Find Any Exploit With One Command
Find Any Exploit With One Command
Share this...
There are many tools available which can find exploits. These tools are more often works on automated way. As they show results in very short period of time.
Nowdays most security researchers/ pentesters rely on these tools, ethical hacking teachers assure. Today we will show you a tool which find exploits in automated
search.
According to ethical hacking researcher of International Institute of Cyber Security, pompem is very useful tool which are capable of finding exploits. The tool comes
handy in initial phase of pentesting.
Pompem is a tool design to search for exploits & vulnerability in automated way. Pompem uses some popular databases to search for exploits. It uses databases like
National Vulnerability Database, WPScan Vulnerability Database, PacketStorm security, CXSecurity, ZeroDay, Vulners. These are the standard repositories where all
the vulnerabilities are present, as per an ethical hacking investigation.
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
For cloning tool : https://github.com/rfunix/Pompem.git
Type cd Pompem
Type chmod u+x pompem.py
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
Successfully uninstalled requests-2.18.4
Successfully installed requests-2.9.1
__________
\______ \____ _____ ______ ____ _____
| ___/ _ \ / \____ \_/ __ \ / \
| | ( <_> ) Y Y \ |_> > ___/| Y Y \
|____| \____/|__|_| / __/ \___ >__|_| /
\/|__| \/ \/
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
-s is used for search keyword. wordpress is the keyword to search.
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
-----------------------------------------------------------------------------------+
2019-02-06 | WordPress WP Live Chat 8.0.18 Cross Site Scripting | https://packetstormsecurity.com/files/151557/WordPre
ss-WP-Live-Chat-8.0.18-Cross-Site-Scripting.html
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
2019-02-06 | WordPress wpGoogleMaps 7.10.41 Cross Site Scriptin | https://packetstormsecurity.com/files/151556/WordPre
ss-wpGoogleMaps-7.10.41-Cross-Site-Scripting.html
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
2019-02-06 | WordPress Social Networks Auto-Poster 4.2.7 Cross | https://packetstormsecurity.com/files/151554/WordPre
ss-Social-Networks-Auto-Poster-4.2.7-Cross-Site-Scripting.html
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
2019-02-06 | WordPress KingComposer 2.7.6 Cross Site Scripting | https://packetstormsecurity.com/files/151552/WordPres
s-KingComposer-2.7.6-Cross-Site-Scripting.html
After executing the above query, pompem has used above list databases to find exploits & vulnerabilities in target running wordpress.
When we open the first URL which is found by pompem in wordpress. It shows :
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
As you can see the above listed link shows that vulnerability is in the wordpress plugin. This vulnerability can cause sql injection. If the target is using wordpress
booking calendar in wordpress site. The attack can be done.
As mentioned above pompem uses different security databases where all the vulnerabilities are listed which can be done easily.
These vulnerabilities can be extended to further hacking activities.
Type python pompem.py -s windows
-s is the search keyword. windows is the keyword to search for.
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
-----------------------------------------------------------------------------------+
+Date Description Url
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
2019-02-02 | SolarWinds Serv-U FTP 15.1.6 Privilege Escalation | https://packetstormsecurity.com/files/151473/SolarWin
ds-Serv-U-FTP-15.1.6-Privilege-Escalation.html
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
2019-01-30 | Microsoft Windows/x86 msiexec.exe Download And Exe | https://packetstormsecurity.com/files/151404/Microso
ft-Windows-x86-msiexec.exe-Download-And-Execute-Shellcode.html
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
2019-01-27 | R 3.4.4 Local Buffer Overflow | https://packetstormsecurity.com/files/151344/R-3.4.4-Local-Buffer-Overflo
w.html
+----------------------------------------------------------------------------------------------------------------------
----------------------------------------------------------------------------------+
2019-01-22 | Microsoft Windows VCF Arbitrary Code Execution | https://packetstormsecurity.com/files/151267/Microsoft-W
indows-VCF-Arbitrary-Code-Execution.html
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
2019-01-17 | Windows Debugging 101 | https://packetstormsecurity.com/files/151215/Windows-Debugging-101.html
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
2019-01-16 | Microsoft Windows .contact Arbitrary Code Executio | https://packetstormsecurity.com/files/151194/Microso
ft-Windows-.contact-Arbitrary-Code-Execution.html
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
After executing the above query, pompem has find many vulnerabilities regarding windows operating system. As told above pompem uses security databases to
find exploits.
The above vulnerabilities can be used in other hacking activities.
When we open first URL. It shows :
The above vulnerability shows privilege escalation attack could be done on windows operating system.
Type python pompem.py -s android –html
-s is used to search for keyword. Here android is keyword to search for.
–html is used to save file in html.
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
root@kali:/home/iicybersecurity/Pompem# python pompem.py -s android --html
+Results android
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
+Date Description Url
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
2019-02-12 | Android Binder VMA Use-After-Free | https://packetstormsecurity.com/files/151637/Android-Binder-VMA-Use-A
fter-Free.html
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
2019-02-12 | Android Binder fdget() Optimization Use-After-Free | https://packetstormsecurity.com/files/151636/Android
-Binder-fdget-Optimization-Use-After-Free.html
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
2018-11-20 | Ricoh myPrint Hardcoded Credentials / Information | https://packetstormsecurity.com/files/150399/Ricoh-m
yPrint-Hardcoded-Credentials-Information-Disclosure.html
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
2018-11-16 | Everus.org 1.0.9 Second Factor Redirection | https://packetstormsecurity.com/files/150382/Everus.org-1.0.
