Home Tools Page 330

Tools

The latest hacking and hacker tools. Open source offensive and defensive security tools. Browse interactive maps of offensive security tools used by malicious actors and cybercriminals. Check out some live threat maps and malware intelligence databases.

This will be a curated list of mostly open source hacking tools. These can range from Red Teaming offensive security tools to fuzzers and debuggers for malware analysis. We are always looking for new state of the art tools that can be used for security professionals. Please feel free to send us a tool via email or one of our social media accounts.

Hotel Reservation System 1.0 SQL Injection

0
Authored by Nefrit ID Hotel Reservation System version 1.0 suffers from a remote SQL injection vulnerability. Change Mirror Download # Exploit Title: Hotel Reservation System 1.0 - SQLi (Unauthenticated)# Google Dork: None#...

WordPress Simple Job Board 2.9.3 Local File Inclusion

0
Authored by Ven3xy WordPress Simple Job Board plugin version 2.9.3 suffers from a local file inclusion vulnerability. advisories | CVE-2020-35749 Change Mirror Download # Exploit Title: Wordpress Plugin Simple Job Board 2.9.3 -...

Wing FTP Server 4.3.8 Remote Code Execution

0
Authored by notcos Wing FTP Server versions 4.3.8 and below suffer from an authenticated remote code execution vulnerability. Change Mirror Download # Exploit Title: Wing FTP Server 4.3.8 - Remote Code Execution...

PHP Everywhere 2.0.3 Remote Code Execution

0
Authored by Ramuel Gall | Site wordfence.com PHP Everywhere versions 2.0.3 and below suffer from multiple remote code execution vulnerabilities. advisories | CVE-2022-24663, CVE-2022-24664, CVE-2022-24665 Change Mirror Download On January 4, 2022, the...

Strapi CMS 3.0.0-beta.17.4 Privilege Escalation

0
Authored by WackyH4cker | Site metasploit.com This Metasploit module exploits the mishandling of a password reset in JSON for Strapi CMS version 3.0.0-beta.17.4 to change the password of a privileged...

QEMU Monitor HMP migrate Command Execution

0
Authored by Brendan Coles | Site metasploit.com This Metasploit module uses QEMU's Monitor Human Monitor Interface (HMP) TCP server to execute system commands using the migrate command. This module has...

WBCE CMS 1.5.2 Remote Code Execution

0
Authored by Antonio Cuomo WBCE CMS version 1.5.2 authenticated remote code execution exploit. Change Mirror Download # Exploit Title: WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated)# Date: 02/01/2022# Exploit Author:...

Servisnet Tessa Privilege Escalation

0
Authored by AkkuS | Site metasploit.com This Metasploit module exploits privilege escalation in Servisnet Tessa triggered by the add new sysadmin user flow with any user authorization. An API request...

WAGO 750-8xxx PLC Denial Of Service / User Enumeration

0
Authored by Gerhard Hechenberger, Steffen Robertz | Site sec-consult.com WAGO 750-8xxx PLC versions prior to Firmware 20 Patch 1 (v03.08.08) suffer from denial of service and user enumeration vulnerabilities. advisories |...

Korenix Technology JetWave CSRF / Command Injection / Missing Authentication

0
Authored by T. Weber | Site sec-consult.com Korenix Technology JetWave products JetWave 2212X, JetWave 2212S, JetWave 2212G, JetWave 2311, and JetWave 3220 suffer from unauthenticated device administration, cross site request...