Showing 1 - 7 of 7

Files from Jos Wetzels

DarkComet Server Remote File Download: Posted Aug 31, 2024; Authored by Jesse Hertz, Shawn Denbow, Jos Wetzels | Site metasploit.com; This Metasploit module exploits an arbitrary file download vulnerability in the DarkComet C&C server versions 3.2 and up. The exploit does not need to know the password chosen for the bot/server communication.; tags | exploit, arbitrary; SHA-256 | a1252181a85cd2650c1262e95cc84b2277e6c3314320ffa2d33bd405b810c6e2; Download | Favorite | View

DarkComet Server 3.2 Remote File Download: Posted Jun 22, 2016; Authored by Jesse Hertz, Shawn Denbow, Jos Wetzels | Site metasploit.com; This Metasploit module exploits an arbitrary file download vulnerability in the DarkComet C&C server versions 3.2 and up. The exploit does not need to know the password chosen for the bot/server communication.; tags | exploit, arbitrary; SHA-256 | 526875de4b2f6bc5ec72d1ffc0e835dfcf46ebb40dc25640bde82c28768474fd; Download | Favorite | View

Poison Ivy 2.1.x C2 Buffer Overflow: Posted Jun 9, 2016; Authored by Jos Wetzels | Site metasploit.com; This Metasploit module exploits a stack buffer overflow in the Poison Ivy 2.1.x C&C server. The exploit does not need to know the password chosen for the bot/server communication.; tags | exploit, overflow; SHA-256 | 4f558f9b55f9f8cc84972af4fc3f4cdbdcf5968234547a9e4d1b6b5291586cf8; Download | Favorite | View

HumHub 0.10.0 File Upload / Remote Code Execution: Posted Feb 14, 2015; Authored by Jos Wetzels; HumHub versions 0.10.0 and below suffer from .htaccess file upload and remote code execution vulnerabilities.; tags | advisory, remote, vulnerability, code execution, file upload; SHA-256 | 270e4348775db45bf8d7044ae1b7d6bb66a03193fd05759df6b2527b2e04fce4; Download | Favorite | View

Humhub Insecure Password Validation / Reset: Posted Dec 13, 2014; Authored by Jos Wetzels; Humhub versions 0.10.0-rc.1 and below suffer from insecure password validation and password reset vulnerabilities.; tags | exploit, vulnerability; SHA-256 | a0c970925cf93592f6e24c8b8beb06e6c309e87a56aa82420855febf69f24445; Download | Favorite | View

Humhub 0.10.0-rc.1 Cross Site Scripting / SQL Injection: Posted Dec 9, 2014; Authored by Jos Wetzels, Emiel Florijn; Humhub versions 0.10.0-rc.1 and below suffer from cross site scripting and remote SQL injection vulnerabilities.; tags | exploit, remote, vulnerability, xss, sql injection; SHA-256 | a8b814b89548826f53744a839edb39b524a3238eaea84c586c85c33e616b62ac; Download | Favorite | View

Yii Framwork CmsInput Improper XSS Filter: Posted Dec 3, 2014; Authored by Jos Wetzels; Yii framework's CmsInput extension versions 1.2 and prior suffer from an improper cross site scripting sanitation implementation.; tags | exploit, xss; SHA-256 | ca8da68b1474bc4281b1f32954bc5774467cd5f06b1ea17ad128a0eaed3567b7; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days