tty from web shell

эмулятор nc -l -s ADDR -p PORT ввод/вывод которого управляется через файлы in/out написан для получения tty из под веб-шелла tty from web shell с ним из веб шела можно юзать su, запускать эксплоиты и получать рута пример работы: Код: ./ttyServer.pl Server is ready at 127.0.0.1:43157 ./ttyClient.p...

OpenOffice.org Xterm Spawn

Some friends asked me some tips for how to make a locked down machine that doesn't allow the user to execute anything from the GUI and doesn't have a terminal emulator installed into starting a terminal, using an allowed application, OpenOffice. The below is hardly a security vulnerability unless...

qemu: local DoS with SCSI CD-ROM

Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service guest crash via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has...

GateOne Beta - Terminal emulator for HTML5 web browsers

GateOne Beta - Terminal emulator for HTML5 web browsers The software makes use of WebSockets to connect a server backend written in Python and a frontend written for modern browsers in JavaScript, HTML5 and CSS. The frontend doesn't require any browser plug-ins to be installed.Gate One also...

[SECURITY] Fedora 16 Update: konsole-4.7.1-1.fc16

KDE Terminal emulator...

USN-1177-1: QEMU vulnerability

Andrew Griffiths discovered that QEMU did not correctly drop privileges when using the 'runas' argument. Under certain circumstances a local attacker could exploit this to escalate privileges...

Fedora Update for vte3 FEDORA-2011-9330

Check for the Version of vte3 OpenVAS Vulnerability Test Fedora Update for vte3 FEDORA-2011-9330 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for vte FEDORA-2011-9330

Check for the Version of vte OpenVAS Vulnerability Test Fedora Update for vte FEDORA-2011-9330 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

[SECURITY] Fedora 15 Update: vte3-0.28.1-1.fc15

VTE is a terminal emulator widget for use with GTK+...

[SECURITY] Fedora 15 Update: vte-0.28.1-1.fc15

VTE is a terminal emulator widget for use with GTK+ 2.0...

Kaillera Multiple Clients Buffer Overflow Vulnerabilities

Exploit for windows platform in category remote exploits !/usr/bin/perl Exploit Title: Remote Buffer Overflows in Kaillera clients Date: 6/30/11 Author: sil3ntdre4m Software Link: Multiple: 1. Kaillera original client: An emulator to download with this client bundled with it is Project64K 0.13:...

Kaillera Emulation Clients Buffer Overflow

!/usr/bin/perl Exploit Title: Remote Buffer Overflows in Kaillera clients Date: 6/30/11 Author: sil3ntdre4m Software Link: Multiple: 1. Kaillera original client: An emulator to download with this client bundled with it is Project64K 0.13: http://www.zophar.net/downloadfile/1907 2. Supraclient...

Kaillera - Multiple Clients Buffer Overflow Vulnerabilities

!/usr/bin/perl Exploit Title: Remote Buffer Overflows in Kaillera clients Date: 6/30/11 Author: sil3ntdre4m Software Link: Multiple: 1. Kaillera original client: An emulator to download with this client bundled with it is Project64K 0.13: http://www.zophar.net/downloadfile/1907 2. Supraclient...

ruby WEBrick log escape sequence

WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrar...

ruby WEBrick log escape sequence

WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrar...

Основы написания Win-шеллкода

В этой статье речь пойдет о написании простого шеллкода под Windows платформу. Статья является начальным этапом цикла статей, которые я, опираясь на материалы и труды зарубежных специалистов в данной области, планирую написать. Эта статья не насыщена всеобъемлющей информацией, однако её цель -...

Fiddler v2.3.1.0 ( Web Debugging Proxy tool ) - Latest Version Download

"Fiddler is a Web Debugging Proxy which logs all HTTPS traffic between your computer and the Internet. Fiddler allows you to inspect all HTTPS traffic, set breakpoints, and "fiddle" with incoming or outgoing data. Fiddler includes a powerful event-based scripting subsystem, and can be extended...

PCSX2 0.9.7 beta Binary Denial of Service Vulnerability

Exploit for windows platform in category dos / poc ======================================================= PCSX2 0.9.7 beta Binary Denial of Service Vulnerability ======================================================= Exploit Title: PCSX2 v0.9.7 Crash Date: 08/11/2010 Author: 41.w4r10r Version:...

PCSX2 0.9.7 Beta Denial Of Service

Exploit Title: PCSX2 v0.9.7 Crash Date: 08/11/2010 Author: 41.w4r10r Version: 0.9.7 Tested on : Windows XP SP2 Eng Software Link: http://pcsx2.net/downloads.php?p=publicbeta !/usr/bin/python PCSX2 is PS2 emulator to play PS2 Games on PC. This emulator is one of the populer among the gamers.It...

PCSX2 0.9.7 Beta - Binary Denial of Service

PCSX2 0.9.7 Beta - Binary Denial of Service Exploit Title: PCSX2 v0.9.7 Crash Date: 08/11/2010 Author: 41.w4r10r Version: 0.9.7 Tested on : Windows XP SP2 Eng Software Link: http://pcsx2.net/downloads.php?p=publicbeta !/usr/bin/python PCSX2 is PS2 emulator to play PS2 Games on PC. This emulator i...