Products


Splunk Login Bruteforce

This module will bruteforce credentials on a Splunk instance.

2 credits
Citrix XenMobile Server Bruteforce

This module will bruteforce credentials on an instance of Citrix XenMobile server.

2 credits
Raritan PowerIQ Unauthenticated Hidden Administrator Credential Addition

This module attempts to add a hidden admin in vulnerable Raritan PowerIQ instances.

4 credits
TeamPass Password Manager Unauthenticated SQL Injection

This module retrieves usernames and password hashes on vulnerable instances of TeamPass.

5 credits

WebTitan Authenticated Arbitrary File Read

This module attempts to download a file from a vulnerable WebTitan instance.

3 credits
Citrix XenMobile Server Scanner

This module scans for instances of Citrix XenMobile Server.

0 credits
Splunk Search Head Remote Code Execution

This module uses valid credentials to gain a remote shell on Splunk search heads.

5 credits
Mulesoft ESB 3.5.1 Authenticated Privilege Escalation -> RCE

This module will attempt to gain a remote shell on vulnerable Mulesoft instances.

2 credits

Splunk Scanner

This module scans for Splunk instances.

0 credits
TeamPass Password Manager Scanner

This module scans for TeamPass Password Manager instances.

0 credits
SugarCRM Scanner

This module scans for SugarCRM instances.

0 credits
SugarCRM Credential Bruteforce

This module attempts to bruteforce weak credentials.

2 credits

HP Application Lifecycle Management Bruteforce

This module attempts to bruteforce credentials on HP Application Lifecycle Management instances.

3 credits
YouTrack Bruteforce

This module attempts to bruteforce weak credentials on a JetBrains YouTrack instance.

3 credits
YouTrack Scanner

This module scans for instances of Jetbrains YouTrack.

0 credits
AlienVault Login Bruteforce

This module attempts to bruteforce credentials on an AlienVault instance.

2 credits

SonicWALL UMA Bruteforce

This module attempts to bruteforce valid credentials on a SonicWALL UMA instance.

3 credits
HP Application Lifecycle Management Scanner

This module scans for instances of HP Application Lifecycle Management.

0 credits
SonicWall Universal Management Application Scanner

This module scans for SonicWall Universal Management Application instances.

0 credits
Alfresco Bruteforce

This module attempts to bruteforce valid credentials on an Alfresco instance.

3 credits

Alfresco ECM/BPM Scanner

This module scans for instances of the Alfresco enterprise suite.

0 credits
ProcessMaker Scanner

This module attempts to find ProcessMaker instances on the network.

0 credits
JasperReports Bruteforce

This module attempts to bruteforce weak credentials on JasperReports instances.

3 credits
JasperReports Groovy Remote Code Execution

This module exploits an authenticated remote code execution vulnerability in JasperReports.

7 credits

GitHub Enterprise Web-hook RCE

This module exploits an authenticated remote code exection vulnerability in versions 2.8.6 and prior of GitHub Enterprise.

7 credits
JFrog Artifactory Bruteforce

This module attempts to bruteforce weak credentials on JFrog Artifactory instances.

3 credits
JasperReports Scanner

This module scans for instances of JasperReports.

0 credits
JFrog Artifactory Scanner

This module attempts to find JFrog Artifactory instances on the network.

0 credits

ProcessMaker Authenticated File Download

This module exploits an authenticated file download vulnerability in ProcessMaker.

3 credits
ProcessMaker SOAP Remote Code Execution

This module exploits an authenticated remote code execution vulnerability in ProcessMaker.

6 credits
OpenText iHub Bruteforce

This module attempts to bruteforce weak credentials on OpenText iHub instances.

2 credits
OpenText iHub Scanner

This module scans for instances of OpenText iHub on the network.

0 credits

ProcessMaker Credential Bruteforce

This module attempts to bruteforce credentials on a ProcessMaker instance.

3 credits
ManageEngine Applications Manager Scanner

This module scans for instances of ManageEngine Applications Manager on the network.

0 credits
JasperReports Standalone JRXML

This module generates a JasperReports JRXML file with an embedded payload that is run when the report is executed.

3 credits
ManageEngine ServiceDesk Plus Bruteforce

This module attempts to bruteforce weak credentials on ManageEngine ServiceDesk Plus instances.

3 credits

ManageEngine ServiceDesk Plus Scanner

This module scans for instances of ManageEngine ServiceDesk Plus on the network.

0 credits
ManageEngine ServiceDesk Plus Custom Schedule Command Execution

This module exploits intended administrative functionality in the ServiceDesk Plus enterprise application.

7 credits
ManageEngine Applications Manager Bruteforce

This module attempts to brute force weak credentials on a ManageEngine Applications Manager instance.

2 credits
ManageEngine OpManager Bruteforce

This module attempts to bruteforce weak credentials on ManageEngine OpManager instances.

3 credits

ManageEngine OpManager Scanner

This module scans for ManageEngine OpManager instances on the network.

0 credits
Sonatype Nexus 2 Bruteforce

This module attempts to bruteforce weak credentials on a Sonatype Nexus v2 instance.

