vBulletin 5.x.x RCE Mass Exploiter

Hello Readers,
Recently i shared a exploit that exploits vBulletin 5.x.x . A Remote Code Execution Vulnerability[RCE]

So today i’m sharing a mass exploiting tool for it, this tool coded by my one of good
friend . Mr.MaGNom

You can download this script/tool from pastebin: Click here for download

Disclaimer::

I take no responsibility for the damage caused by this tutorial/article. This article has been shared for educational purpose only.

Joomla Sexy Contact Form Arbitrary File Upload Vulnerability

Google Dork: inurl:”/components/com_sexycontactform/”

Google Dork: intext:””Powered by sexycontactform”


Exploit :components/com_sexycontactform/fileupload/index.php

Access Your Shell :
http://www.victim.com/components/com_sexycontactform/fileupload/files/YourShellName.php

code to exploit this vulnerability : Click Here For Download Script

Disclaimer:

I take no responsibility for the damage caused by this tutorial/article. This article has been shared for educational purpose only.

vBulletin Remote Code Execution[RCE]

Hi there Reader’s

Today i’m gonna show you 
the new vulnerability discovered in vBulletin 5.x.x
A RCE[Remote Code Execution]
i hope you know what is RCE ,

If you don’t know here you can learn what it is 
OWASP Code Injection

Watch video demo for explanation, how to use this exploit.
Hope you Like it.

Click Here For Video Demo

Disclaimer:

I take no responsibility for the damage caused by this tutorial/article. This article has been shared for educational purpose only.

Android Stagefright Remote Code Execution Exploit[RCE]

In July 2015, security company Zimperium announced that it had discovered a ‘UNICORN’ of a vulnerability inside the Android OS. More details were publicly disclosed at the BlackHat conference in early August.


Here is the tool/script for exploiting vulnerable Android Devices

You can download this script from here : Click Here For Download

WordPress Themes Scanner

Hello Readers,

Today i’m here to share a very good script, this script has function to detect which theme the wordpress site using , this script has some wordpress themes name which are vulnerable to LFD/Local File Download

so this script help you when you pentesting a wordpress site.

Here is script you can download this script from pastebin : Click Here For Download

Subdomain Scanner

Here is the Script For scanning subdomains. This is script is very helpfull when you doing Web pentesting this will help you in gathering info about website how many sub domains the website has mostly when we do web penetration We should pentest subdomain because they are not soo secure then the main site.

Hope you like this script i will share more quality staff as soon as possible,

Thanks.


You can download this script from pastebin: Click Here For Download


This script coded by my one of good friend Mr.MaGNoM

Joomla com_tag Sql Injection Exploit

Hello Viewers,
Now i’m going to show you a new bug in joomla cms
this new bug is sql injection vulnerability in joomla com_tag component
so let’s start exploting


use this dork to find site’s : /index.php?option=com_tag

Watch Explanation Video Here

Hope you enjoy it ,
Thanks for Watching.
i will make more video as soon as possible
keep supporting
subscribe like share (Y) 
Thanks 🙂

Joomla com_cckjseblod local file inclusion/local file download Exploit

Hello Viewers,

Today i’m gonna show you how to use this joomla exploit to owned a site,

Okay, 

this is the vulnerable joomla component we will be exploiting 

com_cckjseblod

 

you can use this google dork to find many vuln site’s on internet

inurl:/index.php?option=com_cckjseblod

 

and after you enter this dork to the google you will see lot’s of site’s

so now how you recognize the vulnerable site

 

i’m gonna show you how 

just by adding this link after your target site

/index.php?option=com_cckjseblod&task=download&file=configuration.php

 

like : http://www.victim.com/index.php?option=com_cckjseblod&task=download&file=configuration.php

 

if the site is vulnerable the configuration.php file will be downloaded

and it’s pain when you try every single site manually so there is guy named,

Mr.Magnom coded a exploit for exploiting multiple site’s at the time, this is cool and time saving , isn’t it, 

so i’m gonna show you how this script works okay, first you need a list of website’s which you will be exploiting , you can use this dork with google-dorker

to find site’s or you can manually make a list of site , there are lot’s of google-dorker out there just search and you will find a good one ,, if n0t then use it manually

 

i made a list for testing on my video, i’m not responsible for any wrong act you’ll done. use these tools at your own risk so let’s start

 

you can download the script from here : Download Script From Here

Youtube video link to watch the explanation : Click Here For Watching The Video
or

You can watch from here

 

for using this script you must have php installed on your computer.

 

Thanks for Reading and Watching,

i will post more stuff as soon as possible.

stay connected. 🙂

Advance Bash Scripting-Guide by (securityhackers.wordpress.com)

This book is for learning Advance Bash Scripting , but this started from very basic’s so no need to download another source for learning basic’s first you can download and start learning now, Hope you enjoy it, Thanks.

Advance Bash Scripting-Guide by (securityleets.wordpress.com)

Python Algorithms, Mastering Basic Algorithms in the Python Language by (securityhackers.wordpress.com)

Download Here

This book is for understanding Basic’s of Algorithms in Python Language you need basic knowledge about python , what is it ? , Python is a scripting language you can use it to code almost anything you want.

You can download Python setup from the Official site of Python : Python Setup Download

Python Algorithms, Mastering Basic Algorithms in the Python Language