CPUID-based Context Keyed Payload Encoder

This is a Context-Keyed Payload Encoder based on CPUID and Shikata Ga Nai. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/poly' class MetasploitModule 'CPUID-based Context Keyed Payload Encoder',...

CVE-2010-1446: Undefined Security Weakness

arch/powerpc/mm/fslbookemmu.c in KGDB in the Linux kernel 2.6.30 and other versions before 2.6.33, when running on PowerPC, does not properly perform a security check for access to a kernel page, which allows local users to overwrite arbitrary kernel memory, related to Fsl booke...

CVE-2010-1451: Out-of-bounds Write

The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S in the Linux kernel before 2.6.33 on the SPARC platform does not properly obtain the value of a certain PAGEEXEC4U bit and consequently does not properly implement a non-executable stack, which makes it easier for context-dependent...

JBoss JMX Console Beanshell Deployer WAR Upload and Deployment

This module can be used to install a WAR file payload on JBoss servers that have an exposed "jmx-console" application. The payload is put on the server by using the jboss.system:BSHDeployer's createScriptDeployment method. Module Options msf use exploit/multi/http/jboss/bshdeployer msf...

Ipswitch WS_FTP Professional Detection (Windows SMB Login)

SMB login-based detection of Ipswitch WSFTP Professional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

JBoss JMX Console Deployer Upload and Execute

$Id: jbossmaindeployer.rb 8575 2010-02-21 01:44:34Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Linux i686 - pacman -S default package: backdoor - 64 bytes

Linux i686 - pacman -S default package: backdoor - 64 bytes. Shellcode exploit for linux platform / Title : Linux i686 - pacman -S default package: backdoor - 64 bytes Author : Jonathan Salwan Mail : submit ! shell-storm.org Web : http://www.shell-storm.org Pacman is a software package manager,...

Linux i686 - pacman -R - 59 bytes

Linux i686 - pacman -R - 59 bytes. Shellcode exploit for linux platform / Title : Linux i686 - pacman -R - 59 bytes Author : Jonathan Salwan Mail : submit ! shell-storm.org Web : http://www.shell-storm.org Pacman is a software package manager, developed as part of the Arch Linux distribution. Wit...

linux/x86 - pacman -R - 59 bytes

Exploit for linux/x86 platform in category shellcode ================================== Linux i686 - pacman -R - 59 bytes ================================== / Title : Linux i686 - pacman -R - 59 bytes Author : Jonathan Salwan Pacman is a software package manager, developed as part of the Arch Lin...

Ruby Detection (Windows SMB Login)

SMB login-based detection of Ruby. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.900799";...

CVE-2009-3722: Undefined Security Weakness

The handledr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level CPL before accessing a debug register, which allows guest OS users to cause a denial of service trap on the host OS via a crafted application...

CVE-2009-3638: Undefined Security Weakness

Integer overflow in the kvmdevioctlgetsupportedcpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.31.4 allows local users to have an unspecified impact via a KVMGETSUPPORTEDCPUID request to the kvmarchdevioctl function...

CVE-2009-2910: Exposure of Sensitive Information to an Unauthorized Actor

arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x8664 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode...

Microsoft Visual Products Version Detection

Detects the installed version of Microsoft Visual Products. This script finds the installed product version of Microsoft Visual Products. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Directory traversal

Directory traversal vulnerability in arch.php in beLive 0.2.3 allows remote attackers to read arbitrary files via a .. dot dot in the arch parameter...

Debian Security Advisory DSA 1777-1 (git-core)

The remote host is missing an update to git-core announced via advisory DSA 1777-1. OpenVAS Vulnerability Test $Id: deb17771.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1777-1 git-core Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Qbik WinGate Version Detection

Detects the installed version of Qbik WinGate. The script logs in via smb, searches for Qbik WinGate in the registry and gets the version from registry. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2009-0605: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack consumption vulnerability in the dopagefault function in arch/x86/mm/fault.c in the Linux kernel before 2.6.28.5 allows local users to cause a denial of service memory corruption or possibly gain privileges via unspecified vectors that trigger page faults on a machine that has a registered...

Unix TTY, Interact with Established Connection

Interacts with a TTY on an established socket connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 0 include Msf::Payload::Single def initializeinfo = supermergeinfoinfo,...

CVE-2008-5701: Undefined Security Weakness

Array index error in arch/mips/kernel/scall64-o32.S in the Linux kernel before 2.6.28-rc8 on 64-bit MIPS platforms allows local users to cause a denial of service system crash via an o32 syscall with a small syscall number, which leads to an attempted read operation outside the bounds of the...