banner
andrewji8

Being towards death

Heed not to the tree-rustling and leaf-lashing rain, Why not stroll along, whistle and sing under its rein. Lighter and better suited than horses are straw sandals and a bamboo staff, Who's afraid? A palm-leaf plaited cape provides enough to misty weather in life sustain. A thorny spring breeze sobers up the spirit, I feel a slight chill, The setting sun over the mountain offers greetings still. Looking back over the bleak passage survived, The return in time Shall not be affected by windswept rain or shine.
telegram
twitter
github
HomeArchives

Dude Suite Web Security Tools - Penetration Testing Toolkit

#渗透147
AI Translation
This post is translated from Chinese into English through AI.View Original
AI-generated summary
The document outlines updates and improvements to a tool, including: 1. Optimizations for data replay interaction and functionality. 2. Fixes for incorrect dictionary reading in data cracking. 3. Enhanced port scanning capabilities, including scanning through firewalls and using domain names. 4. Ability to open web applications from scan results. 5. Accurate display of internal IP addresses. 6. New vulnerability classifications added for recent vulnerabilities. 7. Introduction of a new logo in the current version. The vulnerability database has been updated as of September 18, 2024, listing various SQL injection and file upload vulnerabilities across multiple systems, including: - Meisi CMS - Array Networks APV - Huawang Cloud Conference Management Platform - TXEHR Human Resource Management System - AVCON System Management Platform - MoticDSM - H3C iMC Intelligent Management Center - Yonyou U8 CRM These updates highlight significant security issues that need addressing.

image

github：
https://github.com/x364e3ab6/DudeSuite

  1. Optimize the interaction method and functionality of data replay
  2. Fix the issue of incorrect dictionary reading during data brute force
  3. Port scanning can now scan ports blocked by firewalls
  4. Port scanning can now open web applications in the browser by double-clicking on the scan results
  5. Port scanning can now directly use domain names for scanning
  6. IP address queries can correctly display internal network addresses
  7. The vulnerability classification for vulnerability verification has added the latest vulnerabilities showing those added in the last 30 days
  8. The current version has enabled a new LOGO

Vulnerability database update [20240918]
Meisi CMS Video Management System
SQL Injection Array Networks APV Application Delivery System Command Execution Vulnerability
Huawang Cloud Conference Management Platform Multiple SQL Injection Vulnerabilities
Huawang Cloud Conference Management Platform checkDoubleUserNameForAdd SQL Injection
Shared Human Resource Management System TXEHR V15 SFZService.asmx SQL Injection
AVCON System Management Platform download.action Arbitrary File Reading Vulnerability
Zhelin Machinery M9ERP DownloadInpFile Arbitrary File Reading Vulnerability
MoticDSM Micronaut Digital Slice Management System Arbitrary File Reading Vulnerability
Sailan Enterprise Management System System_FocusList_SubmitUploadify Arbitrary File Upload Vulnerability
Sailan Enterprise Management System GetExcellTemperature SQL Injection
Shared TXEHR V15 Human Resource Management Platform hdlUploadFile.ashx Arbitrary File Upload Vulnerability
Yonyou GRP-U8 bx_dj_check.jsp SQL Injection
H3C iMC Intelligent Management Center autoDeploy Remote Code Execution
Yitian Intelligent eHR CreateUser Arbitrary User Addition Vulnerability
Yonyou U8 CRM exportdictionary.php SQL Injection
Sailan Enterprise Management System EHR_Holidays_SubmitUploadify Arbitrary File Upload Vulnerability
JimuReport Building Block Report Permission Bypass Vulnerability

Loading...
Ownership of this post data is guaranteed by blockchain and smart contracts to the creator alone.