HackerOne: Reflected File Download

Info: Reflected File Download is a new web attack vector. It allows an attacker to craft a malicious file and present it to a victim, but there is no file present at the server. It was recently published at the BlackHat Eupore 2014 by Oren Hafif. Link to his presentation is given at the end...

Blackhat – Upcoming Cyber Thriller Movie

"Hacking" is not just popular among cyber security experts and criminals, but also is a great interest for movies industries as well. Hollywood movies such as 1995 released Hackers and 2001 released Swordfish are examples of it, and now Chris Hemsworth's new flick Blackhat. Blackhat – An upcoming...

Attackers Using Compromised Web Plug-Ins in CryptoPHP Blackhat SEO Campaign

Researchers have discovered a group of attackers who have published a variety of compromised WordPress themes and plug-ins on legitimate-looking sites, tricking developers into downloading and installing them on their own sites. The components then give the attackers remote control of the...

joola.io: Weak Random Number Generator for Auth Tokens

https://github.com/joola/joola/blob/a534c3dca1a0deaec99c192978e61a35dd3a9069/lib/common/index.jsL90-L98 Math.random is not sufficient for cryptographic purposes such as authentication tokens. An example replacement that uses window.crypto.getRandomValues is available here:...

Blackhat 2014 Arsenal Experience

Last week at Blackhat Arsenal 2014, Pete and I @willis presented on Serpico. Arsenal was a great experience and I would highly recommend to anyone as an attendee or presenter. We got some great feedback on the project, so thank you to anyone who stopped by. Here were the top 3 feature requests an...

WordPress SAICO Theme 1.0-1.0.2 - Arbitrary File Upload Vulnerability

No description provided by source. . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress SAICO theme Arbitrary File Upload Vulnerability Author: Byakuya Date: 10/19/2013 Vendor...

MyBulletinBoard (MyBB) <= 1.04 (misc.php COMMA) SQL Injection (2)

No description provided by source. !/usr/bin/perl -w MyBB = 1.04 misc.php COMMA Remote SQL Injection Exploit 2 , Perl C0d3 Milw0rm ID :- http://www.milw0rm.com/auth.php?id=1539 D3vil-0x1 | Devil-00 BlackHat : DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR...

Win32 Shellcode (cmd.exe) for XP SP2 Turkish 26 Bytes

No description provided by source. / 26 Bytes Win32 Shellcode cmd.exe for XP SP2 Turkish Author: Hellcode Research || TCC The Computer Cheats http://tcc.hellcode.net memberz: celil 'karak0rsan unuver , murderkey, murat kaslioglu, bob from murderkey: I love you merve lol from karak0rsan: fuck u ys...

Simple DNS Plus <= 5.0/4.1 - Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl Simple DNS Plus 5.0/4.1 remote Denial of Service exploit usage: sdns-dos.pl dns server dns source port num of packets Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV 3 printsdns-dos.pl dns server dns source port num o...

groone glinks 2.1 - Remote File Inclusion Vulnerability

No description provided by source. GLINKS v2.1 Remote File Include Vulnerability http://www.groonesworld.com/programs/glinks/glinks.zip ======================================================== Author: k3vin mitnick tunisianblackhat team = Home : http://tunisianblackhat.com & scarface-team.org =...

WordPress Think Responsive Themes 1.0 - Arbitrary File Upload Vulnerability

No description provided by source. . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Think Responsive Themes Arbitrary File Upload Vulnerability Author: Byakuya Date:...

Oracle 9i XDB HTTP PASS Overflow (win32)

No description provided by source. $Id: oracle9ixdbpass.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Oracle 9i XDB FTP UNLOCK Overflow (win32)

No description provided by source. $Id: oracle9ixdbftpunlock.rb 10559 2010-10-05 23:41:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...

Disqus Blog Comments Blind SQL Injection Vulnerability

No description provided by source. :----------------------------------------------------------------------------------------------------------------------------------------: Blog Comments Powered By Disqus - Sql Injection...

phpMyAdmin <= 3.2 - 'server_databases.php' Remote Command Execution Vulnerability

phpMyAdmin 'serverdatabases.php' 远程命令执行漏洞 受影响的系统 Typo3 phpMyAdmin 3.2 Typo3 phpMyAdmin 3.0.1 Typo3 phpMyAdmin 3.0 Typo3 phpMyAdmin 0.2.2 Turbolinux Appliance Server 3.0 x64 Turbolinux Appliance Server 3.0 SuSE openSUSE 10.3 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 phpMyAdmin phpMyAdmin 2.11....

WordPress Switchblade Themes Arbitrary 1.3 - File Upload Vulnerability

No description provided by source. . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Switchblade Themes Arbitrary File Upload Vulnerability Author: Byakuya Date: 11/01/2013...

Oracle 9i XDB FTP PASS Overflow (win32)

No description provided by source. $Id: oracle9ixdbftppass.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

WordPress Think Responsive 1.0 Shell Upload

. . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Think Responsive Themes Arbitrary File Upload Vulnerability Author: Byakuya Date: 11/01/2013 Vendor Homepage:...

WordPress Curvo Shell Upload

. . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Curvo Themes Arbitrary File Upload Vulnerability Author: Byakuya Date: 10/28/2013 Vendor Homepage: http://themeforest.net/...

Avira Internet Security avipbb.sys Filter Bypass and Privilege Escalation

Exploit for php platform in category web applications . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Area53 theme Arbitrary File Upload Vulnerability Author: Byakuya Date:...