9-Second-Factor-Redirection.html
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
2018-11-13 | Android RSSI Broadcast Information Disclosure | https://packetstormsecurity.com/files/150285/Android-RSSI
-Broadcast-Information-Disclosure.html
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
After executing the above query pompem has find vulnerabilities which can be used to exploit android users.
Sometimes if the html file is not opened. Go to Pompem directory and open out.html. Opening its html file.
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
The above shows the android binder vulnerability which can cause many other possibility of hacking attacks.
You can also get an txt file. For that type python pompem.py -s android –txt
-s is used to search for keyword. android is the keyword to search for.
–txt is used to save file in txt form.
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
The above is the list of URL which can be used in other hacking activities.
Searching on diiferent keywords type python pompem.py -s fortinet
-s is used to search for keyword. fortinet is the firewall to search for. Fortinet is network firewall used in networks.
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
2018-08-05 | Fortinet FortiClient 5.2.3 Local Privilege Escalat | https://packetstormsecurity.com/files/148811/Fortine
t-FortiClient-5.2.3-Local-Privilege-Escalation.html
+---------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------+
The above query shows some serious vulnerabilities regarding firewall. Opening one of output links :
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
Opening the links shows vulnerability of local privilege escalation. There are many vulnerabilities which can be used in further hacking activities.
This tool can be used after Reconnaissance phase. For list of Reconnaissance tools & techniques please refer link over it.
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
BY: JIM GILL / ON: FEBRUARY 17, 2019 / IN: TUTORIALS, VULNERABILITIES, WEB SCANNERS / TAGGED: POMPEM, POMPEM DB RESPOSITORIES, POMPEM EXPLOITS, POMPEM
PIP3.5
LATEST VIDEOS
News Videos WHATSAPP HACKED USING JUST A GIF. UPDATE YOUR APP AS SOON AS POSSIBLE
VULNERABILITY IN CISCO WEBEX AND ZOOM ALLOWS HACKERS TO ACCESS THEIR SESSIONS… AGAIN?
VIEW ALL
POPULAR POSTS:
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
How to exploit new Facebook feature to access…
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
How to scan whole Internet 3.7 billion IP addresses…
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
Crack Windows password with john the ripper
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
Fake any website in seconds Facebook, Snapchat, Instagram :-
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
Hack any website with All in One Tool
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
Generate Android App in 2 mins and hack any android mobile
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
List of credit cards, proxies on Deep Web
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
VULNERABILITIES
MILLIONS OF HP LAPTOPS AND DESKTOPS ARE EASY TARGETS FOR HACKERS: NEW VULNERABILITIES ARE REPORTED
PALO ALTO, FORTINET AND PULSE SECURE VPNS ARE VULNERABLE TO ATTACKS: NSA
PIXEL, HUAWEI, XIAOMI, OPPO, MOTOROLA AND SAMSUNG SMARTPHONES ARE EASILY HACKABLE; UPDATE ASAP. FULL LIST HERE
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
EXPERTS FOUND CRITICAL VULNERABILITY IN AIRCRAFT OPERATING SYSTEMS
VULNERABILITY IN CISCO WEBEX AND ZOOM ALLOWS HACKERS TO ACCESS THEIR SESSIONS… AGAIN?
ALMOST EVERY CISCO DEVICE IS VULNERABLE TO DOS ATTACKS; FIX NOW USING THIS PATCH
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
SECURE YOUR D-LINK & COMBA ROUTERS’ PASSWORDS; CRITICAL VULNERABILITY FOUND
VIEW ALL
TUTORIALS
20 WAYS OF DOING SOCIAL PROTEST WITHOUT EXPOSING YOUR IDENTITY, JUST LIKE IN CHINA
FAKE TEXT MESSAGE ATTACK. HOW PRANK OR HACK YOUR FRIENDS WITH FAKE SMS BOMBER
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
SPOOFING CALLS, MAKE IT LOOK LIKE SOMEONE ELSE IS CALLING
HACK WEBSITE USING GOOGLE HACKING OR GOOGLE DORKING – PART I
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
ANDROID MOBILE HACKS WITH ANDROID DEBUG BRIDGE(ADB) – PART II
VIEW ALL
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
MALWARE
DOWNLOAD THE FREE DECRYPTOR FOR YATRON, FORTUNECRYPT AND WANNACRYFAKE RANSOMWARE VARIANTS
A CALIFORNIA CITY SHUTS DOWN ALL OPERATIONS DUE TO VIRUS ATTACKS ON ITS GOVERNMENT SYSTEMS
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
UNINSTALL THESE ANDROID BEAUTY APPS RIGHT NOW !
HOW CAPTCHA IS BEING USED TO BYPASS ANTI MALWARE SECURITY SCANS AND FIREWALLS
JOKER: THE MALWARE THAT HACKS SMS MESSAGES INFECTS 500K USERS OF THESE 24 ANDROID APPS
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
IDAHO SCHOOLS UNDER RANSOMWARE ATTACK. WILL RANSOMWARE MAKE AMERICA GREAT AGAIN?
YOU WANT TO MAKE MILLIONS IN FORTNITE? THIS VIDEOGAME HACKING TOOL IS A RANSOMWARE
VIEW ALL
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
VULNERABILITY IN CISCO WEBEX AND ZOOM ALLOWS HACKERS TO ACCESS THEIR SESSIONS… AGAIN?
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD
GAMING COMPANY ZYNGA INC. BECOMES A VICTIM OF HACKERS; 218 MILLION PLAYERS AFFECTED
FACEBOOK SUSPENDED THOUSAND OF APPS
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD