Home Tools Page 508

Tools

The latest hacking and hacker tools. Open source offensive and defensive security tools. Browse interactive maps of offensive security tools used by malicious actors and cybercriminals. Check out some live threat maps and malware intelligence databases.

This will be a curated list of mostly open source hacking tools. These can range from Red Teaming offensive security tools to fuzzers and debuggers for malware analysis. We are always looking for new state of the art tools that can be used for security professionals. Please feel free to send us a tool via email or one of our social media accounts.

ZTE MF253V 1.0.0B04 XSS / CSRF / Hardcoded Password

0
Authored by T. Weber, S. Robertz | Site sec-consult.com ZTE WLAN router MF253V version 1.0.0B04 suffers from cross site request forgery, hardcoded password, outdated component, and cross site scripting vulnerabilities. Change...

Wondershare Driver Install Service Help 10.7.1.321 Unquoted Service Path

0
Authored by Luis Sandoval Wondershare Driver Install Service Help version 10.7.1.321 suffers from an unquoted service path vulnerability. Change Mirror Download # Exploit Title: Wondershare Driver Install Service help 10.7.1.321 - 'ElevationService'...

osCommerce 2.3.4.1 Cross Site Scripting

0
Authored by Emre Aslan osCommerce version 2.3.4.1 suffers from a persistent cross site scripting vulnerability. Change Mirror Download # Exploit Title: osCommerce 2.3.4.1 - 'title' Persistent Cross-Site Scripting# Date: 2020-11-19# Exploit Author:...

SyncBreeze 10.0.28 Remote Buffer Overflow

0
Authored by Abdessalam King SyncBreeze version 10.0.28 suffers from a remote buffer overflow vulnerability. Change Mirror Download # Exploit Title: SyncBreeze 10.0.28 - 'password' Remote Buffer Overflow# Date: 18-Sep-2020# Exploit Author: Abdessalam...

WordPress Simple File List Unauthenticated Remote Code Execution

0
Authored by h00die, coiffeur | Site metasploit.com This Metasploit module exploits WordPress Simple File List plugin versions prior to 4.2.3, which allows remote unauthenticated attackers to upload files within a...

Kong Gateway Admin API Remote Code Execution

0
Authored by Graeme Robinson | Site metasploit.com This Metasploit module uses the Kong admin API to create a route and a serverless function plugin that is associated with the route....

OpenMediaVault rpc.php Authenticated PHP Code Injection

0
Authored by Anastasios Stasinopoulos | Site metasploit.com This Metasploit module exploits an authenticated PHP code injection vulnerability found in openmediavault versions before 4.1.36 and 5.x versions before 5.5.12 inclusive in...

Barco wePresent Insecure Firmware Image

0
Authored by Matthew Bergin, Jim Becher | Site korelogic.com Barco wePresent WiPG-1600W versions 2.5.1.8, 2.5.0.25, 2.5.0.24, and 2.4.1.19 have firmware that does not perform verification of digitally signed firmware updates...

Boxoft Audio Converter 2.3.0 Buffer Overflow

0
Authored by Luis Martinez Boxoft Audio Converter version 2.3.0 suffers from a buffer overflow vulnerability. Change Mirror Download # Exploit Title: Boxoft Audio Converter 2.3.0 - '.wav' Buffer Overflow (SEH)# Discovery by:...

TP-Link TL-WA855RE V5_200415 Device Reset Authentication Bypass

0
Authored by malwrforensics The TP-Link TL-WA855RE V5_200415 suffers from a flow where an unauthenticated attacker can reset the device and then set a new administrator password. Change Mirror Download # Exploit Title:...