Legend Perl IRC Bot - Remote Code Execution

Legend Perl IRC Bot - Remote Code Execution legendrce.py Legend Perl IRC Bot Remote Code Execution PoC author: Jay Turla @shipcod3 description: This is a RCE PoC for Legend Bot which has been used in the Shellshock spam October 2014. reference:...

w3tw0rk-Pitbull-Perl-IRC

Exploit Title: Pitbull / w3tw0rk Perl IRC Bot Remote Code Execution Author: Jay Turla @shipcod3 Description: pitbull-w3tw0rkhunter is POC exploit for Pitbull or w3tw0rk IRC Bot that takes over the owner of a bot which then allows Remote Code Execution...

Pitbull / w3tw0rk Perl IRC Bot Remote Code Execution Vulnerability

Proof of concept exploit for the Pitbull and w3tw0rk IRC bots that takes over the owner of a bot which then allows for remote code execution. thehunter.py Pitbull / w3tw0rk Perl IRC Bot Remote Code Execution author: @shipcod3 description: pitbull-w3tw0rkhunter is POC exploit for Pitbull or w3tw0r...

Pitbull / w3tw0rk Perl IRC Bot Remote Code Execution

thehunter.py Pitbull / w3tw0rk Perl IRC Bot Remote Code Execution author: @shipcod3 description: pitbull-w3tw0rkhunter is POC exploit for Pitbull or w3tw0rk IRC Bot that takes over the owner of a bot which then allows Remote Code Execution. import socket import sys def usage: print"USAGE: python...

w3tw0rk / Pitbull Perl IRC Bot - Remote Code Execution

thehunter.py Exploit Title: Pitbull / w3tw0rk Perl IRC Bot Remote Code Execution Author: Jay Turla @shipcod3 Description: pitbull-w3tw0rkhunter is POC exploit for Pitbull or w3tw0rk IRC Bot that takes over the owner of a bot which then allows Remote Code Execution. import socket import sys def...

w3tw0rk Pitbull Perl IRC Bot - Remote Code Execution

w3tw0rk Pitbull Perl IRC Bot - Remote Code Execution thehunter.py Exploit Title: Pitbull / w3tw0rk Perl IRC Bot Remote Code Execution Author: Jay Turla @shipcod3 Description: pitbull-w3tw0rkhunter is POC exploit for Pitbull or w3tw0rk IRC Bot that takes over the owner of a bot which then allows...

Google Retools reCAPTCHA with No CAPTCHA

Google is getting right to the point with the latest update to its reCAPTCHA authentication system. Rather than have users signing in to an online service try to decipher blurred text, Google has simplified the process by simply asking users whether they’re a bot. One click later, they’re...

Atrax Botnet Shell Upload Vulnerability

Exploit for php platform in category web applications import random import string import base64 import urllib import urllib2 payload = '' url = 'http://localhost/atrax/' BOTMODEINSERT = 'b' BOT MODE BOTMODERUNPLUGIN = 'e' GETPARAMMODE = 'a' GET PARAM POSTPARAMGUID = 'h' POST PARAM POSTPARAMIP = '...

CVE-2014-8951

Technical details (affected product, component, root cause, versions, or remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2014-8951

Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the 1 Application Control, 2 URL Filtering, 3 DLP, 4 Threat Emulation, 5 Anti-Bot, or 6 Anti-Virus blade is used, allows remote attackers to cause a denial of service fwk0 process...

Bash Vulnerability Exploits Dropping DDoS Bots

A honeypot run by researchers at AlienVault Labs has snared two separate pieces of malware attempting to exploit the Bash vulnerability. One sample is a repurposed IRC bot written in Perl that is trying to build a botnet to be used in distributed denial of service attacks DDoS, said Jaime Blasco,...

CVE-2014-5508

Multiple integer overflows in the HelpServ module mod-helpserv.c in srvx 1.3.1 allow remote authenticated IRCops or HelpServ bot managers to cause a denial of service infinite loop via a large value in the EmptyInterval parameter or certain other interval configurations...

Integer overflow

Multiple integer overflows in the HelpServ module mod-helpserv.c in srvx 1.3.1 allow remote authenticated IRCops or HelpServ bot managers to cause a denial of service infinite loop via a large value in the EmptyInterval parameter or certain other interval configurations...

Ra1NX PHP Bot - pubcall Authentication Bypass Remote Code Execution

No description provided by source. Exploit Title: Ra1NX PHP Bot pubcall Authentication Bypass Remote Code Execution Date: March 24, 2013 Exploit Author: bwall Software Link: https://defense.ballastsecurity.net/decoding/index.php?hash=69401ac90262f3855c23cd143d7d2ae0 Version: v2.0 Tested on: Ubunt...

Sanity.b - phpBB <= 2.0.10 Bot Install (AOL/Yahoo Search)

No description provided by source. /usr/bin/perl use IO::Socket; use LWP::Simple; @vul = ; $a=0; $numero = int rand999; $site = search.aol.com; $procura = viewtopic.php%3Ft%3D$numero; for$n=0;$n90;$n += 10 $sock = IO::Socket::INET-newPeerAddr=$site,PeerPort=80,Proto=tcp or next; print $sock GET...

Xlrstats 2.0.1 - SQL Injection Vulnerability

No description provided by source. ---------------------------------------------------------------------------- Sql injection vulnerability ---------------------------------------------------------------------------- Exploit Title: Xlrstats Big Brother Bot Game SQL injection 2.0.1...

Pandora FMS 3.2.1 - Cross Site Request Forgery

No description provided by source. Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery Google Dork: intitle:Pandora FMS - the Flexible Monitoring System intext:Your IP Date: 12-07-2011 Author: Mehdi Boukazoula Software Link: http://pandorafms.org/ Version: v 3.2.1 Tested on: v = 3.2.1...

Bitbot C2 Panel gate2.php - Multiple Vulnerabilities

No description provided by source. Exploit Title: Bitbot C2 Panel gate2.php SQLi + XSS Date: 08/19/2013 Exploit Author: Brian Wallace bwall aka @botnethunter Software Link: https://sourceforge.net/p/flippingbitbot/wiki/Home/ Vulnerable Virtual Machine including Bitbot Tested on: Debian/Ubuntu fro...

FlashGameScript <= 1.7 (user) Remote SQL Injection Vulnerability

No description provided by source. FlashGameScript = 1.7 member.php$user SQL-Injection Exploit Vulnrability Discovered By: Xenduer77 ---July 7th, 2007 $user Is passed straight to the query without being filtered. SQL-INJECTION: For Version 1.7: -------...

PHP IRC Bot pbot eval() Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...