After public release of samba vulnerabilty. Administrators using samba in their envirionment were in high alert. In the Samba open-source software that could enable an attacker to gain root privileges without any authentication. The bug is in all versions of Samba from 3.0.x to 3.6.3, but has been fixed in Samba 3.6.4, which is the [...]
Our first post regarding Intersect, the post exploitation framework can be found here. Recently, an update – Intersect 2.5 – was made available to us!
“Intersect is a post-exploitation framework written in Python. The main goal of this project is to assist penetration testers in the automation of many post exploitation and data exfiltration tasks that [...]
As per new researches show that it is highly probably that many Windows cloud images may be vulnerable to a MS12-020 RDP exploit by default.
People are aware of the cloud variables and that cloud service providers offload the virtual machine security onto the customer as much as possible.
Technical people know this. Not all cloud customers [...]
XSS ChEF is a Chrome Extension Exploitation Framework. Think BeEF for Chrome extensions. Whenever you encounter a XSS vulnerability in Chrome extension, ChEF will ease the exploitation. We have published about Chrome Extensions for web application security for scanning , testing ,reporting etc. In addition to that this is also a great tool.
Features of XSS [...]
Intersect 2.0 is a Python script written to perform automated Post-Exploitation information gathering and reporting. The general idea is that after you have exploited a target, you run this script and it performs a variety of tasks that you would normally need to perform manually. Intersect will collect password files, copy SSH keys, enumerate processes [...]
POC proof-of-concept exploit code for a recently spotted privilege escalation flaw CVE-2012-0056 ( POC Linux privilege escalation exploits ) in the Linux kernel has left Linux vendors scrambling to push out a patch.
As per POC Linux privilege escalation exploits papers flaw affects versions 2.6.39 and above of the Linux kernel code, and the OS’ creator Linus Torvalds published [...]