EmreOvunc/Odoo-12.0-LFI-Vulnerabilities

Stars
8
Rank 2,099,232 (Top 42 %)
Language
Created over 5 years ago
Updated over 4 years ago

EmreOvunc/Odoo-12.0-LFI-Vulnerabilities

EmreOvunc

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Odoo 12.0 allows remote attackers to read local files.

Python-SYN-Flood-Attack-Tool

Python SYN Flood Attack Tool, you can start SYN Flood attack with this tool. Simple and efficient.

Linux-System-Management-Scripts-Tricks

Linux Security & Linux Hardening & Linux Management & Linux Configuration

Hacktrick2017

Python for Hackers course sample codes.

ARP-Poisoning-Tool

ARP Poisoning Tool, it creates entries on target's ARP Table. The things which you need only are Destination IP and MAC address.

MyDailyScripts

I use all of scripts in this repository daily and schedule them to control my systems. Also, it includes all of my penetration tests scripts.

Log-Analysis

SSH & Basic Web Applications brute-forcing attempts are visible in your mailbox with this tool.

eLdap-Ldap-Search-and-Filter

eLdap is a tool that helps users searching and filtering queries in Ldap environment.

Buffer-Overflow-PoC

Examples of simple code patterns causing BOF

Icmp-Syn-Flood

Demonstrating ICMP, SYN, Xmas flood attacks to analyze results.

FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability

Local File Inclusion (LFI) in FHEM 6.0 allows an attacker to include a file, it can lead to sensitive information disclosure.

Python3_Blockchain_Project

Blockchain server, mining server and proof-of-work, python power

OpenEMR_Vulnerabilities

OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious php codes.

mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password

CVE-2018-11311 | mySCADA myPRO 7 Hardcoded FTP Username and Password Vulnerability

Birolla-Django-Request-Parser

Birol for your requests... Birolla is a basic request parser written in Django.

Honeypot-Blacklists

All of IP's comes from my public honeypot.

Subnetting

Network IP & Subnetting & CIDR & Python Subnet Tool

Snort-IPS-IDS

Contains all snort configurations with 'drop' rules.

Vtiger-CRM-Vulnerabilities

Vtiger CRM v7.2.0 has Cross-Site Scripting (XSS) and directory listing vulnerabilities.

Tureng-Machine

The tool is translating [EN-TR] or [TR-EN] by using tureng.com

RSA-Encryption-Decryption-Tool

RSA Encryption Decryption Tool

NSAT

N.S.A.T was a legend! (2016-2017)

Process-Injection-Process-Hollowing-T1055.012

Execution of the malicious code is masked under a legitimate process.

OpenSource-ERP-SQL-Injection

CVE-2019-5893 | OpenSource ERP application has SQL Injection vulnerability.

zIPam-Log-Analyzer

zIPam helps security analyst to analyze network logs from an excel file. It runs 'whois' request to find organizations for blue-teams.

Medintux-V2.16.000-Reflected-XSS-Vulnerability

Reflected XSS in the Medintux v2.16.000 can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.

GameDesign

We designed a game called 'BlackHat' in 2016.

Coin-MarketCap

Cryptocurrencies Market Cap | Trade and Exchange Python Tool Script

mySCADA-myPRO-7-projectID-Disclosure

CVE-2018-11517 | mySCADA myPRO v7.0.46 has another vulnerability to discover all projects in the system.

EmreOvunc

Shredder

Shredder is planning to erase the whole operating system.

Http-Headers-and-Web-Services-Screenshots

It scans given IP address or Domain name and takes screenshots if available.

FileRun-Vulnerabilities

FileRun application has many vulnerabilities such as cross-site scripting, open redirection, directory listing..

Digital-Signature-Implementation-in-Sage

Digital Signature Implementation in Sage

Eaton-Intelligent-Power-Manager-Local-File-Inclusion

CVE-2018-12031 | LFI in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file, it can lead to sensitive information disclosure, denial of service and code execution.

Twitter-Archive

Twitter Archive

Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting

A stored cross-site scripting (XSS) in Nagios Log Server 2.1.7 can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.

CyBroHttpServer-v1.0.3-Directory-Traversal

Directory Traversal in CyBroHttpServer v1.0.3 allows an attacker to read sensitive informations.

Password-Generator

Password Generator

Affine-Crypto-System-Sage

Explaining Affine Crypto System on Sage

GaziSeConf2017

GaziSeConf etkinliği için hazırlamış olduğum sunum.

CyBroHttpServer-v1.0.3-Reflected-XSS

Reflected XSS in CyBroHttpServer v1.0.3 impacts users who open a maliciously crafted link or third-party web page.

WebPort-v1.19.1-Reflected-XSS

CVE-2019-12460|Reflected XSS in WebPort-v1.19.1 impacts users who open a maliciously crafted link or third-party web page.

Pandora-FMS-7.0-NG-747-Stored-XSS

Three stored cross-site scripting (XSS) in Pandora FMS 7.0 NG 747 can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.

Nagios-XI-Reflected-XSS

A reflected cross-site scripting (XSS) in Nagios XI 5.7.1 can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.