linux/x64 reverse TCP connect shellcode 85 bytes

x64 Linux reverse TCP connect shellcode 77 to 85 bytes, 90 to 98 with password / Author: Sean Dillon Copyright: c 2014 CAaNES, LLC. http://caanes.com Release Date: December 19, 2014 Description: x64 Linux null-free reverse TCP shellcode, optional 4 byte password Assembled Size: 77 - 85 bytes, 90 ...

linux/x64 bind TCP port shellcode 81 bytes

x64 Linux bind TCP port shellcode 81 bytes, 96 with password / Author: Sean Dillon Copyright: c 2014 CAaNES, LLC. http://caanes.com Release Date: December 19, 2014 Description: x64 Linux null-free TCP bind port shellcode, optional 4 byte password Assembled Size: 81 bytes, 96 with password Tested...

WordPress Sexy Squeeze Pages Cross Site Scripting

WordPress Sexy Squeeze Pages Plugin / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Software info |App. : WordPress Sexy Squeeze Pages Plugin |Software: http://instasqueeze.com/jv/ |Vulnerability Style : Cross Site Scripting |Date : "26.11.2014"...

WordPress Html5 Mp3 Player Full Path Disclosure

WordPress - Html5 Mp3 Player with Playlist Plugin / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Software info |App. : WordPress - html5-mp3-player-with-playlist Plugin |Software: https://wordpress.org/plugins/html5-mp3-player-with-playlist/...

Videos Tube 2.0 SQL Injection / XSS / Shell Upload

Videos Tube 2.0 / || / / / KnocKout, Septemb0x , BARCOD3 , UnDeRTaKeR / /\ /\ \ \ \ | / \ / Turkey / \ | \ \ / // / \ / / / / Software info |Web App. : Videos Tube |Price : FREE |Version : 2.0, updated the lastest version. |Software: http://www.phpscriptlerim.com/ucretsiz/videos-tube.html...

Windows OLE - Remote Code Execution "Sandworm" Exploit (MS14-060)

No description provided by source. !/usr/bin/python Windows OLE RCE Exploit MS14-060 CVE-2014-4114 – Sandworm Author: Mike Czumak Tv3rn1x - @SecuritySift Written: 10/21/2014 Tested Platforms: Windows 7 SP1 w/ exploit script run on Kali Linux You are free to reuse this code in part or in whole wit...

Aireplay-ng 1.2 beta3 - "tcp_test" Length Parameter Stack Overflow

No description provided by source. / Exploit Title: Aireplay "tcptest" Length Parameter Inconsistency Date: 10/3/2014 Exploit Author: Nick Sampanis Vendor Homepage: http://www.aircrack-ng.org/ Version: Aireplay-ng 1.2 beta3 Tested on: Kali Linux 1.0.9 x64 CVE : CVE-2014-8322 Description: Affected...

Mouse Media Script 1.6 Cross Site Scripting

Exploit Title: Mouse Media Script Stored XSS Vulnerability Google Dork: "is your best source of fun." inurl:/view/popular Date: 04-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.6 Software Link: http://codecanyon.net/item/mouse-media-script/7773254 Software Test Link: http://media.nisgeo.co...

Let the top of the Bash broken shell vulnerability is no longer difficult to understand under-the vulnerability warning-the black bar safety net

On the security of popular science: let the top of the Bash broken shell vulnerability is no longer difficult to understand onwe describe a lot of the basics, now it's time for us to build an environment of actual combat. Required environment description Virtual machine: Recommended to use...

"Aircrack-ng 1.2 Beta 3" multiple vulnerabilities

"Aircrack-ng 1.2 Beta 3" multiple vulnerabilities Description: -------------------------------- Four vulnerabilities exist on aircrack-ng = 1.2 Beta 3 which allow remote/local code execution, privilege escalation and denial of service. Specifically, the following vulnerabilities were identified: ...

