The father of all bombs - another webdav fiasco

Apache moddav / svn Remote Denial of Service Exploit Google Dorks: inurl:svn inurl:trunk "powered by subversion version" Information on the bug XML Bomb: http://blog.didierstevens.com/2008/09/23/dismantling-an-xml-bomb/ Enjoy! -------------------------------------------------------------------...

Apache mod_dav / svn Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ===================================================== Apache moddav / svn Remote Denial of Service Exploit ===================================================== furoffyourcat.pl Apache moddav / svn Remote Denial of Service Exploit by kcope / Jun...

Apache mod_dav svn - Remote Denial of Service

Apache moddav svn - Remote Denial of Service furoffyourcat.pl Apache moddav / svn Remote Denial of Service Exploit by kcope / June 2009 Will exhaust all system memory Needs Authentication on normal DAV This can be especially serious stuff when used against svn subversion servers!! Svn might let t...

Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Exploit (pl)

No description provided by source. !/usr/bin/perl -W Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Exploit written by ka0x ka0x01alt+64gmail.com Advisory: http://www.milw0rm.com/exploits/8765 Greets: an0de, Piker, xarnuz, NullWave07, Pepelux, k0rde, JoSs, Trancek and others! use IO::Socke...

Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass (2)

Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass 2 !/usr/bin/perl -W Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Exploit written by ka0x Advisory: http://www.milw0rm.com/exploits/8765 Greets: an0de, Piker, xarnuz, NullWave07, Pepelux, k0rde, JoSs, Trancek and others! use IO::Sock...

CentOS 4 : kernel (CESA-2009:0459)

Updated kernel packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass (2)

!/usr/bin/perl -W Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Exploit written by ka0x Advisory: http://www.milw0rm.com/exploits/8765 Greets: an0de, Piker, xarnuz, NullWave07, Pepelux, k0rde, JoSs, Trancek and others! use IO::Socket ; my $host, $path = @ARGV ; my $port = 80 ; webserver...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

iodined <= 0.4.2-2 (forged DNS packet) Denial of Service Exploit

No description provided by source. !/usr/bin/perl iodined = 0.4.2 DoS exploit by Albert Sellares whatsatwekkdotnet http://www.wekk.net 2009-04-26 This exploit shuts down the iodined daemon using a forged DNS packet. It works on the last debian stable version 0.4.2-2. It produces a segmentation...

iodined 0.4.2-2 - forged DNS packet Denial of Service

iodined 0.4.2-2 - forged DNS packet Denial of Service !/usr/bin/perl iodined http://www.wekk.net 2009-04-26 This exploit shuts down the iodined daemon using a forged DNS packet. It works on the last debian stable version 0.4.2-2. It produces a segmentation fault on the daemon side. use IO::Socket...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS : linux, linux-source-2.6.15/22 vulnerabilities (USN-659-1)

It was discovered that the direct-IO subsystem did not correctly validate certain structures. A local attacker could exploit this to cause a system crash, leading to a denial of service. CVE-2007-6716 It was discovered that the disabling of the ZEROPAGE optimization could lead to large memory...

Zervit Web Server 0.3 - sockets++ crash Remote Denial of Service

Zervit Web Server 0.3 - sockets++ crash Remote Denial of Service !/usr/bin/perl Zervit HTTP Server \n"; print "- Exemple: file.pl 127.0.0.1 80\n"; exit; $ip = $ARGV0; $port = $ARGV1; print "+ Sending request...\n"; for$i=0;$i=4;$i++ $socket = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$ip",...

Xitami Web Server 5.0 - Remote Denial of Service

Xitami Web Server 5.0 - Remote Denial of Service !/usr/bin/perl Xitami HTTP Server \n"; print "- Exemple: file.pl 127.0.0.1 80\n"; exit; $ip = $ARGV0; $port = $ARGV1; print "+ Sending request...\n"; for$i=0;$inew Proto = "tcp", PeerAddr = "$ip", PeerPort = "$port" || die "- Failed\n"; print $sock...

Enhanced CTorrent / dtorrent "btFiles::BuildFromMI()"缓冲区溢出漏洞

CNCAN ID：CNCAN-2009042102 Enhanced CTorrent是一款UNIX环境下的Bittorrent客户端。 Enhanced CTorrent存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 btfiles.cpp包含的"btFiles::BuildFromMI"函数存在边界错误，诱使用户打开特殊构建的torrent文件，可导致触发基于栈的缓冲区溢出，可能以应用程序权限执行任意指令。 Enhanced CTorrent 3.x 目前没有解决方案提供： http://sourceforge.net/projects/dtorrent/...

Steamcast 0.9.75b Denial Of Service

!/usr/bin/perl Steamcast 0.9.75 beta Remote Denial of Service Download :http://www.steamcast.com Tested Under Windows XP and linux Dork for test :"Powered By Steamcast "0.9.75 beta Author: ksa04 use strict; use warnings; use IO::Socket; my $host = shift || die "usage: perl $0 host port\n"; my $po...

Steamcast 0.9.75b - Remote Denial of Service

!/usr/bin/perl Steamcast 0.9.75 beta Remote Denial of Service Download :http://www.steamcast.com Tested Under Windows XP and linux Dork for test :"Powered By Steamcast "0.9.75 beta Author: ksa04 use strict; use warnings; use IO::Socket; my $host = shift || die "usage: perl $0 host port\n"; my $po...

Flatnuke 2.7.1 Privilege Escalation

!/usr/bin/env perl Flatnuke timeout5; $lwp-agent'Links 2.1pre26; Linux 2.6.19-gentoo-r5 x8664; x'; $lwp-defaultheader'Cookie' = "myforum=$user; path=$path; secid=$secid; path=$path;"; $ret = $lwp-post"http://$host/$path/index.php?mod=noneLogin",...

Flatnuke <= 2.7.1 (level) Remote Privilege Escalation Exploit

No description provided by source. !/usr/bin/env perl Flatnuke = 2.7.1 level Privilege Escalation 0-day Exploit Description ----------- Flatnuke contains one flaw that may allow a user to become administrator. The issue is due to 'sections/noneLogin/section.php' script not properly sanitizing use...

Steamcast 0.9.75b Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ================================================== Steamcast 0.9.75b Remote Denial of Service Exploit ================================================== !/usr/bin/perl Steamcast 0.9.75 beta Remote Denial of Service Download...

Flatnuke 2.7.1 - level Privilege Escalation

Flatnuke 2.7.1 - level Privilege Escalation !/usr/bin/env perl Flatnuke timeout5; $lwp-agent'Links 2.1pre26; Linux 2.6.19-gentoo-r5 x8664; x'; $lwp-defaultheader'Cookie' = "myforum=$user; path=$path; secid=$secid; path=$path;"; $ret = $lwp-post"http://$h...