Unauthenticated Sqlinjection that leads to dump data base but this one impersonated Admin and drops a interactive shell

Last update: Nov 09, 2022

Overview

CVE-2021-32099 Pandora_v7.0NG.742

Unauthenticated Sqlinjection that leads to dump database but this one impersonated Admin and drops a interactive shell

Official Blog by the Author

Blog https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained

Usage :

usage: sqlpwn.py [-h] -t TARGET [-f FILENAME]

Exploiting Sqlinjection To impersonate Admin

optional arguments:
-h, --help            show this help message and exit
-t TARGET, --target TARGET
                      Host Ip for the Exploiting with target Port 
-f FILENAME, --filename FILENAME
                      Filename for Shell Upload with php extension

Owner

sam

Pentester | fsociety

GitHub Repository

CVE-2021-22005 - VMWare vCenter Server File Upload to RCE

CVE-2021-22005 - VMWare vCenter Server File Upload to RCE Analyze Usage ------------------------------------------------------------- [*] CVE-2021-220

224 Aug 05, 2022

Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers

CVE-2022-21907 - Double Free in http.sys driver Summary An unauthenticated attacker can send an HTTP request with an "Accept-Encoding" HTTP request he

71 Dec 22, 2022

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service. This tool can help a digital forensic investigator to know the conte

96 Dec 20, 2022

Lite - Lite cracker tool for python

Wellcome to tools Results Install Tools

23 Dec 17, 2022

The Devils Eye is an OSINT tool that searches the Darkweb for onion links and descriptions that match with the users query without requiring the use for Tor.

The Devil's Eye searches the darkweb for information relating to the user's query and returns the results including .onion links and their description

135 Dec 31, 2022

Unauthenticated Sqlinjection that leads to dump data base but this one impersonated Admin and drops a interactive shell

Related tags

Overview

CVE-2021-32099 Pandora_v7.0NG.742

Official Blog by the Author

Owner

sam

CVE-2021-22005 - VMWare vCenter Server File Upload to RCE

Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service

Lite - Lite cracker tool for python

The Devils Eye is an OSINT tool that searches the Darkweb for onion links and descriptions that match with the users query without requiring the use for Tor.

Meterpreter Reverse shell over TOR network using hidden services

NExfil is an OSINT tool written in python for finding profiles by username.

MD5-CRACKER - A gmail brute force app created with python3

GDID (Google Dorks for Information Disclosure)

This collection of tools that makes it easy to secure and/or obfuscate messages, files, and data.

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

GitHub Advance Security Compliance Action

open detection and scanning tool for discovering and fuzzing for Log4J RCE CVE-2021-44228 vulnerability

Cam-Hacker: Ip Cameras hack with python

Genpyteal - Experiment to rewrite Python into PyTeal using RedBaron

Workshop Material on VM-based Deobfuscation

A script to search, scrape and scan for Apache Log4j CVE-2021-44228 affected files using Google dorks

Fast and easy way to rollout on multiple GitLab project file a particular content.

NEW FACEBOOK CLONER WITH NEW PASSWORD, TERMUX FB CLONE, FB CLONING COMMAND. M

Open-source keylogger write in python