Nmap NSE net: mysql-info

Connects to a MySQL server and prints information such as the protocol and version numbers, thread ID, status, capabilities, and the password salt. If service detection is performed and the server appears to be blocking our host or is blocked because of too many connections, then this script isn'...

Saltstack Minion Payload Deployer

This exploit module uses saltstack salt to deploy a payload and run it on all targets which have been selected default all. Currently only works against nix targets. Module Options msf use exploit/linux/local/saltstack/saltminiondeployer msf undefinedsaltminiondeployer show actions ...actions...

EggAvatar for vBulletin 3.8.x - SQL Injection

!/usr/bin/env perl use LWP::UserAgent; sub banner print "\n"; print " DSecurity \n"; print "\n"; print " Email:dsecurity.vnatgmail.com \n"; print "\n"; if@ARGVnew; $ua-agent"DSecurity"; $ua-cookiejar; sub login@ my $username=shift; my $password=shift; my $req = HTTP::Request-newPOST =...

cChatBox for vBulletin 3.6.8/3.7.x - SQL Injection

!/usr/bin/perl use LWP::UserAgent; $ua = LWP::UserAgent-new; $ua-agent"MyApp/0.1 "; print "\n"; print " EXPLOIT \n"; print "\n"; print " Portal: cchatbox \n"; print " Bug: SQLI \n"; print " Author: DSecurity \n"; print " Coder: vv0lll \n"; print "\n"; print "Use: exploit.pl address numberuser...

CVE-2009-5014

The default quickstart configuration of TurboGears2 aka tg2 before 2.0.2 has a weak cookie salt, which makes it easier for remote attackers to bypass repoze.who authentication via a forged authorization cookie, a related issue to CVE-2010-3852...

Authorization

The default quickstart configuration of TurboGears2 aka tg2 before 2.0.2 has a weak cookie salt, which makes it easier for remote attackers to bypass repoze.who authentication via a forged authorization cookie, a related issue to CVE-2010-3852...

CVE-2009-5014

The default quickstart configuration of TurboGears2 aka tg2 before 2.0.2 has a weak cookie salt, which makes it easier for remote attackers to bypass repoze.who authentication via a forged authorization cookie, a related issue to CVE-2010-3852...

CVE-2009-5014

The default quickstart configuration of TurboGears2 aka tg2 before 2.0.2 has a weak cookie salt, which makes it easier for remote attackers to bypass repoze.who authentication via a forged authorization cookie, a related issue to CVE-2010-3852...

CVE-2009-5014

Removed by vendor...

CVE-2009-5014

The default quickstart configuration of TurboGears2 aka tg2 before 2.0.2 has a weak cookie salt, which makes it easier for remote attackers to bypass repoze.who authentication via a forged authorization cookie, a related issue to CVE-2010-3852...

minerCPP 0.4b - Remote Buffer Overflow Format String

minerCPP 0.4b - Remote Buffer Overflow Format String !/usr/bin/env python minerCPP 0.4b Remote BOF+Format String Attack Exploit Software Link: http://sourceforge.net/projects/minercpp/ Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email:...

minerCPP 0.4b - Remote Buffer Overflow / Format String

!/usr/bin/env python minerCPP 0.4b Remote BOF+Format String Attack Exploit Software Link: http://sourceforge.net/projects/minercpp/ Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] Tested on Windows 7 In order to make...

migascms "Xinha" Plugin Configuration Injection Vulnerability

Exploit for php platform in category web applications ============================================================= migascms "Xinha" Plugin Configuration Injection Vulnerability =============================================================...

mssql hash password cracking method-vulnerability warning-the black bar safety net

mssql hash stored in the table master. dbo. sysxlogins, with select name,password from master. dbo. sysxlogins can extract the user hash. 0x01004E04BE46023057E323AF27269E5b7ddca140c98d225bdd3d06e8efe8cfaec02985b27b38059fa3b18349612b Decomposition: Constant part: 0×0 1 0 0 Salt part: 4E04BE46 Mixi...

Using CAIN to crack SqlServer2000 HASH-bug warning-the black bar safety net

All users of HASH are present in the master. dbo. sysxlogins table surface: select name,password from master. dbo. sysxlogins You can grab the HASH. The following is my machine on the SA user HASH: a 0x01004E04BE46023057E323AF27269E5b7ddca140c98d225bdd3d06e8efe8cfaec02985b27b38059fa3b18349612b An...

Wbb3 - Blind SQL Injection

Wbb3 - Blind SQL Injection !/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; print q ----------------------------------------------- Wbb3 Blind Sql Injection Injection in Announce Plugin Kleinanzeigen Markt Coded By Molli use: ano.pl url user id Announce Catid Google:...

Wbb3 - Blind SQL Injection

!/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; print q ----------------------------------------------- Wbb3 Blind Sql Injection Injection in Announce Plugin Kleinanzeigen Markt Coded By Molli use: ano.pl url user id Announce Catid Google: "inurl:index.php?page=Announceshow" Special greetz...

CVE-2009-4304

Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not use a random password salt in config.php, which makes it easier for attackers to conduct brute-force password guessing attacks...

SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit

No description provided by source. ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru,...

Dana Portal - Remote Change Admin Password

Dana Portal - Remote Change Admin Password !/usr/bin/python Abysssec Inc Public Exploit Code Title : Dana Portal Remote Change Admin Password Exploit Affected Version : ASP Version Vulnerable File : albumdetail.asp Vendor Site : www.dana.ir note : no point to keep it private anymore . This exploi...