Hack local network PC using windows theam file.

This module exploits a vulnerability mainly affecting Microsoft Windows XP and Windows 2003. The vulnerability exists in the handling of the Screen Saver path, in the [boot] section. An arbitrary path can be used as screen saver, including a remote SMB resource, which allows for remote code execution when a malicious .theme file is opened, and the "Screen Saver" tab is viewed. The code execution is also triggered if the victim installs the malicious...

Read More

Extract & decrypt Chrome & IE passwords from Remote PC

In previous post i mentioned how we can extract saved passwords from firefox & thunderbird from rempote PC. Today we are going to extract saved passwords from Google chrome & IE. If you want to know more technical detail you can visit this site.Chrome stores all the sign-on secrets into the internal database file called 'Web data' in the current user profile folder. Newer version has moved the login passwords related database into new file...

Read More

Extract & decrypt passwords from Firefox & Thunderbird.

Today we are going to extract password from Fireox & Thunderbird which are saved in browser and then try to decrypt that passwords from remote PC. Before some times ; i posted here that how to extract information from saved sqlite database of skype, firefox, chrome using python script.Most of the morden browser save information in sqlite format. When user enter login information ; firefox asked user to remember password.If user click on remember...

Read More

Pentesting of coldfusion web-application.

ColdFusion is a commercial rapid web application development platform.CFML = ColdFusion Markup LanguageColdFusion = Adobe’s product that handles CFML page/libs– Runs on Windows, Solaris, HP/UX and Linux– Apache, IIS, Jrun   Following modules are Available in metasploit for coldfusion.msf > search coldfusionauxiliary/gather/coldfusion_pwd_props              auxiliary/scanner/coldfusion_rds_check                                         ...

Read More

Exploit for IE 9 on Windows 7 SP1

This is a memory corruption bug found in Microsoft Internet Explorer. On IE 9, it seems to only affect certain releases of mshtml.dll. For example: This module can be used against version  9.0.8112.16446TargetIE 9 on Windows 7 SP1 (mshtml 9.0.8112.16446)msf > use exploit/windows/browser/ms13_059_cflatmarkuppointermsf exploit(ms13_059_cflatmarkuppointer) > set srvhost 192.168.56.1srvhost => 192.168.56.1msf exploit(ms13_059_cflatmarkuppointer)...

Read More