Java CMM Remote Code Execution

Java Applet Method Handle Remote Code Execution

Java Applet AverageRangeStatisticImpl Remote Code Execution

Java Applet JMX Remote Code Execution

Java Applet JAX-WS Remote Code Execution

Java 7 Applet Remote Code Execution

Java Applet Field Bytecode Verifier Cache Remote Code Execution

Java Applet Rhino Script Engine Remote Code Execution

Sun Java Web Start BasicServiceImpl Code Execution

Sun Java Applet2ClassLoader Remote Code Execution

Sun Java Runtime New Plugin docbase Buffer Overflow

Java RMIConnectionImpl Deserialization Privilege Escalation

Java Statement.invoke() Trusted Method Chain Privilege Escalation

Java AtomicReferenceArray Type Violation Vulnerability

Sun Java Web Start Plugin Command Line Argument Injection

Java MixerSequencer Object GM_Song Structure Handling Vulnerability

Sun Java JRE AWT setDiffICM Buffer Overflow

Sun Java Calendar Deserialization Privilege Escalation

Java Signed Applet Social Engineering Code Execution

Sun Java Web Start Plugin Command Line Argument Injection

Browser Autopwn Attack

Web Jacking Method

Create a Payload and Listener Attack

Infectious Media Generator Attack

Tab Napping Attack Method

Powershell Attack Vector Method

RATTE (Remote Administration Tool) Attack Method

PyInjector Shellcode Injection Attack 

MS12-043 Microsoft XML Core Services MSXML Uninitialized Memory Corruption

MS12-004 midiOutPlayNextPolyEvent Heap Overflow

MS12-020 Microsoft Remote Desktop Use-After-Free DoS

MS11-093 Microsoft Windows OLE Object File Handling Remote Code Execution

Internet Explorer CSS Recursive Import Use After Free

Windows Media Encoder 9 wmex.dll ActiveX Buffer Overflow

Internet Explorer COM CreateObject Code Execution

Internet Explorer WebViewFolderIcon setSlice() Overflow

Microsoft DirectShow (msvidctl.dll) MPEG-2 Memory Corruption

MS11-050 IE mshtml!CObjectElement Use After Free

Internet Explorer Daxctle.OCX KeyFrame Method Heap Buffer Overflow Vulnerability

Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP)

Internet Explorer createTextRange() Code Execution

Internet Explorer Winhlp32.exe MsgBox Code Execution

Internet Explorer CSS SetUserClip Memory Corruption

Internet Explorer 7 CFunctionPointer Uninitialized Memory Corruption

Microsoft Help Center XSS and Command Execution

Internet Explorer “Aurora” Memory Corruption

Internet Explorer DHTML Behaviors Use After Free

Microsoft Windows Shell LNK Code Execution

MS05-054 Microsoft Internet Explorer JavaScript OnLoad Handler Remote Code Execution

http://en.wikipedia.org/w/index.php?title=Special:LinkSearch

How to Find the Editors of Particular Wikipedia Articles

This site shows some current status and analysis of en.wikipedia. The data upon which this site’s contents are based is publicly available on wikipedia. The author of this site has no affiliation with wikipedia or other wikimedia projects.

http://en.wikichecker.com/article/

How to Convert Wikipedia Article to MP3

Pediaphon is a free service by Andreas Bischoff, which generates MP3 audio files from Wikipedia articles by speech synthesis. The service was developed at the University of Hagen, Germany. These files can be played immediately in the web browser or be downloaded for later use in a MP3-Player. A podcast will be generated for each inquiry.

http://www.pediaphon.org/~bischoff/radiopedia/index_en.html

How to Track Wikipedia Article Page View Statics

stats.grok.se will add a link to a site showing traffic information for any given page on Wikipedia. By default the link is included in a pre-formatted sentence and links to statistics for the previous month. The default behavior can be manipulated using a small set of parameters.

How to View Deleted Wikipedia Webpage

Deletionpedia

Deletionpedia is a web site containing articles deleted from the English Wikipedia between February and September 2008. Its version of each article includes a header with more information about the deletion such as whether a speedy deletion occurred, where the deletion discussion about the article can be found and which editor deleted the article.

http://deletionpedia.dbatley.com/w/index.php?title=Main_Page

Getcountermeasure is an automated script Disable security measures such as antivirus, firewall, and more.

getgui

getgui script is used to enable RDP on a target system.

Telnet

gettelnet script is used to enable telnet on the victim.

Winenum

Winenum script is used to dump tokens, hashes and more

Hostedit

Hostedit Meterpreter script is used to edit host file of windows

Getlocalsubnet

getlocalsubnet script is used to get the local subnet mask of a victim

Checkvm

Checkvm used to see if you exploited a virtual machine 

Killav

Killav used to disable most antivirus programs.

Scraper

Scraper is an automated script that gathers the victim machine environment information

Screenspy

screenspy used to take screenshot f remote pc. 

Keylogrecorder

keylogrecorder used to start keylogger in victim pc. 

Credcollect

credcollect used collect the hashes of victim users.

