Chinese hackers penetrate multinational oil giants !

Hackers in China are causing havoc among computer systems of five multinational oil and gas companies, according to a new report by McAfee. Security outfits have warned that this type of attack could get lot worse as multinationals continue to prod the Chinese government. McAfee said in its Night...

broadcast-dropbox-listener NSE Script

Listens for the LAN sync information broadcasts that the Dropbox.com client broadcasts every 20 seconds, then prints all the discovered client IP addresses, port numbers, version numbers, display names, and more. If the newtargets script argument is given, all discovered Dropbox clients will be...

iscsi-info NSE Script

Collects and displays information from remote iSCSI targets. Example Usage nmap -sV -sC Script Output PORT STATE SERVICE 3260/tcp open iscsi | iscsi-info: | iqn.2006-01.com.openfiler:tsn.c8c08cad469d | Address: 192.168.56.5:3260,1 | Authentication: NOT required |...

iscsi-brute NSE Script

Performs brute force password auditing against iSCSI targets. Script Arguments iscsi-brute.target iSCSI target to brute-force. passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. creds.service, creds.global See the documentation for t...

ProFTPD IAC Remote Root Exploit

Exploit Title: ProFTPD IAC Remote Root Exploit Date: 7 November 2010 Author: Kingcope use IO::Socket; $numtargets = 13; @targets = Plain Stack Smashing Confirmed to work "FreeBSD 8.1 i386, ProFTPD 1.3.3a Server binary", PLATFORM SPEC "FreeBSD", OPERATING SYSTEM 0, EXPLOIT STYLE 0xbfbfe000, OFFSET...

Integard Home and Pro 2 - Remote HTTP Buffer Overflow

class Metasploit3 'Integard Home/Pro version 2.0', 'Description' = %q Exploit for Integard HTTP Server, vulnerability discovered by Lincoln , 'Author' = 'Lincoln', 'Nullthreat', 'rick2600', 'corelanc0d3r' , 'License' = MSFLICENSE, 'Version' = '$Revision: $', 'References' =...

CentOS 5 : scsi-target-utils (CESA-2010:0362)

An updated scsi-target-utils package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow

This module exploits a buffer overflow in l3codecx.ax while processing a AVI files with MPEG Layer-3 audio contents. The overflow only allows to overwrite with 0's so the three least significant bytes of EIP saved on stack are overwritten and shellcode is mapped using the .NET DLL memory techniqu...

Mandriva Update for lvm2 MDVA-2010:105 (lvm2)

Check for the Version of lvm2 OpenVAS Vulnerability Test Mandriva Update for lvm2 MDVA-2010:105 lvm2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for lvm2 MDVA-2010:105 (lvm2)

Check for the Version of lvm2 OpenVAS Vulnerability Test Mandriva Update for lvm2 MDVA-2010:105 lvm2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Google Chrome < 4.0.249.89 Multiple Vulnerabilities

Binary data 5336.pasl...

Tough Road Ahead for Adobe on Security

Microsoft and its endless portfolio of products have been the favorite targets of attackers for more than a decade now. But if the events of the past year or so are any indication, it looks like that dubious distiniction now belongs to Adobe. The last 12 months have been rough for Adobe, the make...

TFTPD32 <= 2.21 Long Filename Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'TFTPD32 %q...

Immunity Canvas: NGINX

Name| nginx ---|--- CVE| CVE-2009-2629 Exploit Pack| CANVAS Description| Jinx Notes| CVE Name: CVE-2009-2629 VENDOR: nginx Notes: Use -O execshield:0 against Ubuntu targets - the default is to assume you want execshield avoidance. Repeatability: Infinite References:...

ProFTP 2.9 (welcome message) Remote Buffer Overflow Exploit (meta)

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3...

Adobe Flash Attacks Underway; Harden PDF Reader Immediately

Malicious hackers have found a new vulnerability in Adobe’s ever-present Flash software and are using rigged PDF documents to launch exploits against Windows targets. The Adobe Flash Player flaw, which is currently unpatched, affects millions of Windows XP and Windows Vista users. Adobe has...

rosoft media player local BOF exploit multi tagets

/ rsmpf.c Rosoft media player free local buffer overflow Exploit multi targets Coded By : SimO-s0fT [email protected] thanks To : Stack & fl0 fl0w & SKD and special thanks to str0ke for his advices and support you are the best brotha example : Coded By SimO-s0fT 0 Microsoft Windows...

Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit (multi target)

Exploit for unknown platform in category local exploits ====================================================================== Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit multi target ====================================================================== / rsmpf.c Rosoft media player...

Keystroke Logger

Added: 03/05/2009 Background This tool records all keystrokes which are typed at a computer's console. The keystrokes can be viewed in the exploit server's log. Limitations Logger works on Windows targets. A connection to the target is required to run this tool. Platforms Windows...

WinRAR 3.x LHA Buffer Overflow Exploit

No description provided by source. include include include //----------------------------------------- // 参数定义 //----------------------------------------- define BUFFSIZE 102400 define RETOFFSET 0x14 define FILELEN 0xE6 define DIRLEN 0x3FF-3 define LHLEN 22 define LELEN 6 define LEELEN 2 define...