Apache Tomcat - 'WebDAV' Remote File Disclosure

!/usr/bin/perl Apache Tomcat Remote File Disclosure Zeroday Xploit kcdarookie aka eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work... use IO::Socket; use...

memcached Detection

memcached, a memory-based object store, is listening on the remote port. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid26197; scriptversion"1.16"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"memcached Detection"; scriptsummaryenglish:'Sends stats command to...

MS Windows DNS RPC Remote Buffer Overflow Exploit (port 445) v2

No description provided by source. Exploit v2 features: - Target Remote port 445 by default but requires auth - Manual target for dynamic tcp port without auth - Automatic search for dynamic dns rpc port - Local and remote OS fingerprinting auto target - Windows 2000 server and Windows 2003 serve...

Cisco Security Agent远程端口扫描拒绝服务漏洞

Cisco Security Agent CSA可以为服务器和桌面计算系统提供威胁防护。 CSA在处理端口扫描等特殊情况时存在漏洞，远程攻击者可能利用此漏洞导致服务响应能力下降。 如果以特定的选项对CSA for Linux运行端口扫描的话，就可能消耗过多的系统资源，导致拒绝服务。 Cisco CSA 5.0 for Linux Hotfix 5.0.0.1 Cisco CSA 4.5 for Linux Hotfix 4.5.1.6 Cisco CUCM = 5.04 Cisco CUPS = 1.02 临时解决方法：...

0verkill 0.16 - ASCII-ART Game Remote Integer Overflow Crash (PoC)

0verkill 0.16 - ASCII-ART Game Remote Integer Overflow Crash PoC !/usr/bin/env python ----------------------------------------------------- Exploit id: FSE:016 Author: Federico Fazzi Contact: [email protected] Date: 09/06/2006, 13:58 Sinthesis: 0verkill 0.16, Remote integer overflow Product:...

UltraVNC w/ DSM plugin detection

UltraVNC seems to be running on the remote port. Upon connection, the remote service on this port always sends the same 12 pseudo-random bytes. It is probably UltraVNC with the DSM encryption plugin. This plugin tunnels the RFB protocol into a RC4 encrypted stream. SPDX-FileCopyrightText: 2006...

MS04-011 Microsoft Private Communications Transport Overflow

This module exploits a buffer overflow in the Microsoft Windows SSL PCT protocol stack. This code is based on Johnny Cyberpunk's THC release and has been tested against Windows 2000 and Windows XP. To use this module, specify the remote port of any SSL service, or the port and protocol of an...

SAP DB detection

SAP is listening on the remote port. Description : SAP/DB vserver, an ERP software, is running on the remote port. Please make sure that you applied the last patches, as a buffer overflow attack has been published against it. OpenVAS Vulnerability Test $Id: sapdbdetect.nasl 6063 2017-05-03...

EGD detection

A random number generator is listening on the remote port. Description : The Entropy Gathering Daemon is running on the remote host. EGD is a user space random generator for operating systems that lack /dev/random SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted...

SAP/DB vserver Detection

SAP/DB vserver, an ERP software, is running on the remote port. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CA eTrust Intrusion Detection System Detection

The remote host is running the CA eTrust Intrusion Detection System service. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid18536; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"CA eTrust Intrusion...

Entropy Gathering Daemon (EGD) Detection

The Entropy Gathering Daemon is running on the remote host. EGD is a user space random generator for operating systems that lack /dev/random %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid18393; scriptversion"1.15"...

SAP DB / MaxDB Detection

SAP DB or MaxDB, an ERP software, is running on the remote port. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11929; scriptversion"1.26"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"SAP DB / MaxDB Detection";...

NetInfo Daemon Detection

A 'NetInfo' daemon is running on this port. NetInfo is in charge of maintaining databases or 'maps' regarding the system. Such databases include the list of users, the password file, and more. If the remote host is not a NetInfo server, this service should not be reachable directly from the...

apcnisd / apcupsd Detection

The remote service is a daemon to monitor and manage an APC UPS battery backup unit. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid11483; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate",...

VisualRoute Web Server Detection

VisualRoute is a web-based solution which allows unauthenticated users to perform traceroutes against arbitrary hosts on the Internet. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10744; scriptversion "1.22"; name"english" = "VisualRoute Web Server Detection";...

MySQL Server Detection

The remote host is running MySQL, an open source database server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10719; scriptversion"1.46"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/08/06"; scriptxrefname:"IAVT", value:"0001-T-0802";...

Squid Web Proxy 2.3 - Reverse Proxy

source: https://www.securityfocus.com/bid/3062/info Squid is a free client-side web proxy that retrieves cached web pages for quick browsers and a reduction in bandwidth consumption. Squid servers, when configured as an "HTTP accelerator only", may allow remote attackers to use them as port...

Apple Filing Protocol Server Detection

The remote service understands the Apple Filing Protocol AFP and responds to a 'FPGetSrvrInfo' 'DSIGetStatus' request with information about itself. AFP is used to offer file services for Mac OS X as well as the older Mac OS. In the past, it has also been known as 'AppleTalk Filing Protocol' and...

POP Server Detection

The remote host is running a server that understands the Post Office Protocol POP, used by email clients to retrieve messages from a server, possibly across a network link. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10185; scriptversion "1.25"; scriptcvsdate"Date:...