Showing posts with label Exploit. Show all posts
Showing posts with label Exploit. Show all posts

23 August 2011

Exploring Armitage User Interface

The Armitage user interface has three main panels :
Modules
    • The modules panel lets you launch a Metasploit auxiliary module, throw an exploit, or generate a payload.

22 August 2011

XSS Vulnerability in Wordpress 3.2.1


Improper sanitized code in Wordpress Core Module(post-template. 
php) Causing Cross site Scripting. This file can be finded in 
directory /wp-includes. Author can simply Update his Post title
to <a><script>alert('1');</script></a> and its will give out 
alert on index page and post page.

17 August 2011

Armitage Feature

Armitage Feature like :
1. Discovery
  • Armitage provide several Host Management features available in metasploit.
  • You can import hosts and launch scans to buildup a database of possible targets and visualize them on the screen, working with visualizations is more interactive when you right click on them and configures the options and settings according to your network environment.

Armitage – The Ultimate Attack Platform for Metasploit

To use Armitage, it is necessary to understand Metasploit. Metasploit is a command line tool. Anything you do in Armitage is translated into a command that Metasploit understands. To make it easier and funnier “Raphael Mudge” designed Armitage, which is a user interface for Metasploit.Armitage is a graphical management tool for Metasploit. It helps you to indulge your senses by visualizing your targets, recommends exploits and exposes the advance capabilities of the framework.

25 July 2011

Where do vulnerabilities come from?

Programming mistakes cause most vulnerabilities in software. A common mistake is failing to check the size of data buffers – a kind of storage bin of memory where a computer process executes its functions. When a buffer overflows, it overwrites data in adjacent memory buffers. This corrupts the stack or heap areas of memory, which may allow the execution of an attacker’s code on that machine via a virus, worm, or other unpleasant exploit.