SAPRouter Port Scanner

This module allows for mapping ACLs and identify open/closed ports accessible on hosts through a saprouter. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAPRouter Port Scanner', 'Description...

Shylock Trojan Going Global with New Features, Resilient Infrastructure

The prolific, credential-stealing Shylock banking Trojan is growing increasingly sophisticated as its creators continue adding new modules and functionalities to the man-in-the-browser malware, according to a Symantec report. To this point, Shylock has made its money via man-in-the-browser attack...

USN-1701-1: Vino vulnerability

It was discovered that Vino incorrectly transmitted clipboard activity before authenticating the remote connection. A remote attacker could connect to Vino and monitor clipboard activity...

SAPRouter Admin Request

Display the remote connection table from a SAPRouter. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This module is based on, inspired by, or is a port of a plugin available in the Onapsis Bizploit Opensource ERP...

The FixMeStick : My Parents Need This

The founders over at FixMeStick sent us a pair of their latest devices to check out. The FixMeStick is, in short, a malware removal device for dummies. The FixMeStick is a bootable USB device running Lubuntu and integrates three separate anti-virus scanners from Kaspersky Labs, Sophos, and GFI...

OS X x64 Shell Bind TCP

Bind an arbitrary command to an arbitrary port This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 136 include Msf::Payload::Single include Msf::Payload::Osx include...

Cross-Platform Flaws a Boon For Attackers

Attackers and malware writers, like many other people, tend to specialize, honing their skills in one particular discipline in order to maximize their chances for success. But Microsoft researchers have come across a series of malware samples and exploits that show that some attackers are beginni...

CentOS Update for gnutls CESA-2012:0428 centos5

Check for the Version of gnutls OpenVAS Vulnerability Test CentOS Update for gnutls CESA-2012:0428 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

RedHat Update for gnutls RHSA-2012:0428-01

Check for the Version of gnutls OpenVAS Vulnerability Test RedHat Update for gnutls RHSA-2012:0428-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

USN-1349-1: X.Org vulnerability

It was discovered that the X wrapper incorrectly checked certain console permissions when launched by unprivileged users. An attacker connected remotely could use this flaw to start X, bypassing the console permissions check...

New Mac Backdoor Olyx Found Bundled With Windows Malware

Security researchers have discovered a new piece of malware that targets Mac OS X users and installs a remote-control backdoor on compromised machines. The malware, called Olyx, was discovered in a package that also contained some Windows malware and researchers say that the Mac backdoor is...

BigAnt Server 2.52 - Remote Buffer Overflow (2)

!/usr/bin/python BigAnt Server 2.52 remote buffer overflow exploit 2 Author: DouBleZer0 Vulnerability discovered by Lincoln a another version of the original exploit by Lincoln application is little hazy.. import sys,socket host = sys.argv1 buffer= "\x90" 20 ./msfpayload...

ProSysInfo TFTP Server Buffer Overflow

!/usr/bin/python ProSysInfo TFTP Server TFTPDWIN 0.4.2 Coded by Wraith import os import sys import struct import socket import time print "\nProSysInfo TFTP Server TFTPDWIN 0.4.2" print "Note: This vuln is sensitive to different buffer length\n" if lensys.argv!=2: print "Usage: tftpdwin.py "...

Build mysql remote connection for the root user permissions-bug warning-the black bar safety net

The following statement has the ROOT user the same permissions. Everyone in the holding station should come across. the root user of mysql, you can only locally connected, the external refuse the connection. The following methods can help you solve this problem, the following statements function...

Hack how to Access to access MSSQL Data-vulnerability warning-the black bar safety net

First of all note that, this method have long had, but with time probably in my head quiet for too long, it has been in the oblivion state. Thanks for the Trace information. Often encounter arbitrary File Download vulnerability, the General processing method is to put the database connection file...

Establish a remote connection for the root user-bug warning-the black bar safety net

The following statement has the ROOT user the same permissions. Everyone in the holding station should come across. the root user of mysql, you can only locally connected, the external refuse the connection. The following methods can help you solve this problem, the following statements function...

CVE-2008-1293

ldm in Linux Terminal Server Project LTSP 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 aka display :6...

Debian Security Advisory DSA 042-1 (gnuserv, xemacs21)

The remote host is missing an update to gnuserv, xemacs21 announced via advisory DSA 042-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Using a reverse connection break the tcp/ip limit of the process-vulnerability warning-the black bar safety net

Everyone is engaged in unicode when there's no found sometimes tftp fails, that is the other host is forced to close a remote connection, this situation generally is the other administrator for the tcp/ip or the firewall's sake, yesterday I after testing, found a way to break this limitation of t...

FTP Voyager <= 14.0.0.3 (CWD) Remote Stack Overflow Exploit PoC

No description provided by source. / FTP Voyager = 14.0.0.3 CWD Remote Stack Overflow There is a remote stack overflow in FTP Voyager triggered by a long 257 response After that, if the user hits abort.....................................B O O M Only a DoS, I dont think code execution is possible...