The Metasploit Project is a computer security project which provides information about security vulnerabilities and aids in penetration testing and IDS signature development. It is a penetration testing platform that enables you to find,...
Forensics / Information Gathering / Metasploit / Network PenTest / Vulnerability Analysis / Web Exploitation / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published May 19, 2017 · Last modified November 20, 2022
We have filled the world of hackers with infinite fantasy and fear, but with the rise of technology and security in the field of progress, hacking technology has become increasingly common. In fact, network...
Exploitation / Metasploit / Network PenTest
by do son · Published October 25, 2017 · Last modified October 25, 2022
dde_delivery This module generates an DDE command to place within a word document, that when executed, will retrieve a HTA payload via HTTP from an web server. Currently have not figured out how to...
Exploitation / Metasploit / Network PenTest
by do son · Published September 6, 2017 · Last modified October 25, 2022
What is Apache Struts 2 REST Plugin XStream RCE (CVE-2017-9805)? Apache Struts released the latest security bulletin, Apache Struts 2.5.x REST plug-in there is a high-risk vulnerability in the implementation of the remote code,...
Exploitation / Metasploit / Network PenTest
by do son · Published July 28, 2017 · Last modified October 25, 2022
Shellter Shellter is a dynamic shellcode injection tool, and the first truly dynamic PE infector ever created. It can be used in order to inject shellcode into native Windows applications (currently 32-bit applications only)....
Machine Learning / Metasploit / Network PenTest
by do son · Published April 11, 2018 · Last modified October 10, 2021
Deep-pwning is a lightweight framework for experimenting with machine learning models with the goal of evaluating their robustness against a motivated adversary. Note that deep-pwning in its current state is nowhere close to maturity or completion....
Exploitation / Information Gathering / Metasploit / Network PenTest / Vulnerability Analysis
by do son · Published November 29, 2016 · Last modified October 10, 2021
Description The SSH server on the remote host accepts a publicly known static SSH private key for authentication. A remote attacker can log in to this host using this publicly known private key. Solution...
Exploitation / Metasploit / Network PenTest
by do son · Published November 8, 2017 · Last modified October 10, 2021
Dlink DIR-850L UnAuthenticated OS Command Execution The vulnerabilities have been reported as part of Hack2Win competition, for more information about Hack2Win – Hack2Win – https://blogs.securiteam.com/index.php/archives/3310. The vulnerabilities found in D-Link 850L are: Remote Command Execution...
Exploitation / Information Gathering / Metasploit / Network PenTest / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest / Wireless
by do son · Published July 8, 2018 · Last modified October 10, 2021
discover For use with Kali Linux. Custom bash scripts used to automate various pentesting tasks. Download, setup & usage git clone https://github.com/leebaird/discover /opt/discover/ All scripts must be run from this location. cd /opt/discover/ ./update.sh ...
Exploitivator This script uses two config files(exploitivator_scan.cfg and exploitivator.cfg). One to specify Nmap scans and parameters(exploitivator_scan.cfg), and one to specify Metasploit payloads and parameters(exploitivator.cfg). These use ‘##’ as a separator and have the following...
