Jose Nazario on botnets and DDoS defense

Few people in the world know more about the internal workings of botnets, DDoS attacks and defense than Jose Nazario, a senior security researcher at Arbor Networks. Don’t miss his thoughts on why DDoS attacks are more prevalent in some regions than others and how to react if you’re attacked...

pPIM 1.01 Command Execution Exploit

!/usr/bin/perl pPIM 1.01 notes.php id Remote Command Execution Exploit url: http://www.phlatline.org/docs/files/ppim.zip Author: Jose Luis Gongora Fernandez a.k.a JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT thanks for the base code: CWH...

pPIM 1.01 - notes.php Remote Command Execution

pPIM 1.01 - notes.php Remote Command Execution !/usr/bin/perl pPIM 1.01 notes.php id Remote Command Execution Exploit url: http://www.phlatline.org/docs/files/ppim.zip Author: Jose Luis Gongora Fernandez a.k.a JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hacke...

pPIM 1.01 (notes.php id) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ========================================================= pPIM 1.01 notes.php id Remote Command Execution Exploit ========================================================= !/usr/bin/perl pPIM 1.01 notes.php id Remote Command Execution...

GR Note 0.94 Beta Database Disclosure

GR Note v0.94 beta Remote Database Disclosure Vulnerability Author: Jose Luis Gongora Fernandez a.k.a JosS Web: http://hack0wn.com/ // TEST ON VERSION GR Note v0.94 beta, in my localhost Download : http://sirini.net/grboard/board.php?id=grnote&articleNo=5 // !xpl: /admin/admin.backup.php h0...

GR Note 0.94 beta (Auth Bypass) Remote Database Backup Vulnerability

No description provided by source. GR Note v0.94 beta Remote Database Disclosure Vulnerability Author: Jose Luis Gongora Fernandez a.k.a JosS sys-projectathotmail.com Web: http://hack0wn.com/ // TEST ON VERSION GR Note v0.94 beta, in my localhost Download :...

GR Note 0.94 Beta - (Authentication Bypass) Remote Database Backup

GR Note 0.94 Beta - Authentication Bypass Remote Database Backup GR Note v0.94 beta Remote Database Disclosure Vulnerability Author: Jose Luis Gongora Fernandez a.k.a JosS Web: http://hack0wn.com/ // TEST ON VERSION GR Note v0.94 beta, in my localhost Download :...

GR Note 0.94 Beta - (Authentication Bypass) Remote Database Backup

GR Note v0.94 beta Remote Database Disclosure Vulnerability Author: Jose Luis Gongora Fernandez a.k.a JosS Web: http://hack0wn.com/ // TEST ON VERSION GR Note v0.94 beta, in my localhost Download : http://sirini.net/grboard/board.php?id=grnote&articleNo=5 // !xpl: /admin/admin.backup.php h0...

GR Blog 1.1.4 (Upload/Bypass) Multiple Remote Vulnerabilities

No description provided by source. GR Blog v1.1.4 Upload/Bypass Multiple Remote Vulnerabilities Author: Jose Luis Gongora Fernandez a.k.a JosS sys-projectathotmail.com Web: http://hack0wn.com/ // TEST ON VERSION GR Blog v1.1.4, in my localhost Download :...

PHP JOBWEBSITE PRO (JobSearch3.php) SQL Injection Vulnerability

Info: Bug found by Jose Luis Gуngora Fernбndez JosS sys-projectathotmail.com http://www.spanish-hackers.com/ Spanish Hackers Team - SHT EspSeC & Hack0wn!. Software: PHP JOBWEBSITE PRO payment HomePage: http://www.preproject.com/ Exploit: Remote SQL Injection High Vuln file: JobSearch3.php...

E-SMART CART (productsofcat.asp) Remote SQL Injection Vulnerability

Info: Bug found by Jose Luis Gуngora Fernбndez JosS sys-projectathotmail.com http://www.spanish-hackers.com/ Spanish Hackers Team - SHT EspSeC & Hack0wn!. Software: E-SMART CART payment HomePage: http://www.preproject.com/ Exploit: Remote SQL Injection High Vuln file: productsofcat.asp...

ASPPortal Free Version (Topic_Id) Remote SQL Injection Vulnerability

Info: Bug found by Jose Luis Gуngora Fernбndez JosS sys-projectathotmail.com http://www.spanish-hackers.com Spanish Hackers Team - SHT EspSeC & Hack0wn!. Software: ASPPortal Free Version HomePage: http://www.aspportal.net/ Exploit: Remote SQL Injection Vulnerability High Dork: "Powered by...

EasyGallery <= 5.0tr - Multiple Remote Vulnerabilities

Info: Software: EasyGallery HomePage: http://myiosoft.com Exploit: Multiple Remote Vulnerabilities High Bug Found By: Jose Luis Gуngora Fernбndez | JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com Verified in localhost with EasyGallery 5.0tr and magicquotes Off + Remote...

centreon1423-disclose.txt

Info: Software: Centreon user-getlang."/".$GET"page", "r"; + Exploit: /include/doc/index.php?page=../../www/oreon.conf.php /include/doc/index.php?page=../../../../../etc/passwd /include/doc/index.php?page=Local File...

Koobi CMS 4.3.0 - 4.2.3 (categ) Remote SQL Injection Vulnerability

JosS + Spanish Hackers Team + Sys - Project + Info: Software: Koobi CMS 4.3.0 - 4.2.3 HomePage: http://www.dream4.de/ Exploit: Remote SQL Injection High Where: index.php Bug Found By: Jose Luis Gуngora Fernбndez | JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com +...

gradman-lfi.txt

Info: Software: Gradman new; my $req=HTTP::Request-newGET=$web1; $doc = $ua-request$req-asstring; if $doc= /^root/moxis print "Web is vuln\n"; else print "Web is not vuln\n";...

RichStrong CMS (showproduct.asp?cat=) Remote SQL Injection Exploit

Info: Software: RichStrong CMS HomePage: http://www.hzrich.cn Exploit: Remote Sql Injection High Where: showproduct.asp?cat= Bug Found By: Jose Luis Gуngora Fernбndez|JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com Dork: "Power by:RichStrong CMS" Dork2: Priv8, xD! +...

milliscripts (dir.php) Cross-Site Scripting Vulnerability

milliscripts dir.php Cross-Site Scripting Vulnerability Download: http://www.milliscripts.com/ Bug found by Jose Luis Gуngora Fernбndez / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "powered by milliscripts"...

milliscripts-xss.txt

milliscripts dir.php Cross-Site Scripting Vulnerability Download: http://www.milliscripts.com/ Bug found by Jose Luis Góngora Fernández / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "powered by milliscripts"...

Blakord Portal <= Beta 1.3.A (all modules) Blind Sql Injection

Blakord Portal = Beta 1.3.A all modules Blind Sql Injection. + Info: Software: Blakord Portal HomePage: http://www.cdv3k.com Exploit: Blind Sql Injection High Where: All Modules Bug Found By: JosS / Jose Luis Gуngora Fernбndez Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com...