PiceBOT Crimeware Kit targeting Latin America Banks

A new Cyber Crimeware kit arrived in Hacking scenes called 'PiceBOT' just like other Latin American botnets such as vOlk Mexico & S.A.P.Z Peru and cost just $140 in underground market for Cyber criminals. Like other amazing exploit kits, the main purpose is the distribution of malware that steals...

Microsoft Word UNC Path Injector

This module modifies a .docx file that will, upon opening, submit stored netNTLM credentials to a remote host. It can also create an empty docx file. If emailed the receiver needs to put the document in editing mode before the remote server will be contacted. Preview and read-only mode do not wor...

通达OA日志内容存储型XSS,可窃取cookie

简要描述： 通达OA2013和2010版本，Office Anywhere 2013工作日志编辑页面存在存储型XSS，上级领导查看日志后能，可窃取到cookie 详细说明： 1、工作日志编辑页面 源码 绕过bypass 字符可构造XSS! 漏洞证明： 1、截取到得cookie 2、利用Cookie Injector 在支持同源策略条件下，替换cookie 登陆到Cookie用户ceshi2...

FOCA PRO 3.1 and MetaShield Protector Released

FOCA PRO 3.1 and MetaShield Protector Released Forensic FOCA New latest version of FOCA announced today, in this case a Forensic FOCA. This tool is specially created for forensic analyst, allowing them to crawl metadata from files and to create a powerful time-line of metadata. This information...

piwigo v.2.3.3 SQL Injector

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : piwigo SQL comments.php?displaymode=albums SQL 1 myerror...

Ani Shell v1.3 Released -- Mail Bomber (with less spam detection) & PHP Decoder

Ani Shell v1.3 Released -- Mail Bomber with less spam detection & PHP Decoder Introduction Ani-Shell is a simple PHP shell with some unique features like Mass Mailer , A simple Web-Server Fuzzer , DDoser, Back Connect , Bind Shell etc etc ! This shell has immense capabilities and have been writte...

Tourism Development Corporation of Punjab - Pakistan (TDCP) Hacked by Code Injector

Tourism Development Corporation of Punjab - Pakistan TDCP Hacked by Code Injector Code Injector from Team Indishell hack the official website of Tourism Development Corporation of Punjab - Pakistan and Deface it. Visitor to the website can see a deface page with some message on homepage. Hackers...

Tourism Development Corporation of Punjab - Pakistan (TDCP) Hacked by Code Injector

Tourism Development Corporation of Punjab - Pakistan TDCP Hacked by Code Injector Code Injector from Team Indishell hack the official website of Tourism Development Corporation of Punjab - Pakistan and Deface it. Visitor to the website can see a deface page with some message on homepage. Hackers...

cPanel Privilege Escalation

Privilege Escalation Exploit By TurkisH-RuleZ ////\ //\ //\ //\ //\ //\ //\ //\ //\ :::/\ ::\:.\ \::\ \ \ \ :\ \ ::: \ \::: \ \::\ \:::/ /: / \:::/ ::/\ .\ \ //\:\ \ :: \ \:: /:/ /: / /::/ /\/\:: ::\ \::::/ :\ \:: \ \:: \ \ /::/ /://\ \ \ ::\ \: \ \::\ ...

Ani-Shell v1.2 - Email-Alerts , Mass Code injector

Ani-Shell v1.2 - Email-Alerts , Mass Code injector New Features :- Trace-back Email Alerts PHP Evaluate Better Command Execution even supports older version of PHP Mass Code Injector Appender and Over-writer Lock Mode Customization Release Note : 1. Email Traceback is set to Off as default and...

Syctel Design Local File Inclusion

=========================================================================== Syctel Design Local File Inclusion Vulnerability =========================================================================== Name: Syctel Design Local File Inclusion Vulnerability Vendor: www.Syctel.Com Date: 2011-04-21...

Wow ! Backtrack Official Website's Server Hacked By Team Injector (1337db) !

Wow ! Backtrack Official Website's Server Hacked By Team Injector ! Attack on backtrack-linux.org From 1337 Team Injector . .--. .--. .---. . .'| / | | --: --: / .-.| .-. . . | / | | | '---' --' --' ' -'--'---| ; -' Since we already tapped into exploit-db and their server lies in the same subnet...

Team Injector (1337db) Hack Into Exploit-db Website !

Team Injector Hack Into Exploit-db Website ! ================================ Data Extracted From Exploit-db's Server ! ================================ $ uname -a Linux www 2.6.32-25-server 45-Ubuntu SMP Sat Oct 16 20:06:58 UTC 2010 x8664 GNU/Linux $ id uid=33www-data gid=33www-data...

Golf Club SQL Injection

Exploit Title: Golf Club SQL injection Vulnerability Date: 30/06/2010 Author: JaMbA Script url: http://www.internetdm.co.uk/site/pages.php?fid=0,1,362 Version: N/A Tested on: Windows CVE : EXPL0!T http://server/path/pages.php?fid=0,13&ppid=38SQL Greetz to : Alnjm33-virus-pal -g3n1ux -...

Icarus 2.0 - .pgn Universal Local Buffer Overflow Exploit SEH

Icarus 2.0 .pgn File Universal Local Buffer Overflow Exploit SEH. Local exploit for windows platform !/user/bin/perl Icarus 2.0 .PGn FileUniversal Local BOF SEH tested on win SP2 Author: germayax & D3v!LFUCK3R Download :http://www.randomsoftware.com/pub/icarus.exe GreTz 2 :his0k4 , EddyBAck0o , T...

Unfixed XSS vulnerability at www.ayna.com

Security researcher InjEctOr, has submitted on 06/03/2009 a cross-site-scripting XSS vulnerability affecting www.ayna.com, which at the time of submission ranked 100670 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is currently...

VIDEOSCRIPT.us - Authentication Bypass

VIDEOSCRIPT.us - Authentication Bypass -------------------------AllaH AkbaR------------------------------- videoscript Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

EZ Webitor - Authentication Bypass

EZ Webitor - Authentication Bypass -------------------------AllaH AkbaR------------------------------- ezwebitor Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

EZ Webitor - Authentication Bypass

-------------------------AllaH AkbaR------------------------------- ezwebitor Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] Site:http://www.snakespc.com/sc/index.php...

Hot Project 7 SQL Injection

-------------------------AllaH AkbaR------------------------------- Hot Project - Version 7 Auth Bypass Remote Sql Injecion --------------------------------------------------------------------------- Discovered By: HCOCAMAN ALGERIAN HaCkEr Mail: [email protected]...