Cortana scripting language introduced for Cobalt Strike and Armitage

At DEFCON 20, Raphael Mudge the developer of Armitage released the most significant update to Armitage. Armitage is now fully scriptable and capable of hosting bots in acollaborative hacking engagement. Raphael Mudge is the founder of Strategic Cyber LLC, a Washington, DC based company that creat...

ProFTPD Prior To 1.3.3g Use-After-Free 远程代码执行漏洞

CVE-2011-4130 ProFTPD的是一个远程代码执行漏洞， 允许攻击者执行任意代码。失败的攻击尝试将导致拒绝服务， 1.3.3g前的ProFTPD存在此漏洞 Red Hat Fedora 16 Red Hat Fedora 15 Red Hat Fedora 14 ProFTPD Project ProFTPD 1.3.3 rc2 ProFTPD Project ProFTPD 1.3.3 ProFTPD Project ProFTPD 1.3.2 rc3 ProFTPD Project ProFTPD 1.3.2 rc2 ProFTPD Project ProFTPD 1.3...

Linux/mips - execve(/bin/sh) - 56 bytes

No description provided by source. / 56 bytes execve /bin/sh shellcode - linux-mipsel - by core [email protected] Note: For MIPS running in little-endian mode. Tested on a Cobalt Qube2 server running Linux 2.4.18 Greetz to bighawk... i couldn't get his execve to work for some reason :/ / char code ...

CVE-2008-6202

SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 urun.asp, 2 admin/bayilistele.asp, 3 admin/urungruplistele.asp, and 4 admin/urunlistele.asp...

CVE-2008-6203

SQL injection vulnerability in adminler.asp in CoBaLT 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in adminler.asp in CoBaLT 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 urun.asp, 2 admin/bayilistele.asp, 3 admin/urungruplistele.asp, and 4 admin/urunlistele.asp...

CVE-2008-6202

Summary: CVE-2008-6202 describes a SQL injection vulnerability in CoBaLT 1.0 . The flaw allows remote attackers to execute arbitrary SQL commands through the id parameter on four endpoints: urun.asp, admin/bayi_listele.asp, admin/urun_grup_listele.asp, and admin/urun_listele.asp. The CVSS metrics...

CVE-2008-6203

The CVE-2008-6203 entry concerns CoBaLT 2.0, specifically the adminler.asp component. The vulnerability is a SQL injection in the id parameter that enables remote attackers to execute arbitrary SQL commands. Root cause: unsafely interpolated input in the id parameter leads to database command exe...

CVE-2008-6202

SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 urun.asp, 2 admin/bayilistele.asp, 3 admin/urungruplistele.asp, and 4 admin/urunlistele.asp...

overflow.cgi detection

/cgi-bin/.cobalt/overflow/overflow.cgi was detected. Some versions of this CGI allow remote users to execute arbitrary commands with the privileges of the web server. OpenVAS just checked the presence of this file but did not try to exploit the flaw, so this might be a false positive See:...

overflow.cgi detection

/cgi-bin/.cobalt/overflow/overflow.cgi was detected. Some versions of this CGI allow remote users to execute arbitrary commands with the privileges of the web server. SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

linux/mips execve /bin/sh 56 bytes

No description provided by source. / 56 bytes execve /bin/sh shellcode - linux-mipsel - by core [email protected] Note: For MIPS running in little-endian mode. Tested on a Cobalt Qube2 server running Linux 2.4.18 Greetz to bighawk... i couldn't get his execve to work for some reason :/ / char code ...

Cobalt 2.0 - adminler.asp SQL Injection

Cobalt 2.0 - adminler.asp SQL Injection source: https://www.securityfocus.com/bid/28831/info CoBaLT is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify...

Cobalt 2.0 - 'adminler.asp' SQL Injection

source: https://www.securityfocus.com/bid/28831/info CoBaLT is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities ...

CoBaLT 0.1 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. ---------------------------------------- CoBaLT v1.0 Remote SQL 陌njection Vulnerabiltiy Discovered : U238 Mail : [email protected] WebPage : http://ugur238.org The End Script: http://www.aspindir.com/indir.asp?ID=5414 Script Alternativ :...

CoBaLT 0.1 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== CoBaLT 0.1 Multiple Remote SQL Injection Vulnerabilities ======================================================== ---------------------------------------- CoBaLT v1.0 Remote SQL...

Cobalt 0.1 - Multiple SQL Injections

Cobalt 0.1 - Multiple SQL Injections ---------------------------------------- CoBaLT v1.0 Remote SQL Ä°njection Vulnerabiltiy Discovered : U238 Mail : [email protected] WebPage : http://ugur238.org The End Script: http://www.aspindir.com/indir.asp?ID=5414 Script Alternativ :...

Cobalt 0.1 - Multiple SQL Injections

---------------------------------------- CoBaLT v1.0 Remote SQL Ä°njection Vulnerabiltiy Discovered : U238 Mail : [email protected] WebPage : http://ugur238.org The End Script: http://www.aspindir.com/indir.asp?ID=5414 Script Alternativ :...

linux/mips - execve /bin/sh 56 bytes

linux/mips execve /bin/sh 56 bytes. Shellcode exploit for linuxmips platform / 56 bytes execve /bin/sh shellcode - linux-mipsel - by core [email protected] Note: For MIPS running in little-endian mode. Tested on a Cobalt Qube2 server running Linux 2.4.18 Greetz to bighawk... i couldn't get his exec...