SWIFT NETWORK CODE INJECTION NSA EQUATION GROUP

This module exploits a remote code execution vunlerability in Apache Struts version 2.3.5 - 2.3.31, and 2.5 - 2.5.10. Remote Code Execution can be performed via http Content-Type header. Native payloads will be converted to executables and dropped in the server’s temp dir. If this fails, try a cmd/* payload, which won’t have to write to the disk.

Apache Struts Jakarta Multipart Parser OGNL Injection

This module exploits a remote code execution vunlerability in Apache Struts version 2.3.5 - 2.3.31, and 2.5 - 2.5.10. Remote Code Execution can be performed via http Content-Type header.

VULNERS.COM

https://vulners.com/metasploit/MSF:EXPLOIT/MULTI/HTTP/STRUTS2_CONTENT_TYPE_OGNL

FBI target Snowden's account and have it themslfs for their informants The magma server daemon, is an encrypted email system with support for SMTP, POP, IMAP, HTTP and MOLTEN,. Additional support for DMTP and DMAP is currently in active development.

The magma server daemon, is an encrypted email system with support for SMTP, POP, IMAP, HTTP and MOLTEN,. Additional support for DMTP and DMAP is currently in active development.

magmawebmailimapsmtppophttpencryptionencrypted-message-protocol

•  1,020 commits
•  14 branches
•  0 releases
•  11 contributors

1.  C 96.4%
2.  C++ 3.2%
3.  Shell 0.4%
4.  Python 0.0%
5.  Makefile 0.0%
6.  Objective-C 0.0%

CC++ShellPythonMakefileObjective-C

Find file

Latest commit fc0dffc 10 days ago ladar committed on GitHub Update README.md

	.settings	Eclipse environment hash updated.	2 months ago
	check	Refactored the network code to use tcp/tls read/write interfaces.	2 months ago
	dev	Spanning chunks work! Added a large message to the corpus for testing.	2 months ago
	lib	Fixed the HTTP append bug. Also checking in the updated project files.	2 months ago
	res	Fixed the HTTP append bug. Also checking in the updated project files.	2 months ago
	sandbox	Fixed the HTTP append bug. Also checking in the updated project files.	2 months ago
	src	Handle non-errors.	2 months ago
	tools	Major code cleanup to allow smoother gcc compilation using alt options.	6 months ago
	web	Updated the camelface to ignore the TLS requirement for localhost.	4 months ago
	.cproject	Makefile... moved the output param to beginning, plus misc clenaup.	2 months ago
	.gitattributes	Avoid profiling the static web content.	a year ago
	.gitignore	Added a strip target to the Makefile.	2 months ago
	.project	Merging SMTP check logic onto develop branch.	6 months ago
	.pydevproject	Working realm encryption/decryption in stacie.py.	10 months ago
	COPYRIGHT	Grammar fixes.	7 months ago
	INSTALL	Initial commit	3 years ago
	LICENSE	One project to rule them all. One repository to find them. One makefile	2 years ago
	Makefile	Use short option for specifying output to support older versions of GCC.	2 months ago
	README.md	Update README.md	10 days ago

 README.md

Description

Magma was originally designed and developed by Ladar Levison for lavabit.com. The current release is currently under heavy development, and some of the features and functions contained herein are unstable. The SMTP, POP, and IMAP protocol handlers are reasonably mature. The DMTP, DMAP and HTTP implementations (along with the bundled webmail system) are still in development. Happy hacking.

Downloads

Magma

https://github.com/lavabit/magma/archive/develop.tar.gz

https://github.com/lavabit/magma

FBI target Snowden's account and have it themslfs for their informants The magma server daemon, is an encrypted email system with support for SMTP, POP, IMAP, HTTP and MOLTEN,. Additional support for DMTP and DMAP is currently in active development.

The magma server daemon, is an encrypted email system with support for SMTP, POP, IMAP, HTTP and MOLTEN,. Additional support for DMTP and DMAP is currently in active development.

magmawebmailimapsmtppophttpencryptionencrypted-message-protocol

•  1,020 commits
•  14 branches
•  0 releases
•  11 contributors

1.  C 96.4%
2.  C++ 3.2%
3.  Shell 0.4%
4.  Python 0.0%
5.  Makefile 0.0%
6.  Objective-C 0.0%

CC++ShellPythonMakefileObjective-C

Find file

Latest commit fc0dffc 10 days ago ladar committed on GitHub Update README.md

	.settings	Eclipse environment hash updated.	2 months ago
	check	Refactored the network code to use tcp/tls read/write interfaces.	2 months ago
	dev	Spanning chunks work! Added a large message to the corpus for testing.	2 months ago
	lib	Fixed the HTTP append bug. Also checking in the updated project files.	2 months ago
	res	Fixed the HTTP append bug. Also checking in the updated project files.	2 months ago
	sandbox	Fixed the HTTP append bug. Also checking in the updated project files.	2 months ago
	src	Handle non-errors.	2 months ago
	tools	Major code cleanup to allow smoother gcc compilation using alt options.	6 months ago
	web	Updated the camelface to ignore the TLS requirement for localhost.	4 months ago
	.cproject	Makefile... moved the output param to beginning, plus misc clenaup.	2 months ago
	.gitattributes	Avoid profiling the static web content.	a year ago
	.gitignore	Added a strip target to the Makefile.	2 months ago
	.project	Merging SMTP check logic onto develop branch.	6 months ago
	.pydevproject	Working realm encryption/decryption in stacie.py.	10 months ago
	COPYRIGHT	Grammar fixes.	7 months ago
	INSTALL	Initial commit	3 years ago
	LICENSE	One project to rule them all. One repository to find them. One makefile	2 years ago
	Makefile	Use short option for specifying output to support older versions of GCC.	2 months ago
	README.md	Update README.md	10 days ago

 README.md

Description

Magma was originally designed and developed by Ladar Levison for lavabit.com. The current release is currently under heavy development, and some of the features and functions contained herein are unstable. The SMTP, POP, and IMAP protocol handlers are reasonably mature. The DMTP, DMAP and HTTP implementations (along with the bundled webmail system) are still in development. Happy hacking.

Downloads

Magma

https://github.com/lavabit/magma/archive/develop.tar.gz

https://github.com/lavabit/magma