Tag: Unix

• Dirscalate Tool Update – NTLM, Basic, Digest, and Cookie Auth

  I have updated my dirscalate tool to now include support for NTLM, BASIC, Digest, or cookie based authentication to the web application with the directory traversal vulnerability. If you are unfamiliar with the tool, see my post here. Previously, if the site required authentication, you would have had to proxy dirscalate through something like Burp…

  Josh Berry

  September 16, 2014

  Linux, Penetration Testing, Python, Unix

  Burp Suite Pro, Linux, Unix

• Directory Traversal to Root

  I’ve had some success in the past when finding directory traversal vulnerabilities on Linux/Unix hosts and thought I would share a little post on what I’ve found. The vulnerabilities are often found in the unauthenticated portions (convenient) of management applications such as Webmin or ColdFusion and are frequently running with elevated privileges. The first step…

  Josh Berry

  December 28, 2013

  Linux, Metasploit, Penetration Testing, Python, Unix

  DotDotPwn, Linux, Metasploit, Panoptic, Python, Unix