Showing 1 - 3 of 3

Files from Matthew Dunn

First Active	2021-02-26
Last Active	2024-09-01

Microsoft Azure Active Directory Login Enumeration: Posted Sep 1, 2024; Authored by Matthew Dunn | Site metasploit.com; This Metasploit module enumerates valid usernames and passwords against a Microsoft Azure Active Directory domain by utilizing a flaw in how SSO authenticates.; tags | exploit; SHA-256 | 664e43cdf15daba2cbb268420497be465432a62dc34371333b79b38251894382; Download | Favorite | View

Microsoft IIS HTTP Internal IP Disclosure: Posted Sep 1, 2024; Authored by Matthew Dunn, Heather Pilkington | Site metasploit.com; Collect any leaked internal IPs by requesting commonly redirected locations from IIS. CVE-2000-0649 references IIS 5.1 (win2k, XP) and older. However, in newer servers such as IIS 7+, this occurs when the alternateHostName is not set or misconfigured. Also collects internal IPs leaked from the PROPFIND method in certain IIS versions.; tags | exploit; systems | windows; advisories | CVE-2000-0649, CVE-2002-0422; SHA-256 | f5cd05c837ee40cc8d76e4b5fce64d92ed540c8b1d92111ed48c20b1a0540540; Download | Favorite | View

Remote Desktop Web Access Authentication Timing Attack: Posted Feb 26, 2021; Authored by Matthew Dunn; Remote Desktop Web Access suffers form an authentication timing attack vulnerability.; tags | exploit, remote, web; SHA-256 | e0b1f12f63b20a9cc74b61503ba89992e54293405c32e5580d3123384d352931; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days