본문 바로가기

모의해킹 (WAPT)197

728x90
Analysis on mma.php Backdoor Shell All right guys, today let’s have a look on a very common backdoor shell today that allows an attacker to upload arbitrary files on the web server. The name of this shell is mma.php and is commonly named or uploaded in the websites I’ve been inspecting for possible backdoor uploads by using the power of Google dorks.My first encounter with this backdoor shell was like two years ago and I was stil.. 2012. 4. 2.
Domain SQL Injector - Find SQL Injection on all sites hosted on server Hey Guys, Sharing a private python script - "Domain SQL Injector - Error Based SQLi Tool" The script has following features: 1. Crawling : it can crawl all or requested number of pages on a website 2. Reverse IP Look Up : it can find all sites hosted on a shared hosting server 3. Single-Mode Attack : Crawl and find SQLi on single website and report 4. Mass-Mode Attack : Find all sites hosted on .. 2012. 3. 31.
WebSploit Toolkit Version v1.5 WebSploit Is An Open Source Project For Scan And Analysis Remote System From VulnerabilityDescription :[+]Autopwn - Used From Metasploit For Scan and Exploit Target Service [+]wmap - Scan,Crawler Target Used From Metasploit wmap plugin [+]format infector - inject reverse & bind payload into file format [+]phpmyadmin - Search Target phpmyadmin login page [+]lfi - Scan,Bypass local file inclusion .. 2012. 3. 30.
SSLyze v0.4 Released SSLyzeBetter, faster scanner to analyze the configuration of SSL servers.Supports cipher suites scanning, insecure renegotiation verification, session resumption testing, client certificates, and more...Tested on Python 2.6 & 2.7 with Ubuntu and Windows 7, both 32 and 64 bits. Might work on other platforms as well.Based on OpenSSL and a custom SSL Python wrapper.Contact: sslyze /at/ isecpartners.. 2012. 3. 27.
Auto pentesting. Nmap, SSLscans, screenshots, amap! Here’s my automated scanning script. It’s got a few dependencies but will run with a number of threads and will output to a defined folder. #!/bin/bash #__________________________________________________________ # Author: phillips321 forum.gnacktrack.co.uk # License: CC BY-SA 3.0 # Use: Update several applications # Released: www.gnacktrack.co.uk version=1.0 # Dependencies: # nmap # sslscan # gn.. 2012. 3. 21.
728x90
728x90