApoGRCZO40vP-eKsgf Version 2.5 - 2016: https://www.youtube.com/playlist?list=PLRic6PgcrsWGkgacL6WFnSQKVRZIoofRj Requirements Python 2.7., version 2.7.11 was used for...

Xsser Trojan Spies on Jailbroken iOS Devices in Hong Kong

An iOS version of an Android espionage Trojan targeting activists and protestors in Hong Kong has been discovered on the command and control server hosting the Android malware. The iOS version, a mobile remote access Trojan dubbed Xsser by Lacoon Mobile Security, affects only jailbroken iOS...

[GoLismero v2.0] Merge results of security tools (OpenVas, Wfuzz, SQLMap, DNS recon, robot analyzer...)

GoLismero is an Open Source security tools that can run their own security tests and manage a lot of well known security tools OpenVas, Wfuzz, SQLMap, DNS recon, robot analyzer... take their results, feedback to the rest of tools and merge all of results. And all of this automatically. Changelog...

Unfixed XSS vulnerability at www.adventureengine.com

Security researcher LeBaNeSe-XsSeR, has submitted on 03/01/2009 a cross-site-scripting XSS vulnerability affecting www.adventureengine.com, which at the time of submission ranked 1034738 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/200...

Unfixed XSS vulnerability at www.zabasearch.com

Security researcher LeBaNeSe-XsSeR, has submitted on 16/01/2009 a cross-site-scripting XSS vulnerability affecting www.zabasearch.com, which at the time of submission ranked 5270 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/01/2009. It is...

Unfixed XSS vulnerability at www.classesorange.com

Security researcher LeBaNeSe-XsSeR, has submitted on 05/09/2008 a cross-site-scripting XSS vulnerability affecting www.classesorange.com, which at the time of submission ranked 23129442 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/09/2008...

Unfixed XSS vulnerability at www.ahmadmagazine.com.lb

Security researcher LeBaNeSe-XsSeR, has submitted on 05/05/2008 a cross-site-scripting XSS vulnerability affecting www.ahmadmagazine.com.lb, which at the time of submission ranked 6075839 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...