Web Exploitation / WebApp PenTest
by do son · Published September 20, 2017 · Last modified October 10, 2021
CVE-2017-7674 Apache Tomcat Remote Code Execution via JSP Upload Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 7.0.0 to 7.0.79 Description: When running on Windows with HTTP...
Web Exploitation / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published September 15, 2017 · Last modified May 1, 2024
What’s GoLismero? GoLismero is an open source framework for security testing. It’s currently geared towards web security, but it can easily be expanded to other kinds of scans. The most...
Password Attacks / Web Exploitation / Web Maintaining Access / WebApp PenTest
by do son · Published September 10, 2017 · Last modified November 4, 2024
WPForce – WordPress Attack Suite ABOUT: It is a suite of WordPress Attack tools. Currently, this contains 2 scripts – WPForce, which brute forces logins via the API, and Yertle,...
Web Exploitation / WebApp PenTest
by do son · Published September 9, 2017 · Last modified November 15, 2017
WordPress is a blog platform developed using PHP language, users can support PHP and MySQL database on the server set up their own website. WordPress can also be used as...
clusterd clusterd is an open source application server attack toolkit. Born out of frustration with current fingerprinting and exploitation methods, clusterd automates the fingerprinting, reconnaissance, and exploitation phases of an...
Web Exploitation / WebApp PenTest
by do son · Published September 4, 2017 · Last modified May 1, 2024
LFI Freak Features Works with Windows, Linux and OS X Includes bind and reverse shell for both Windows and Linux Written in Python 2.7 What is this all about? A...
Web Exploitation / WebApp PenTest
by do son · Published September 1, 2017 · Last modified November 4, 2024
SQL injection attack consists of insertion or “injection” of a SQL query via the input data from the client to the application. A successful SQL injection exploit can read sensitive data...
Web Exploitation / WebApp PenTest
by do son · Published September 1, 2017 · Last modified February 16, 2018
Blind SQL (Structured Query Language) injection is a type of SQL Injection attack that asks the database true or false questions and determines the answer based on the application’s response. This attack...
Exploitation / Information Gathering / Network PenTest / Vulnerability Analysis / Web Exploitation / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest / Wireless
by do son · Published August 30, 2017 · Last modified October 10, 2021
Here is a list of various security tools. Passwords Cain & Abel http://www.oxid.it/cain.html Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of...
Race Conditions occur when a piece of code does not work as it is supposed to (like many security issues). They are the result of an unexpected ordering of events,...
Web Exploitation / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published August 15, 2017
HUNT Burp Suite Extension HUNT is a Burp Suite extension to: Identify common parameters vulnerable to certain vulnerability classes. Organize testing methodologies inside of Burp Suite. HUNT Scanner (hunt_scanner.py) This...
Exploitation / Information Gathering / Maintaining Access / Network PenTest / Post Exploitation / Vulnerability Analysis / Web Exploitation / Web Information Gathering / Web Maintaining Access / Web Vulnerability Analysis / WebApp PenTest
by do son · Published August 6, 2017
PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others. Contents Contents Network Analysis IP Whois DNS...
Web Exploitation / WebApp PenTest
by do son · Published July 31, 2017 · Last modified October 25, 2022
What is CVE-2016-0792? Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file,...
Web Exploitation / WebApp PenTest
by do son · Published July 20, 2017 · Last modified August 5, 2017
xss_payloads Payloads for practical exploitation of cross site scripting. Usage Find XSS vuln in your app Get PoC exploit: alert(1) etc Host these payloads somewhere Use vuln to pull one...
Web Exploitation / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 17, 2017 · Last modified May 30, 2018
The current sections are divided as follows: Philosophy Discovery Mapping Authorization and Sessions Tactical fuzzing XSS SQLi File Inclusion CSRF Privilege, Transport and Logic Web services Mobile vulnerabilities Auxiliary Information...
Support Securityonline.info site. Thanks!
