Soroush Dalili

Aug 31, 2024 | packetstormsecurity.com | Soroush Dalili |Jay Turla |Pedro A. Ribeiro

### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::HttpClientdef initialize(info = {}) super( update_info( info, 'Name' => 'MS10-065 Microsoft IIS 5 NTFS Stream Authentication Bypass', 'Description' => %q{ This module bypasses basic authentication for Internet Information Services (IIS).

Aug 31, 2024 | packetstormsecurity.com | Soroush Dalili |Jay Turla |Kris Katterjohn

### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::HttpServer::HTML include Msf::Exploit::JSObfudef initialize(info={}) super(update_info(info, 'Name' => "MS14-052 Microsoft Internet Explorer XMLDOM Filename Disclosure", 'Description' => %q{ This module will use the Microsoft XMLDOM object to enumerate a remote machine's filenames.

Aug 8, 2023 | soroush.me | Soroush Dalili

In modern web development, while cookies are the go-to method for transmitting session IDs, the .NET Framework also provides an alternative: encoding the session ID directly in the URL. This method is useful to clients that do not support cookies.