A vulnerability exists within the Microsoft Server Message Block 3.1.1 (SMBv3) protocol that can be leveraged to execute code on a vulnerable server. This local exploit implementation leverages this flaw to elevate itself before injecting a payload into winlogon.exe.

A git clone action can leak cached / stored credentials for github.com to example.com due to insecure handling of newlines in the credential helper protocol.

PTP-RAT is a proof of concept that allows data theft via screen-share protocols. Each screen flash starts with a header. This contains a magic string, "PTP-RAT-CHUNK" followed by a sequence number. When the receiver is activated, it starts taking screenshots at twice the transmission frequency (the Nyquist rate). When it detects a valid header, it decodes the pixel colour information and waits on the next flash. As soon as a valid header is not detected, it reconstructs all the flashes and saves the result to a file. To transfer a file, you run an instance of the Rat locally on your hacktop, and set that up as a receiver. Another instance is run on the remote server and this acts as a sender. You simply click on send file, and select a file to send. The mouse pointer disappears and the screen begins to flash as the file is transmitted via the pixel colour values. At the end of the transfer, a file-save dialog appears on the receiver, and the file is saved.

Macs Framework version 1.14f suffers from cross site scripting and remote SQL injection vulnerabilities.

Centreon version 19.10.5 suffers from a remote SQL injection vulnerability.

PMB version 5.6 suffers from a remote SQL injection vulnerability.

User Management System version 2.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Complaint Management System version 4.2 suffers a remote SQL injection vulnerability that allows for authentication bypass.

Online Shopping System Advanced version 1.0 suffers from a remote SQL injection vulnerability.

Online Course Registration 2.0 suffers from authentication bypass and remote SQL injection vulnerabilities.

Geeklog version 2.2.1 suffers from a remote SQL injection vulnerability.

Project Open CMS version 5.0.3 suffers from cross site scripting and remote SQL injection vulnerabilities.

School ERP Pro version 1.0 suffers from a remote SQL injection vulnerability.

Open-AudIT version 3.2.2 suffers from OS command injection, arbitrary file upload, and remote SQL injection vulnerabilities.

hits script version 1.0 suffers from a remote SQL injection vulnerability.

iJoomla AdAgency component version 6.0.9 suffers from a remote SQL injection vulnerability.

Fishing Reservation System suffers from multiple remote SQL injection vulnerabilities.

addressbook version 9.0.0.1 suffers from a remote SQL injection vulnerability.

Online Scheduling System version 1.0 suffers from a remote SQL injection vulnerability.

Pisay Online E-Learning System version 1.0 suffers from remote SQL Injection and code execution vulnerabilities.

YesWiki cercopitheque version 2020.04.18.1 suffers from a remote SQL injection vulnerability.

Online Clothing Store version 1.0 suffers from a remote SQL injection vulnerability.

Online AgroCulture Farm Management System version 1.0 suffers from a remote SQL injection vulnerability.

School File Management System version 1.0 suffers from a remote SQL injection vulnerability.

Car Park Management System version 1.0 suffers a remote SQL injection vulnerability that allows for authentication bypass.

WordPress ChopSlider plugin version 3 suffers from a remote SQL injection vulnerability.

Creative Zone suffers from a remote SQL injection vulnerability.

This is a simple perl script to perform dictionary attacks against the KeePass password manager.

Simple script to perform RC4 encryption / decryption.

Script that performs RSA factorization attack using Fermat's algorithm.

This is a script to perform SSH/SSL RSA private key passphrase enumeration with a dictionary attack.

Script to perform basic XOR file encryption / decryption.