[ormerishere]

Hi,
I've been searching for a while now some tools that Security companies are not that aware of.
I'm not talking about rare 0-days in here, but unpopular 1-days tools\ vulnerabilities i can use.
If you have something that can be helpful - please post in here. mostly im targeting the HTTP protocol, but anything will be great.
I'm new in here so if you can direct me to places that can help me - that would be great.

Thanks,
Ormer

[Ampere]

The only tools that are truely unknown to Security companies, are scripts that you create yourself.

You need a plan of what you what to accomplish, then figure out how to achieve that, then how it could be exploited, then how to execute that exploit.
HTTP isnt the only method of attack!.

[frank3nstien]

Hi,
I've been searching for a while now some tools that Security companies are not that aware of.
I'm not talking about rare 0-days in here, but unpopular 1-days tools\ vulnerabilities i can use.
If you have something that can be helpful - please post in here. mostly im targeting the HTTP protocol, but anything will be great.
I'm new in here so if you can direct me to places that can help me - that would be great.

Thanks,
Ormer

I am not sure this what you are referring for or not, Below is the script which i made years ago which targeting HTTP.

And of course own scripts are unknown to companies

https://github.com/frank3nstien/web_serv...ser_script

If this is kind of thing you looking for DM me i will send you my scripts which i made personally.

[ormerishere]

I am not sure this what you are referring for or not, Below is the script which i made years ago which targeting HTTP.

And of course own scripts are unknown to companies


If this is kind of thing you looking for DM me i will send you my scripts which i made personally.

YES!
Stuff like this. But uncommon ones that security comps did not block.
I'm now focusing on trying to get remote access on Azure and Apache solr servers - however all the vul I checked were already patched.
How do you find and create a vul? I mean, I tried to look on several exploits that were published and find some similarities but this did not seem to work for me :(

And since I'm new it does not let me send PM yet (I've spent my points on different things).
I sent you a conversation message - is that OK?

Hope to hear from you,
ormer
Looking forward to your response.