Home Tools Page 85

Tools

The latest hacking and hacker tools. Open source offensive and defensive security tools. Browse interactive maps of offensive security tools used by malicious actors and cybercriminals. Check out some live threat maps and malware intelligence databases.

This will be a curated list of mostly open source hacking tools. These can range from Red Teaming offensive security tools to fuzzers and debuggers for malware analysis. We are always looking for new state of the art tools that can be used for security professionals. Please feel free to send us a tool via email or one of our social media accounts.

Artica Proxy 4.40 / 4.50 Authentication Bypass / Privilege Escalation

0
Authored by Jim Becher | Site korelogic.com The Rich Filemanager feature of Artica Proxy versions 4.40 and 4.50 provides a web-based interface for file management capabilities. When the feature is...

Artica Proxy 4.50 Loopback Service Disclosure

0
Authored by Jim Becher, Jaggar Henry | Site korelogic.com Services that are running and bound to the loopback interface on the Artica Proxy version 4.50 are accessible through the proxy...

GliNet 4.x Authentication Bypass

0
Authored by Daniele Linguaglossa GliNet with firmware version 4.x suffers from an authentication bypass vulnerability. Other firmware versions may also be affected. advisories | CVE-2023-46453 Change Mirror Download DZONERZY Security ResearchGLiNet: Router Authentication...

NDtaskmatic 1.0 SQL Injection

0
Authored by nu11secur1ty NDtaskmatic version 1.0 suffers from a remote SQL injection vulnerability. Change Mirror Download ## Title: NDtaskmatic-1.0-by-Mayuri.K Multiple-SQLi## Author: nu11secur1ty## Date: 03/07/2024## Vendor: https://www.mayurik.com/## Software: https://www.sourcecodester.com/php/17217/employee-management-system-php-and-mysql-free-download.html## Reference: https://portswigger.net/web-security/sql-injection## Description:Potential SQLi...

FullCourt Enterprise 8.2 Cross Site Scripting

0
Authored by Omar Sabagh FullCourt Enterprise version 8.2 suffers from multiple cross site scripting vulnerabilities. advisories | CVE-2024-25327 Change Mirror Download # Exploit Title: FullCourt enterprise XSS# Date: 2023-28-12# Exploit Author: Omar Sabagh#...

WordPress Neon Text 1.1 Cross Site Scripting

Authored by Eren Car WordPress Neon Text plugin versions 1.1 and below suffer from a persistent cross site scripting vulnerability. advisories | CVE-2023-5817 Change Mirror Download # Exploit Title: Wordpress Plugin Neon Text...

Solar-Log 200 PM+ 3.6.0 Cross Site Scripting

Authored by Mesut Cetin, Vincent McRae Solar-Log 200 PM+ version 3.6.0 suffers from a persistent cross site scripting vulnerability. advisories | CVE-2023-46344 Change Mirror Download # Exploit Title: Stored XSS in Solar-Log 200...

RAD SecFlow-2 Path Traversal

Authored by Branko Milicevic RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 suffer from a directory traversal vulnerability. advisories | CVE-2019-6268 Change Mirror Download # Exploit Title: Path traversal in...

Customer Support System 1.0 SQL Injection

Authored by Geraldo Alcantara Customer Support System version 1.0 suffers from a remote SQL injection vulnerability in /customer_support/ajax.php. Original discovery of SQL injection in this version is attributed to Ahmed...

F5 BIG-IP Authorization Bypass / User Creation

Authored by W01fh4cker | Site github.com F5 BIG-IP remote user addition exploit that leverages the authorization bypass vulnerability as called out in CVE-2023-46747. advisories | CVE-2023-46747