263 matches found
Splunk Remote Root Exploit
Exploit for multiple platform in category remote exploits from sec1httplib.requestbuilder import Requestobj from sec1httplib.threaddispatcher import import threading import re import urlparse import sys import urllib import base64 from optparse import OptionParser import sys """ Source:...
Splunk - Remote Command Execution
from sec1httplib.requestbuilder import Requestobj from sec1httplib.threaddispatcher import import threading import re import urlparse import sys import urllib import base64 from optparse import OptionParser import sys """ Source: http://www.sec-1.com/blog/?p=233 Splunk remote root exploit. Author...
Splunk - Remote Command Execution
Splunk - Remote Command Execution from sec1httplib.requestbuilder import Requestobj from sec1httplib.threaddispatcher import import threading import re import urlparse import sys import urllib import base64 from optparse import OptionParser import sys """ Source: http://www.sec-1.com/blog/?p=233...
Cain & Abel v4.9.39 updated version Download !
Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords,...
CVE-2009-2818
Adaptive Firewall in Apple Mac OS X before 10.6.2 does not properly handle invalid usernames in SSH login attempts, which makes it easier for remote attackers to obtain login access via a brute-force attack aka dictionary attack...
Protected Web Page Detection
The remote web server requires HTTP authentication for the following pages. Several authentication schemes are available : - Basic is the simplest, but the credentials are sent in cleartext. - NTLM provides an SSO in a Microsoft environment, but it cannot be used on both the proxy and the web...
phpass_crack-vulnerability warning-the black bar safety net
from:huaidan.org Trace: the new version of WordPress and phpbb has been deprecated md5, using phpass encryption. there are some other open source WEB. The original DarkC0de posted on aphpass.py, is with dictionary crack, this PhpassCrack too. PasswordsProofficial download of the latest version al...
To decrypt WPA/WPA2 encrypted high-speed crack of the truth-vulnerability warning-the black bar safety net
For wireless WPA encryption environment, in access to the WPA Handshake Authentication package, the attacker will through brute force mode for WPA password cracking, but also by the prior establishment of a targeted dictionary, then dictionary crackattack. For most wireless access point AP, this...
Black the world God soldiers-Cain-the-vulnerability warning-the black bar safety net
You can right-click for playback. Below we to carry out Arp spoofing, click on the following“ARP”tab ! 1 4） On the right side of the blank at a click, and then point above the“plus sign”, the emergence of the“new ARP spoofing”dialog box, in the left of the selected Gateway, the right choice is...
Think of a use webshell to run the system password of the way-vulnerability warning-the black bar safety net
Haiyang the webshell has a switch is to control what logged in webshell. Assumed to have been the target of the webshell, and collected some of the password, and the target has no ftp, mssql like the port is open, then we can be used to run the system password, try luck. Specific: Modify...
CVE-2006-6681
Pedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might allow remote attackers to determine passwords via a dictionary attack...
CVE-2006-6681
Pedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might allow remote attackers to determine passwords via a dictionary attack...
CVE-2006-6681
CVE-2006-6681: Pedro Lineu Orso chetcpasswd 2.3.3 is vulnerable because it does not implement a rate limit on client requests, potentially allowing remote attackers to perform dictionary attacks to guess passwords. The cited sources (NVD/NVD page) confirm the issue and its impact as a partial con...
Chetcpasswd 2.x: multiple vulnerabilities
From Debian.org: "chetpasswd uses the HTTPXFORWARDEDFOR for authentication purposes.... Obviously, HTTPXFORWARDEDFOR is not a trusted variable, and can be spoofed by any scriptkiddie who can read the man page of wget .... Furthermore, this cgi script doesn't seem to implement any rate limiting fo...
Kerio MailServer 5.6.3 Remote Buffer Overflow Exploit
No description provided by source. / Remote Buffer Overflow Exploit for Kerio MailServer 5.6.3 / / ========================================= / / By B-r00t / / / / In response to the Kerio Mailserver vulnerabilities / / discovered by David F.Madrid. / / / / Although this exploit requires valid...
WordPress 2.0.2 - cache Remote Shell Injection
WordPress 2.0.2 - cache Remote Shell Injection !/usr/bin/php -q -d shortopentag=on ? echo "--------------------------------------------------------------------\r\n"; echo "| WordPress = 2.0.2 'cache' shell injection exploit |\r\n"; echo "| by rgod [email protected] |\r\n"; echo "| site:...
Crack encrypted WINRAR file-vulnerability warning-the black bar safety net
When a very important RAR file because of forgotten password unable to decompress when you are not so abandoned it? Of course not, you can use the RAR Password Cracker this software will be encrypted RAR file crack. When a very important RAR file because of forgotten password unable to decompress...
phpBB <= 2.0.18 Remote Bruteforce/Dictionary Attack Tool (updated)
No description provided by source. !/usr/bin/perl Title: PhpBB = 2.0.18 Remote Bruteforce/Dictionary Attack Tool Type: Bruteforce / Dictionary attack New demo: http://rapidshare.de/files/13694254/phpbbbtr.avi.html 1.06 mb Php Email Script data: ? mail$destinataire, $objet, $contenu, "From:...
phpBB 2.0.18 - Remote Brute ForceDictionary (2)
phpBB 2.0.18 - Remote Brute ForceDictionary 2 !/usr/bin/perl Title: PhpBB Note: Host the php script and replace the line 34 Php script for the email option because win32 don't support Mail::Mailer Changelog: Bruteforce option | Starting length | Email option | More fast | Die error disabled |...
Code injection
The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS 5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings...