intellitamper207-exec.txt

!/usr/bin/perl IntelliTamper 2.07 Remote Code Execution server header By: Koshi Guido Landi finally did it, thought i'd throw one in there. This example assumes you're scanning "http://127.0.0.1" For example, exploit may not work if you were to scan "http://127.0.0.1:80" or even changing it as...

HRS Multi (picture_pic_bv.asp key) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " Viva IslaMe Viva IslaMe \n"; print " HRS Multi Blind SQL Injection Exploit \n"; print " picturepicbv.asp key \n"; print " Author: Mr.SQL \n"; print " EMAIL : [email protected] \n";...

IntelliTamper 2.07 (server header) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl IntelliTamper 2.07 Remote Code Execution server header By: Koshi Guido Landi finally did it, thought i'd throw one in there. This example assumes you're scanning "http://127.0.0.1" For example, exploit may not work if you were to scan...

IntelliTamper 2.0.7 (html parser) Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================ IntelliTamper 2.0.7 html parser Remote Buffer Overflow PoC ============================================================ !/usr/bin/perl ksOSe - 07/21/2008 There are some BOFs in the html...

EasyPublish 3.0 - read Multiple SQL Injections Cross-Site Scripting

EasyPublish 3.0 - read Multiple SQL Injections Cross-Site Scripting source: https://www.securityfocus.com/bid/30307/info EasyPublish is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include SQL-injection and cross-site...

MojoJobs - Blind SQL Injection

MojoJobs - Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " Viva IslaMe Viva IslaMe \n"; print " MojoJobs Blind SQL Injection Exploit \n"; print " mojoJobs.cgi mojo \n"; print " Author: Mr.SQL \n"; print " EMAIL : [email protected] \n"; print "...

intellitamper-poc.txt

!/usr/bin/perl ksOSe - 07/21/2008 This is NOT http://secunia.com/advisories/20172/. There are some BOFs in the html parser, just put a properly formatted html file in your website and launch IntelliTamper against it. use warnings; use strict; my $evilhtml = 'ph33r' . 'ph33r' . ""; print $evilhtml...

arctic-sql.txt

!/usr/bin/perl use IO::Socket; print q ----------------------------------------------- Arctic Issue Tracker v2.0.0 exploit by ldma SubCode use: arctic.pl server dir sample: $perl arctic.pl localhost /arctic/ ----------------------------------------------- ; $webpage = $ARGV0; $directory = $ARGV1;...

Asterisk 1.6 IAX - 'POKE' Requests Remote Denial of Service

source: https://www.securityfocus.com/bid/30321/info Asterisk is prone to a remote denial-of-service vulnerability because it fails to handle multiple 'POKE' requests in quick succession. Attackers can exploit this issue by sending a persistent stream of 'POKE' requests that will consume processo...

JVN#49704543 WebProxy from LunarNight Laboratory vulnerable to cross-site scripting

WebProxy is a perl script for web proxy provided by LunarNight Laboratory. WebProxy contains a cross-site scripting vulnerability. Impact An arbitrary script could be executed on the user's web browser. Solution Update the Software Apply the latest update provided by the developer. Products...

Alstrasoft Article Manager Pro 1.6 - Blind SQL Injection

Alstrasoft Article Manager Pro 1.6 - Blind SQL Injection /usr/bin/perl |+| Author: GoLdM --//-- -- AlstraSoft Article Manager Pro Blind SQL Injection Exploit -- --//-- Exploit : use strict; use LWP::Simple; print "-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-++-\n"; print "-...

joomlanforms-sql.txt

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Mambot Component n-forms Blind SQL Injection Exploit \n"; print " Author:The Moorish :D \n"; print " Greetz:Team-dz,His0k4,x.CJP.x,Kader11000,c02,piRAte DIgitAL\n"; print " sites:www.h4cnc.com...

GTChat <= 0.95 Alpha (adduser) Remote Denial of Service Exploit

No description provided by source. Use a high user for best results. /str0ke !/usr/bin/perl codez0red by VTECin5th Feel free to modify/break this script Crappy code is more effective = I accept no responsibility for misuse or abuse Usage: xxx.pl www.server.com /directorytochat/ ofuserstocreate...

Emulive Server4 7560 Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl EmuLive Server4 Commerce Edition Build 7560 Remote crash proof of conecpt code. When the machine running Server4 recieves a malformed request on TCP port 66 it crashes very hard! GulfTech Security http://www.gulftech.org use IO::Socket; unless...

BareNuked CMS 1.1.0 Arbitrary Add Admin Exploit

No description provided by source. !/usr/bin/perl ============================================ BareNuked CMS Arbitrary Add Admin Exploit ============================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit

No description provided by source. !/usr/bin/perl uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header Denial of Service exploit according to the following advisory: http://secunia.com/advisories/30605 usage: WebUI-dos.pl url port user:pass Exploit written by Exodus...

TOKOKITA - 'produk_id' SQL Injection

!/usr/bin/perl k1tk4t Public Security Advisory //////////////////////////////////////////////////////////// TOKOKITA Multiple Remote SQL Injection Demosite : http://www.tokokita.net/toko/ Vendor : http://www.tokokita.com/ Kutu : 1. catlist.php?catid=Blind SQLi 2. catlistdetail.php?catid=Blind SQL...

BlogPHP 2.0 - Privilege Escalation SQL Injection

BlogPHP 2.0 - Privilege Escalation SQL Injection !/usr/bin/perl BlogPHP 2.0 Remote Privilege Escalation Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Cuz We Back Rude This Time Privilege Escalation Send a request to...

blogphp-escalate.txt

!/usr/bin/perl BlogPHP 2.0 Remote Privilege Escalation Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Cuz We Back Rude This Time Privilege Escalation Send a request to http://127.0.0.1/BlogPHPv2/index.php?act=register2 with:...

emuCMS 0.3 (fckeditor) Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ==================================================== emuCMS 0.3 fckeditor Arbitrary File Upload Exploit ==================================================== !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use...