3 credits
Sonatype Nexus 3 Bruteforce

This module attempts to bruteforce weak credentials on Sonatype Nexus v3 instances.

3 credits
Sonatype Nexus Scanner

This module scans for Sonatype Nexus instances on a network.

0 credits

Re:dash Bruteforce

This module attempts to bruteforce weak credentials on Re:dash instances.

3 credits
Re:dash Scanner

This module scans for instances of Re:dash on the network.

0 credits
Mautic Bruteforce

This module attempts to bruteforce weak credentials on Mautic instances.

2 credits
Mautic Scanner

This module scans for Mautic instances on the network.

0 credits

WebMail Pro PHP Admin Panel Bruteforce

This module attempts to bruteforce weak admin credentials for the WebMail Pro PHP admin panel.

3 credits
WebMail Pro PHP REST API Bruteforce

This module attempts to bruteforce weak admin credentials for the WebMail Pro PHP REST API.

3 credits
WebMail Pro PHP User Bruteforce

This module attempts to bruteforce weak user accounts on WebMail Pro PHP instances.

3 credits
WebMail Pro PHP Scanner

This module scans for WebMail Pro PHP instances on the network.

0 credits

ManageEngine OpManager Authenticated Remote Command Execution

This module uses intended administrative functionality in order to gain a remote shell.

9 credits
ManageEngine Applications Manager Authenticated Remote Command Execution

This module uses intended administrative functionality in order to gain a remote shell.

9 credits
WebMail Pro PHP Authenticated Arbitrary File Read

This module exploits an authenticated arbitrary file read vulnerability in WebMail Pro PHP.

4 credits
ManageEngine AD360 Bruteforce

This module attempts to bruteforce weak credentials on ManageEngine AD360 instances.

3 credits

ManageEngine AD360 Scanner

This module scans for instances of ManageEngine AD360 on the network.

0 credits
Jenkins CI Bruteforce

This module attempts to bruteforce weak credentials on Jenkins CI instances.

2 credits
Jenkins CI Scanner

This module scans for Jenkins CI instances on the network.

0 credits
ManageEngine AD360 Authenticated Remote Code Execution

This module exploits an authenticated remote code execution vulnerability in order to gain a remote shell on the server.

7 credits

ManageEngine ServiceDesk Privilege Escalation

This module exploits a privilege escalation vulnerability in order to generate an administrator technician key used by the API.

3 credits
ManageEngine Applications Manager Unauthenticated Admin Creation

This module exploits an unauthenticated stackable SQL injection in order to add a new admin user to the database.

4 credits
ManageEngine Exchange Reporter Plus Scanner

This module scans for instances of ManageEngine Exchange Reporter Plus on the network.

0 credits
ManageEngine Applications Manager Unauthenticated Username/Password Hash Enumeration

This module exploits an unauthenticated SQL injection in order to enumerate usernames and password hashes from the database.

4 credits

Foreman Scanner

This module scans for instances of Foreman, an open-source provisioning application.

0 credits
Odoo Bruteforce

This module bruteforces weak credentials on Odoo (formerly OpenERP) instances.

3 credits
Odoo Scanner

This module scans for instances of Odoo (formerly OpenERP) on the network.

0 credits
Foreman Bruteforce

This module attempts to bruteforce weak credentials in Foreman, an open-source provisioning application.

2 credits

Foreman Dashboard Widget Authenticated SQL Injection

This module exploits an authenticated SQL injection in Foreman, an open-source provisioning application.

6 credits
Dolibarr ERP & CRM Scanner

This module scans for Dolibarr ERP/CRM instances on the network.

0 credits
Nagios Bruteforce

This module attempts to bruteforce weak credentials on Nagios instances.

3 credits
Phabricator Bruteforce

This module attempts to bruteforce weak credentials on Phabricator instances.

3 credits

Nagios Scanner

This module scans for instances of Nagios on the network.

0 credits
Dolibarr ERP & CRM Bruteforce

This module attempts to bruteforce weak credentials on a Dolibarr CRM/ERP instance.

2 credits
Phabricator Scanner

This module scans for instances of Phabricator on the network.

0 credits
ManageEngine Exchange Reporter Plus Remote Code Execution

This module exploits an unauthenticated remote code execution vulnerability in order to gain a remote shell on the server.

7 credits

View all products

Packs


Wordpress Pack

This pack focuses on Wordpress products

More info
Splunk Pack

This pack focuses on Splunk products

More info
Joomla Pack

This pack focuses on Joomla products

More info
MediaWiki Pack

This pack focuses on MediaWiki modules

More info

ProcessMaker Pack

This pack focuses on ProcessMaker products

More info
ManageEngine Pack

This pack focuses on ManageEngine modules

More info
JasperReports Pack

The pack focuses on JasperReports modules

More info
WebMail Pro Pack

This pack focuses on WebMail Pro modules

More info

OpenOffice Pack

This pack focuses on generating office documents

More info

View all packs

Categories


View all categories