Home
Our company
Our values
Our commitments
The MCA Group
Our expertise
Audit
Architecture audit
Configuration audit
Organizational Audit
Subcontracting audit
Penetration testing
Web Penetration Test
Infrastructure Penetration Test
Mobile Application Penetration Test
Cloud Penetration Test
Consulting and governance
Creating the cyber foundations
Risk analysis
Global Information Security Policy (GISP)
Information Security Assurance Plan (ISAP)
Action Plan - Remediation
Resilience and business continuity
Information systems acceptance
Training
Become a cyber team member
Manage Information Security in new projects
Secure software development
Introduction to hacking techniques
Cyber security in IT operations (SecOps)
Project owners assistants
Project managers
Cyber tech leaders, cyber team members, pentesters
IT infrastructure security administrators (network, systems, endpoints)
Cloud security administrators (Azure, AWS, GCP, O365)
SOC and response teams skills (Level 1 to Level 3)
Join us
Publications
Blog
Articles
Exploits
Tools
Contact
outil
2021-07-20
-
Company Passwords Profiler helps making a bruteforce wordlist for a targeted company
wordlist
password
company
exploit
2021-07-05
-
OpenEMR < 5.0.1.4 - (Authenticated) File upload - Remote command execution (CVE-2018-15139)
upload
RCE
exploit
2021-07-02
-
OpenEMR < 5.0.2 - (Authenticated) Path Traversal - Local File Disclosure (CVE-2019-14530)
LFD
exploit
2021-06-22
-
Multiple exploits for Monitorr (unsecure file upload, authorization bypass, technical information leakage)
upload
leak
bypass
exploit
2021-05-07
-
OpenNetAdmin 8.5.14 <= 18.1.1 - Remote Command Execution
RCE
outil
2021-04-30
-
CLI & library for mapping TLS cipher algorithm names: IANA, OpenSSL, GnuTLS, NSS
TLS
SSL
mapping
outil
2021-03-08
-
CLI & library to search for default credentials among thousands of Products / Vendors
credentials
password
default
article
2021-03-02
-
Web wordlists in 2021
fuzzing
web
pentest
wordlists
article
2021-02-16
-
Web content enumeration tools in 2021
web
enum
tools
article
2021-02-08
-
Some sudo elevation of privilege vulnerabilities
sudo
CVE
EoP
exploit
2021-01-24
-
CMSUno 1.6.1 <= 1.6.2 - Remote Code Execution (Authenticated)
RCE
CMS