Firefox 8/9 AttributeChildRemoved() Use-After-Free

Firefox 7/8 (<= 8.0.1) nsSVGValue Out-of-Bounds Access Vulnerability

Mozilla Firefox “nsTreeRange” Dangling Pointer Vulnerability

Mozilla Firefox Array.reduceRight() Integer Overflow

Mozilla Firefox Interleaved document.write/appendChild Memory Corruption

Virus Total is a free service that analyzes suspicious files and URLs and facilitates the quick detection of viruses, worms, Trojans, and all kinds of malware.

https://www.virustotal.com/

AVG Online Web Page Scanner

The AVG Link Scanner® Drop Zone lets you check the safety of individual web pages you are about to visit. You may have received a suspicious link in an e-mail — just copy the URL (web page address) and drop it into the box below. Link Scanner® will examine the web page against 30-day domain threat history reports to see whether it’s hiding any suspicious downloads.

http://www.avg.com.au/resources/web-page-scanner/

URL Black List Checker

Use this form to find out if a list of sites or URL is in the blacklist and in which categories all in one go. Only valid domains and URLs will be accepted.

http://urlblacklist.com/?sec=search

Norton Web Safe

Norton Safe Web is a new reputation service from Symantec. Our servers analyze Web sites to see how they will affect you and your computer.

http://safeweb.norton.com/

Unmask Parasites

Hackers exploit security vulnerabilities in popular web software such as blogs, forums, CMS, image galleries and wikis to insert hidden illicit content into web pages of innocent third-party web sites. Thousands of website owners are unaware that their sites are hacked and infected with parasites.

http://www.unmaskparasites.com/

Website Malware Scanner

Enter a URL (ex. sucuri.net) and the Sucuri Site Check scanner will check the website for known malware, blacklisting status, website errors, and out-of-date software.

http://sitecheck.sucuri.net/scanner/

Havij SQL Injection

Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page.The power of Havij that makes it different from similar tools is its injection methods. The success rate is more than 95% at injectiong vulnerable targets using Havij.The user friendly GUI (Graphical User Interface) of Havij and automated settings and detections makes it easy to use for everyone even amateur users.

Download

Pangolin – Automated SQL Injection Test Tool

Pangolin is a penetration testing, SQL Injection test tool on database security. It finds SQL Injection vulnerabitlities.Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. 

Download

The Mole

The Mole is an automatic SQL Injection exploitation tool. Only by providing a vulnerable URL and a valid string on the site it can detect the injection and exploit it, either by using the union technique or a boolean query based technique.

Download

SQLNinja

Sqlninja’s goal is to exploit SQL injection vulnerabilities on web applications that use Microsoft SQL Server as back end. There are a lot of other SQL injection tools out there but sqlninja, instead of extracting the data, focuses on getting an interactive shell on the remote DB server and using it as a foothold in the target network.

Download

Safe3SI

Safe3SI is one of the most powerful and easy usage penetration tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a kick-ass detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

Download

BSQL Hacker

BSQL (Blind SQL) Hacker is an automated SQL Injection Framework / Tool designed to exploit SQL injection vulnerabilities virtually in any database.

Download

WebBrowserPassView is a password recovery tool that reveals the passwords stored by the following Web browsers: Internet Explorer (Version 4.0 – 9.0), Mozilla Firefox (All Versions), Google Chrome, Safari, and Opera. This tool can be used to recover your lost/forgotten password of any Website, including popular Web sites, like Facebook, Yahoo, Google, and GMail, as long as the password is stored by your Web Browser.

Download

Protected Storage Pass View

Protected Storage PassView is a small utility that reveals the passwords stored on your computer by Internet Explorer, Outlook Express and MSN Explorer. The passwords are revealed by reading the information from the Protected Storage.

Download

Wireless Key View

WirelessKeyView recovers all wireless network security keys/passwords (WEP/WPA) stored in your computer by the ‘Wireless Zero Configuration’ service of Windows XP and by the ‘WLAN AutoConfig’ service of Windows Vista. It allows you to easily save all keys to text/html/xml file, or copy a single key to the clipboard.

Download

VNC Pass View

VNCPassView is a small utility that recover the passwords stored by the VNC tool. It can recover 2 of passwords: password stored for the current logged-on user (HKEY_CURRENT_USER in the Registry), and password stored for the all users.

Download

SniffPass

SniffPass is small password monitoring software that listens to your network, capture the passwords that pass through your network adapter, and display them on the screen instantly. SniffPass can capture the passwords of the following Protocols: POP3, IMAP4, SMTP, FTP, and HTTP (basic authentication passwords).

Download

Bullets Pass View

BulletsPassView is a password recovery tool that reveals the passwords stored behind the bullets in the standard password text-box of Windows operating system and Internet Explorer Web browser. After revealing the passwords, you can easily copy them to the clipboard or save them into text/html/csv/xml file.

Download

Remote Desktop Pass View

Remote Desktop Pass View is a small utility that reveals the password stored by Microsoft Remote Desktop Connection utility inside the .rdp files.

Download