EmreOvunc/OpenEMR_Vulnerabilities

Stars
12
Rank 1,597,372 (Top 32 %)
Language
Python
Created over 4 years ago
Updated almost 4 years ago

EmreOvunc/OpenEMR_Vulnerabilities

EmreOvunc

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious php codes.

Python-SYN-Flood-Attack-Tool

Python SYN Flood Attack Tool, you can start SYN Flood attack with this tool. Simple and efficient.

Linux-System-Management-Scripts-Tricks

Linux Security & Linux Hardening & Linux Management & Linux Configuration

Hacktrick2017

Python for Hackers course sample codes.

ARP-Poisoning-Tool

ARP Poisoning Tool, it creates entries on target's ARP Table. The things which you need only are Destination IP and MAC address.

MyDailyScripts

I use all of scripts in this repository daily and schedule them to control my systems. Also, it includes all of my penetration tests scripts.

Log-Analysis

SSH & Basic Web Applications brute-forcing attempts are visible in your mailbox with this tool.

eLdap-Ldap-Search-and-Filter

eLdap is a tool that helps users searching and filtering queries in Ldap environment.

Buffer-Overflow-PoC

Examples of simple code patterns causing BOF

Icmp-Syn-Flood

Demonstrating ICMP, SYN, Xmas flood attacks to analyze results.

FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability

Local File Inclusion (LFI) in FHEM 6.0 allows an attacker to include a file, it can lead to sensitive information disclosure.

Python3_Blockchain_Project

Blockchain server, mining server and proof-of-work, python power

mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password

CVE-2018-11311 | mySCADA myPRO 7 Hardcoded FTP Username and Password Vulnerability

Birolla-Django-Request-Parser

Birol for your requests... Birolla is a basic request parser written in Django.

Odoo-12.0-LFI-Vulnerabilities

Odoo 12.0 allows remote attackers to read local files.

Honeypot-Blacklists

All of IP's comes from my public honeypot.

Subnetting

Network IP & Subnetting & CIDR & Python Subnet Tool

Snort-IPS-IDS

Contains all snort configurations with 'drop' rules.

Vtiger-CRM-Vulnerabilities

Vtiger CRM v7.2.0 has Cross-Site Scripting (XSS) and directory listing vulnerabilities.

Tureng-Machine

The tool is translating [EN-TR] or [TR-EN] by using tureng.com

RSA-Encryption-Decryption-Tool

RSA Encryption Decryption Tool

NSAT

N.S.A.T was a legend! (2016-2017)

Process-Injection-Process-Hollowing-T1055.012

Execution of the malicious code is masked under a legitimate process.

OpenSource-ERP-SQL-Injection

CVE-2019-5893 | OpenSource ERP application has SQL Injection vulnerability.

zIPam-Log-Analyzer

zIPam helps security analyst to analyze network logs from an excel file. It runs 'whois' request to find organizations for blue-teams.

Medintux-V2.16.000-Reflected-XSS-Vulnerability

Reflected XSS in the Medintux v2.16.000 can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.

GameDesign

We designed a game called 'BlackHat' in 2016.

Coin-MarketCap

Cryptocurrencies Market Cap | Trade and Exchange Python Tool Script

mySCADA-myPRO-7-projectID-Disclosure

CVE-2018-11517 | mySCADA myPRO v7.0.46 has another vulnerability to discover all projects in the system.

EmreOvunc

Shredder

Shredder is planning to erase the whole operating system.

Http-Headers-and-Web-Services-Screenshots

It scans given IP address or Domain name and takes screenshots if available.

FileRun-Vulnerabilities

FileRun application has many vulnerabilities such as cross-site scripting, open redirection, directory listing..

Digital-Signature-Implementation-in-Sage

Digital Signature Implementation in Sage

Eaton-Intelligent-Power-Manager-Local-File-Inclusion

CVE-2018-12031 | LFI in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file, it can lead to sensitive information disclosure, denial of service and code execution.

Twitter-Archive

Twitter Archive

Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting

A stored cross-site scripting (XSS) in Nagios Log Server 2.1.7 can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.

CyBroHttpServer-v1.0.3-Directory-Traversal

Directory Traversal in CyBroHttpServer v1.0.3 allows an attacker to read sensitive informations.

Password-Generator

Password Generator

Affine-Crypto-System-Sage

Explaining Affine Crypto System on Sage

GaziSeConf2017

GaziSeConf etkinliği için hazırlamış olduğum sunum.

CyBroHttpServer-v1.0.3-Reflected-XSS

Reflected XSS in CyBroHttpServer v1.0.3 impacts users who open a maliciously crafted link or third-party web page.

WebPort-v1.19.1-Reflected-XSS

CVE-2019-12460|Reflected XSS in WebPort-v1.19.1 impacts users who open a maliciously crafted link or third-party web page.

Pandora-FMS-7.0-NG-747-Stored-XSS

Three stored cross-site scripting (XSS) in Pandora FMS 7.0 NG 747 can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.

Nagios-XI-Reflected-XSS

A reflected cross-site scripting (XSS) in Nagios XI 5.7.1 can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.