ZeroAccess Rootkit Latest in Line of x64 Malware to Appear

Never ones to be left behind as progress marches on, attackers are beginning to develop more and more tools aimed specifically at exploiting 64-bit machines. The latest entry into the field is an x64 version of the ZeroAccess rootkit, a nasty piece of malware that’s been circulating for some time...

New 64-Bit Rootkit Being Used to Steal Banking Credentials

Security researchers have come across a new rootkit that is designed specifically to infect 64-bit Windows systems and steal users’ online banking credentials. It’s believed to be the first piece of malware of its kind that is capable of compromising x64 systems. The new rootkit is being used by...

OpenMyZip 0.1 .ZIP Buffer Overflow

!/usr/bin/perl +Exploit Title: OpenMyZip V0.1 .ZIP File Buffer Overflow Vulnerability +Date: 02\05\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/OpenMyZip/3000-22504-10657274.html +Version: v0.1 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warnings; my...

Vallen Zipper V2.30 .ZIP File Heap Overflow

Exploit for windows platform in category dos / poc !/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use...

Vallen Zipper 2.30 - '.zip' Heap Overflow

!/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warnings; my $filename = "Exploit.zip";...

Vallen Zipper 2.30 - .zip Heap Overflow

Vallen Zipper 2.30 - .zip Heap Overflow !/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use...

MikeyZip 1.1 .ZIP File Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/perl +Exploit Title: MikeyZip 1.1 .ZIP File Buffer Overflow +Date: 10\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Compression-tools/MikeyZip.shtml +Version: 1.1 +Tested On: WIN-XP SP3 Brazil Portugues...

SpoonFTP 1.2 - RETR Denial of Service

SpoonFTP 1.2 - RETR Denial of Service !/usr/bin/python +Exploit Title: Exploit Denial of Service SpoonFTP 1.2 +Date: 21\03\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/progDownload/SpoonFTP-Download-49969.html +Version: 1.2 +Tested On: WIN-XP SP3 Portuguese Brazil +CVE: N/A...

SpoonFTP 1.2 Denial Of Service

!/usr/bin/python +Exploit Title: Exploit Denial of Service SpoonFTP 1.2 +Date: 03\18\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/progDownload/SpoonFTP-Download-49969.html +Version: 1.2 +Tested On: WIN-XP SP3 Portuguese Brazil +CVE: N/A xxx xxx xxxxxxxxxxx xxxxxxxxxxx...

Police probe hacker attack on Brazil president's site !

RIO DE JANEIRO AFP – Federal police are investigating an apparent hacker attack on the website of Brazil's president, just a day after President Dilma Rousseff took office, officials told local media Tuesday. The attack on Sunday was being investigated by the Federal Data Processing Service Serpr...

Built2Go PHP Shopping - SQL Injection

Script Name: Built2Go PHP Shopping version = 1.7 Site: http://built2go.com/ Script Demo: http://demos.built2go.com/shopping/1/ Found: Br0ly Google Dork: "Powered by Built2Go PHP Shopping" p0c: http://server.com/product.php?cat=16'%20UNION%20ALL%20SELECT%201,@@version,3/ xPloit:...

MP3 CD Converter Professional - Local Buffer Overflow (SEH)

MP3 CD Converter Professional - Local Buffer Overflow SEH !/usr/bin/python Python File Created BY C4SS!0 G0MES http://www.invasao.com.br [email protected] +Exploit Titule: Exploit Buffer Overflow MP3 CD Converter ProfessionalSEH +Date: 12/20/2010 +Author: C4SS!0 G0M3S +Software Link:...

Vacation Rental Script 4.0 - Arbitrary File Upload

Script Name: Vacation Rental Script = 4.0 Site: http://www.vacationrentalscript.com/ Bug: Upload Shell Found: Br0ly google dork: "2006 - 2009 Vacation Rental Script" BraZIL!! You need register a account first so: Signup: http://server/signup Cheek your email for login and password So login in:...

MP3 CD Converter Professional Buffer Overflow

!/usr/bin/python Python File Created BY C4SS!0 G0MES http://www.invasao.com.br [email protected] +Exploit Titule: Exploit Buffer Overflow MP3 CD Converter ProfessionalSEH +Date: 12/20/2010 +Author: C4SS!0 G0M3S +Software Link: http://www.mp3-cd-converter.com/mp3cdconverter.exe +Version: 5.0.3...

Abtp Portal Project 0.1.0 - Local File Inclusion

Abtp Portal Project 0.1.0 - Local File Inclusion !/usr/bin/perl =about ---------------------------------------------------------------------------------------------------- Name : Abtp Portal Project The variable $ ABTPVBLOQUECENTRAL was not correctly stated thus enabling the attack include...

AJ Matrix DNA SQL Injection

!usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: AJ Matrix DNA | -Site: http://www.ajsquare.com/ajhome.php | -Bug: Sql Injection | -Found: by Br0ly | -BRAZIL D | -Contact: br0lydotCodeatgmaildotcom ...

Researchers Find Malware on My Opera Page

Researchers have discovered that a page on the My Opera community Web site is hosting malware related to an IRC botnet. The discovery comes just a couple of weeks after malicious code also was found on Google Code servers. On Thursday, a researcher perusing a page on the My Opera community site...

Attackers Target Twitter XSS Bug

A dangerous XSS bug surfaced on Twitter on Monday, and researchers have seen active exploits for the bug, which allows an attacker to steal the session cookie of a Twitter user with a simple click-and-you’re-owned technique. Experts say that the attacks seem to be emanating from domains in Brazil...

Joomla! Component com_qcontacts - SQL Injection

Exploit Title: Joomla Component QContacts comqcontacts - SQL Injection Vulnerability Date: 12, July 2010 Author: mlk Software Link: http://bugsec.googlecode.com/files/Joomlacomqcontacts.zip Version: 1.0.4 and previous Tested on: all OS CVE : 0 Code : here Joomla Component QContacts comqcontacts -...

Joomla! Component com_qcontacts - SQL Injection

Joomla! Component comqcontacts - SQL Injection Exploit Title: Joomla Component QContacts comqcontacts - SQL Injection Vulnerability Date: 12, July 2010 Author: mlk Software Link: http://bugsec.googlecode.com/files/Joomlacomqcontacts.zip Version: 1.0.4 and previous Tested on: all OS CVE : 0 Code :...