Microsoft Windows - OLE Remote Code Execution Sandworm (MS14-060)

Microsoft Windows - OLE Remote Code Execution Sandworm MS14-060 !/usr/bin/python Windows OLE RCE Exploit MS14-060 CVE-2014-4114 – Sandworm Author: Mike Czumak Tv3rn1x - @SecuritySift Written: 10/21/2014 Tested Platforms: Windows 7 SP1 w/ exploit script run on Kali Linux You are free to reuse this...

Aireplay-ng 1.2 beta3 - tcp_test Length Stack Overflow

Aireplay-ng 1.2 beta3 - tcptest Length Stack Overflow / Exploit Title: Aireplay "tcptest" Length Parameter Inconsistency Date: 10/3/2014 Exploit Author: Nick Sampanis Vendor Homepage: http://www.aircrack-ng.org/ Version: Aireplay-ng 1.2 beta3 Tested on: Kali Linux 1.0.9 x64 CVE : CVE-2014-8322...

dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)

dhclient 4.1 - Bash Environment Variable Command Injection Shellshock !/usr/bin/python Exploit Title: ShellShock dhclient Bash Environment Variable Command Injection PoC Date: 2014-09-29 Author: @fdiskyou e-mail: rui at deniable.org Version: 4.1 Tested on: Debian, Ubuntu, Kali CVE: CVE-2014-6277,...

dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)

!/usr/bin/python Exploit Title: ShellShock dhclient Bash Environment Variable Command Injection PoC Date: 2014-09-29 Author: @fdiskyou e-mail: rui at deniable.org Version: 4.1 Tested on: Debian, Ubuntu, Kali CVE: CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187 from...

Kali Linux "NetHunter" — Turn Your Android Device into Hacking Weapons

The developers of one of the most advance open source operating system for penetration testing, 'KALI Linux' have announced yesterday the release of a new Kali project, known as NetHunter, that runs on a Google Nexus device. Kali Linux is an open source Debian-based operating system for penetrati...

EGYWEB (Mantrac) <= Remote File Disclosure Exploit

database passwords can be drawn.. Usage Info python exploit.py http://TARGET.COM EGYWEB Mantrac Example and tested on; http://www.deltagroup.com.eg http://www.mantracvostok.ru http://www.mantracghana.com http://www.mantracnigeria.com http://www.mantrackenya.com http://www.mantractanzania.com...

Food Order Portal 8.3 Cross Site Request Forgery

Food Order Portal 8.3 - CSRF Remote Admin Delete PoC My + Author : KnocKout Contactonlymail : [email protected] HomePage : http://Cyber-Warrior.Org - http://h4x0resec.blogspot.com Greetz: DaiMon,furty,BackDoor,EthicalHacker,BARCOD3,SZE©,VolqaN,Septemb0x | Unuttuklarýmýz affola.. Turkey...

PHP Stock Management System 1.02 - Multiple Vulnerabilty

Exploit for php platform in category web applications Exploit Title: PHP Stock Management System 1.02 - Multiple Vulnerabilty Date : 9-9-2014 Author : jsass ​ Vendor Homepage: ​http://www.posnic.com/​ Software Link:​ http://sourceforge.net/projects/stockmanagement/ Version: ​1.02 Tested on: kali...

WordPress ShortCode Plugin 1.1 - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Title : WordPress ShortCode Plugin - Local File Inclusion Vulnerability Severity : High+/Critical Reporters : Mehdi Karout & Christian Galeone Google Dork : inurl:wp/wp-content/force-download.php Plugin Version : 1.1 Plugin Name : Download...

LY Website CMS SQL Injection

Title: LY Website CMS Sql Injection vulnerability + Date: 2014-08-15 + Author: Iran Security Group + Vendor Homepage: http://www.lywebsite.com/ + Tested on: Windows7 & Kali Linux + Vulnerable Files: /pro.php + Dork : inurl:/pro.php?CateId= intext:"Power By LY Website" POC:...