Researcher Finds Scores of Web Browser Holes

A prominent security researcher has published the results of application tests on prominent Web browsers that he claims has uncovered scores of new, previously unknown security holes. Michal Zalewski is a Poland-based security researcher for Google. In a post on January 1, Zalewski used a blog po...

Announcing cross_fuzz, a potential 0-day in circulation, and more

Hi list, == SUMMARY == I am happy to announce the availability of crossfuzz - an amazingly effective but notoriously annoying cross-document DOM binding fuzzer that helped identify about one hundred bugs in all browsers on the market - many of said bugs exploitable - and is still finding more. Th...

IOCTL Fuzzer v1.2 Download

"IOCTL Fuzzer is a tool designed to automate the task of searching vulnerabilities in Windows kernel drivers by performing fuzz tests on them. The fuzzer's own driver hooks NtDeviceIoControlFile in order to take control of all IOCTL requests throughout the system. While processing IOCTLs, the...

HTTP Form Field Fuzzer

This module will grab all fields from a form, and launch a series of POST actions, fuzzing the contents of the form fields. You can optionally fuzz headers too option is enabled by default This module requires Metasploit: https://metasploit.com/download Current source:...

Adobe Shockwave Player - 'rcsL chunk' Memory Corruption

Abysssec Inc Public Advisory 1 Advisory information Title : Adobe Shockwave player rcsL chunk memory corruption Version : Adobe Shockwave player 11.5.8.612 latest on writing time Discovery : http://www.abysssec.com Vendor : http://www.adobe.com Impact : Critical Contact : shahin at abysssec.com ,...

Microsoft Releases New Regex Fuzzer

Microsoft has released a new fuzzing tool designed specifically to find mistakes in regular expressions in application code that could be vulnerable to attack. The SDL Regex Fuzzer identifies problematic lines that might cause an application to be susceptible to attacks that consume huge amounts ...

Simple FTP Fuzzer

This module will connect to a FTP server and perform pre- and post-authentication fuzzing This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Simple FTP Fuzzer', 'Description' = %q This module will...

SumatraPDF 1.1 - Denial of Service (PoC)

SumatraPDF 1.1 - Denial of Service PoC Exploit Title: SumatraPDF v1.1 Denial-of-Service Date: June, 14, 2010 Author: Matthew Bergin Software Link: blog.kowalczyk.info/software/sumatrapdf Version: 1.1 Tested on: Windows XP Home SP3 Code was generated utilizing a custom fuzzer, PoC creates an Acces...

Office^2 iPhone - .XLS Denial of Service

Office^2 iPhone - .XLS Denial of Service I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader Applications f...

Office 2 iPhone XLS Denial of Service

Exploit for hardware platform in category dos / poc ===================================== Office 2 iPhone XLS Denial of Service ===================================== I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.inj3ct0r.com/sploits/12662.xls which I randomly found on the...

Savy Soda Documents (Mobile Office Suite) XLS Denial of Service

Exploit for hardware platform in category dos / poc =============================================================== Savy Soda Documents Mobile Office Suite XLS Denial of Service =============================================================== I wrote a fuzzer "dumb fuzzer" and used a sample from...

GoodiWare GoodReader iPhone XLS Denial of Service

Exploit for hardware platform in category dos / poc I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.inj3ct0r.com/sploits/12663.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader Applications for iPhone. 0day.tod...

Savy Soda Documents - Mobile Office Suite '.XLS' Denial of Service

I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader Applications for iPhone...

Savy Soda Documents - Mobile Office Suite .XLS Denial of Service

Savy Soda Documents - Mobile Office Suite .XLS Denial of Service I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Docume...

GoodiWare GoodReader iPhone - .XLS Denial of Service

GoodiWare GoodReader iPhone - .XLS Denial of Service I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader...

GoodiWare GoodReader iPhone - '.XLS' Denial of Service

I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader Applications for iPhone...

Office^2 iPhone - '.XLS' Denial of Service

I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader Applications for iPhone...

Joomla QPersonel SQL Injection

!/usr/bin/python Joomla comqpersonel SQL Injection Remote Exploit Version 1.0 23th May 2010 public release By Valentin Hoebel [email protected] ASCII FOR BREAKFAST EXPLOIT BASED ON MY COLUMN FUZZER Fuzzer was enhanced so it serves as a Joomla Exploiter template About the Vulnerability:...

Entry Level Content Management System (EL CMS) - SQL Injection

Entry Level Content Management System EL CMS - SQL Injection + Contact : vir0e5athackermaildotcom + Group : TECON The Eye COnference Indonesia + Site : http://tecon-crew.org Software Information +SOftware : Entry Level Content Management System EL CMS +vendor : http://www.entrylevelcms.com/...

Entry Level CMS SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================== Entry Level CMS SQL Injection Vulnerability =========================================== +Title : SQL Injection Entry Level Content Management System EL CMS with schemafuzz.py --== Author ==-- + Autho...