GoodiWare GoodReader iPhone - .XLS Denial of Service

GoodiWare GoodReader iPhone - .XLS Denial of Service I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader...

Office^2 iPhone - '.XLS' Denial of Service

I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader Applications for iPhone...

GoodiWare GoodReader iPhone - '.XLS' Denial of Service

I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader Applications for iPhone...

Savy Soda Documents - Mobile Office Suite '.XLS' Denial of Service

I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader Applications for iPhone...

Joomla QPersonel SQL Injection

!/usr/bin/python Joomla comqpersonel SQL Injection Remote Exploit Version 1.0 23th May 2010 public release By Valentin Hoebel [email protected] ASCII FOR BREAKFAST EXPLOIT BASED ON MY COLUMN FUZZER Fuzzer was enhanced so it serves as a Joomla Exploiter template About the Vulnerability:...

Entry Level Content Management System (EL CMS) - SQL Injection

Entry Level Content Management System EL CMS - SQL Injection + Contact : vir0e5athackermaildotcom + Group : TECON The Eye COnference Indonesia + Site : http://tecon-crew.org Software Information +SOftware : Entry Level Content Management System EL CMS +vendor : http://www.entrylevelcms.com/...

Entry Level CMS SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================== Entry Level CMS SQL Injection Vulnerability =========================================== +Title : SQL Injection Entry Level Content Management System EL CMS with schemafuzz.py --== Author ==-- + Autho...

MOPS-2010-013: PHP sqlite_array_query() Uninitialized Memory Usage Vulnerability

MOPS-2010-013: PHP sqlitearrayquery Uninitialized Memory Usage Vulnerability May 7th, 2010 PHP’s sqlitearrayquery function will use uninitialized memory if it is used with an empty SQL query. This can lead to arbitrary code execution. Affected versions Affected is PHP 5.2 = 5.2.13 Affected is PHP...

Cisco TFTP Server 1.1 - Denial of Service

Cisco TFTP Server 1.1 - Denial of Service Exploit Title: Cisco TFTP Server 1.1 Date: 2010-03-25 Author: SuBz3r0 Software Link: http://www.oldversion.com/CiscoTFTPServer.html Version: 1.1 Tested on: XP SP3,Win2k3 CVE : if exists Code : Cisco TFTP Server v1.1 DoS print "" print "" print " SuBz3r0 "...

Cisco TFTP Server 1.1 - Denial of Service

Exploit Title: Cisco TFTP Server 1.1 Date: 2010-03-25 Author: SuBz3r0 Software Link: http://www.oldversion.com/CiscoTFTPServer.html Version: 1.1 Tested on: XP SP3,Win2k3 CVE : if exists Code : Cisco TFTP Server v1.1 DoS print "" print "" print " SuBz3r0 " print "" print "" print "Cisco TFTP v1.1...

2^6 TCP Control Bit - Fuzzer (No ECN or CWR)

2^6 TCP Control Bit - Fuzzer No ECN or CWR !/usr/bin/perl 2^6 TCP Control Bit Fuzzer No ECN or CWR This code was written originally as a control bit fuzzer for the JunOS 3-9 crash mentioned in PSN-2010-01-623 and http://www.securityfocus.com/news/11571 However it will also be useful in fuzzing...

2^6 TCP Control Bit - Fuzzer (No ECN or CWR)

!/usr/bin/perl 2^6 TCP Control Bit Fuzzer No ECN or CWR This code was written originally as a control bit fuzzer for the JunOS 3-9 crash mentioned in PSN-2010-01-623 and http://www.securityfocus.com/news/11571 However it will also be useful in fuzzing future IP stacks, such as userland IP stacks ...

Google Chrome 4.0.249.30 Denial Of Service

!/usr/bin/perl google chrome 4.0.249.30 DoS PoC Author: REMOVED AT REQUEST OF AUTHOR Info: In ordinary cases browser would redirect to "http://www.google.com" but in this case browser will report error for something that should be possible and is possible on other browsers. I would like to thank...

Apple Safari 4.0.3 (Windows x86) - CSS Remote Denial of Service (1)

Apple Safari 4.0.3 Windows x86 - CSS Remote Denial of Service 1 !/usr/bin/perl ithinkthereforeiexist.pl AKA Safari 4.0.3 Win32 CSS Remote Denial of Service Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 11.09.2009 Another remotely triggerable STACKOVERFLOW in...

HTTP GET Request URI Fuzzer (Fuzzer Strings)

This module sends a series of HTTP GET request with malicious URIs. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP GET Request URI Fuzzer Fuzzer Strings', 'Description' = %q This module...

HTTP GET Request URI Fuzzer (Incrementing Lengths)

This module sends a series of HTTP GET request with incrementing URL lengths. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP GET Request URI Fuzzer Incrementing Lengths', 'Description' = ...

SMB Tree Connect Request Corruption

This module sends a series of SMB tree connect requests with corrupted bytes. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB Tree Connect Request Corruption', 'Description' = %q This modul...

SMB Tree Connect Request Fuzzer

This module sends a series of SMB tree connect requests using malicious strings. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB Tree Connect Request Fuzzer', 'Description' = %q This module...

SMB NTLMv1 Login Request Corruption

This module sends a series of SMB login requests using the NTLMv1 protocol with corrupted bytes. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB NTLMv1 Login Request Corruption',...

SMB Create Pipe Request Fuzzer

This module sends a series of SMB create pipe requests using malicious strings. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB Create Pipe Request Fuzzer', 'Description' = %q This module...