Home Tools Page 53

Tools

The latest hacking and hacker tools. Open source offensive and defensive security tools. Browse interactive maps of offensive security tools used by malicious actors and cybercriminals. Check out some live threat maps and malware intelligence databases.

This will be a curated list of mostly open source hacking tools. These can range from Red Teaming offensive security tools to fuzzers and debuggers for malware analysis. We are always looking for new state of the art tools that can be used for security professionals. Please feel free to send us a tool via email or one of our social media accounts.

Telerik Report Server Deserialization / Authentication Bypass

Authored by Sina Kheirkhah | Site summoning.team Telerik Report Server deserialization and authentication bypass exploit chain that makes use of the vulnerabilities noted in CVE-2024-4358 and CVE-2024-1800. advisories | CVE-2024-1800, CVE-2024-4358

Veeam Recovery Orchestrator Authentication Bypass

Authored by Sina Kheirkhah | Site summoning.team Veeam Recovery Orchestrator authentication bypass proof of concept exploit. advisories | CVE-2024-29855

Veeam Backup Enterprise Manager Authentication Bypass

Authored by Sina Kheirkhah | Site summoning.team Veeam Backup Enterprise Manager authentication bypass proof of concept exploit. Versions prior to 12.1.2.172 are vulnerable. advisories | CVE-2024-29849

VMWare Aria Operations For Networks Command Injection

Authored by Sina Kheirkhah | Site summoning.team VMWare Aria Operations for Networks (vRealize Network Insight) is vulnerable to command injection when accepting user input through the Apache Thrift RPC interface....

ResidenceCMS 2.10.1 Cross Site Scripting

Authored by Jeremia Geraldi Sihombing ResidenceCMS versions 2.10.1 and below suffer from a persistent cross site scripting vulnerability. advisories | CVE-2024-39143 Change Mirror Download # Exploit Title: ResidenceCMS <= 2.10.1 Stored Cross-Site Scripting...

Sharp Multi-Function Printer 18 Vulnerabilities

Authored by Pierre Kim | Site pierrekim.github.io 308 different models of Sharp Multi-Function Printers (MFP) are vulnerable to 18 different vulnerabilities including remote code execution, local file inclusion, credential disclosure,...

Zyxel parse_config.py Command Injection

Authored by jheysel-r7, SSD Secure Disclosure technical team | Site metasploit.com This Metasploit module exploits vulnerabilities in multiple Zyxel devices including the VPN, USG and APT series. The affected firmware...

Toshiba Multi-Function Printers 40 Vulnerabilities

Authored by Pierre Kim | Site pierrekim.github.io 103 models of Toshiba Multi-Function Printers (MFP) are vulnerable to 40 different vulnerabilities including remote code execution, local privilege escalation, xml injection, and...

Helmholz Industrial Router REX100 / MBConnectline mbNET.mini 2.2.11 Command Injection

Authored by S. Dietz, Basic aGVsbWhvbHo6cm91dGVy | Site cyberdanube.com Helmholz Industrial Router REX100 and MBConnectline mbNET.mini versions 2.2.11 and below suffer from a command injection vulnerability. advisories | CVE-2024-5672 Change Mirror Download CyberDanube...

Cinema Booking System 1.0 SQL Injection / Cross Site Request Forgery

Authored by bRpsd Cinema Booking System version 1.0 suffers from remote SQL injection and cross site request forgery vulnerabilities. Change Mirror Download @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ .:. Exploit Title > Cinema Booking System - Multiple...