Home Tools Page 129

Tools

The latest hacking and hacker tools. Open source offensive and defensive security tools. Browse interactive maps of offensive security tools used by malicious actors and cybercriminals. Check out some live threat maps and malware intelligence databases.

This will be a curated list of mostly open source hacking tools. These can range from Red Teaming offensive security tools to fuzzers and debuggers for malware analysis. We are always looking for new state of the art tools that can be used for security professionals. Please feel free to send us a tool via email or one of our social media accounts.

Microsoft Windows Kernel Use-After-Free

0
Authored by Google Security Research, mjurczyk Microsoft Windows Kernel renaming layered keys does not reference count security descriptors, leading to a use-after-free condition. advisories | CVE-2023-35382

VMWare Aria Operations For Networks Remote Code Execution

0
Authored by Harsh Jaiswal, Sina Kheirkhah, Rahul Maini | Site summoning.team VMWare Aria Operations for Networks (vRealize Network Insight) static SSH key remote code execution proof of concept exploit. advisories |...

Tinycontrol LAN Controller 3 Denial Of Service

0
Authored by LiquidWorm | Site zeroscience.mk Tinycontrol LAN Controller version 3 suffers from an unauthenticated remote denial of service vulnerability. An attacker can issue direct requests to the stm.cgi page...

Tinycontrol LAN Controller 3 Remote Credential Extraction

0
Authored by LiquidWorm | Site zeroscience.mk Tinycontrol LAN Controller version 3 suffers from an issue where an unauthenticated attacker can retrieve the controller's configuration backup file and extract sensitive information...

Tinycontrol LAN Controller 3 Remote Admin Password Change

0
Authored by LiquidWorm | Site zeroscience.mk Tinycontrol LAN Controller version 3 suffers from an insecure access control allowing an unauthenticated attacker to change accounts passwords and bypass authentication gaining panel...

Juniper JunOS SRX / EX Remote Code Execution

0
Authored by watchTowr Labs Team | Site github.com A proof of concept exploit for chaining four CVEs to achieve remote code execution in Juniper JunOS within SRX and EX Series...

Apache NiFi H2 Connection String Remote Code Execution

0
Authored by h00die, Matei Mal Badanoiu | Site metasploit.com The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a...

IQ-Medya CMS 2.0 Cross Site Scripting

0
Authored by indoushka IQ-Medya CMS version 2.0 suffers from a cross site scripting vulnerability. Change Mirror Download ====================================================================================================================================| # Title : İQ-Medya CMS v2.0 XSS Vulnerability ...

InterPhoto 2.3.0 Shell Upload

0
Authored by indoushka InterPhoto version 2.3.0 suffers from a remote shell upload vulnerability. Change Mirror Download ====================================================================================================================================| # Title : InterPhoto 2.3.0 Persians Remote Shell Upload vulnerability ...

Invasor Diagonal CMS 1.0 Cross Site Scripting

0
Authored by indoushka Invasor Diagonal CMS version 1.0 suffers from a cross site scripting vulnerability. Change Mirror Download ====================================================================================================================================| # Title : Invasor Diagonal CMS 1.0 XSS Vulnerability...