[(D)DoS Deflate] Script designed to block a denial of service attack

DoS+Deflate.gif DDoS Deflate is a lightweight bash shell script designed to assist in the process of blocking a denial of service attack. It utilizes the command below to create a list of IP addresses connected to the server, along with their total number of connections. It is one of the simplest...

NETGEAR ProSafe - Information Disclosure

NETGEAR ProSafe - Information Disclosure !/usr/bin/python Netgear ProSafe - CVE-2013-4775 PoC written by Juan J. Guelfo @ Encripto AS [email protected] Copyright 2013 Encripto AS. All rights reserved. This software is licensed under the FreeBSD license. http://www.encripto.no/tools/license.php...

BIND Vulnerablilty Enables DNS Cache Poisoning Attack

A vulnerability in the BIND domain name system DNS software could give an attacker the ability to easily and reliably control queried name servers chosen by the most widely deployed DNS software on the Internet, according to new research presented at the Woot Conference in Washington D.C. today...

Java based cross platform malware found in wild

Other than Windows, Now other platforms are becoming more popular every day and attracting bad guys who are starting to create malicious code for other systems. Java applications can run on multiple platforms with ease, thus no surprise that malicious code written in Java that is designed to targ...

Galil-RIO Modbus - Denial of Service

Exploit Title: Galil RIO-47100 Date: 05-01-2013 Exploit Author: Sapling Vendor Homepage: www.galilmc.com Version: Rio Firmware Prior to 1.1d CVE : CVE-2013-0699 ICSA: ICSA-13-116-01 / There are many different ways to crash this PLC but most of them are centralized around the repeating a request i...

whois-ip NSE Script

Queries the WHOIS services of Regional Internet Registries RIR and attempts to retrieve information about the IP Address Assignment which contains the Target IP Address. The fields displayed contain information about the assignment and the organisation responsible for managing the address space...

MGASA-2013-0228 Updated squid packages fix security vulnerabilities

Due to incorrect data validation Squid is vulnerable to a buffer overflow attack when processing specially crafted HTTP requests. This problem allows any trusted client or client script who can generate HTTP requests to trigger a buffer overflow in Squid, resulting in a termination of the Squid...

Nginx 1.3.9 / 1.4.0 Buffer Overflow

encoding: ASCII abort"$0 host port" if ARGV.length 2 require 'ronin' $count = 0 rop address taken from nginx binary find in the repo poprdi = 0x00427006 poprsi = 0x0043a00e poprdx = 0x0041b8fa poprax = 0x00442c80 mmap64 = 0x4029b0 mmapgot = 0x67f290 mmapaddr = 0x00410000 rsitorax = 0x0042afcb...

Download Tortilla Tool - Anonymize everything through Tor

Recent disclosures by whistleblower Edward Snowden claiming that internet traffic is being intercepted and used by the Americans in their war on terror, force to re-think about the user's privacy and online anonymity. It has been relatively common knowledge for years that wherever we go on the we...

AVAST Internet Security Suite - Persistent Vulnerabilities

Title: ====== AVAST Internet Security Suite - Persistent Vulnerabilities Date: ===== 2013-06-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=969 VL-ID: ===== 969 Common Vulnerability Scoring System: ==================================== 3.4 Introduction: =============...

TRENDnet TE100-P1U Print Server Firmware 4.11 - Authentication Bypass

Exploit Title: TRENDnet TE100-P1U Print Server Firmware 4.11 Authentication Bypass Vulnerability Date: 2013/6/20 Exploit Author: Chako Firmware Version: 4.11 Tested on: Windows 7 Description: ===================== A remote authentication bypass vulnerability affects TRENDnet TE100-P1U Print Serve...

TRENDnet TE100-P1U Print Server Firmware 4.11 - Authentication Bypass

TRENDnet TE100-P1U Print Server Firmware 4.11 - Authentication Bypass Exploit Title: TRENDnet TE100-P1U Print Server Firmware 4.11 Authentication Bypass Vulnerability Date: 2013/6/20 Exploit Author: Chako Firmware Version: 4.11 Tested on: Windows 7 Description: ===================== A remote...

TRENDnet TE100-P1U Authentication Bypass

Exploit Title: TRENDnet TE100-P1U Print Server Firmware 4.11 Authentication Bypass Vulnerability Date: 2013/6/20 Exploit Author: Chako Firmware Version: 4.11 Tested on: Windows 7 Description: ===================== A remote authentication bypass vulnerability affects TRENDnet TE100-P1U Print Serve...

TRENDnet TE100-P1U Authentication Bypass Vulnerability

TRENDnet TE100-P1U with print server firmware 4.11 suffers from an authentication bypass vulnerability that allows reset to factory settings or IP address change. Exploit Title: TRENDnet TE100-P1U Print Server Firmware 4.11 Authentication Bypass Vulnerability Date: 2013/6/20 Exploit Author: Chako...

shared_hosting

This plugin tries to find out if the web application under test is stored in a shared hosting. The procedure is pretty simple, using bing search engine, the plugin searches for "ip:1.2.3.4" where 1.2.3.4 is the IP address of the webserver. One configurable option exists: resultlimit Fetch the fir...

No-IP Dynamic Update Client (DUC) 2.1.9 - Local IP Address Stack Overflow

To be easily portable, the client is written in C, with minimal dependencies. So far so good, but the problem is, it is plagued of buffer overflows. import os binary = "./noip-2.1.9-1/binaries/noip2-i686" shellcode = "\xeb\x1f\x5e\x89\x76\x08\x31\xc0\x88\x46\x07\x89\x46\x0c\xb0\x0b"...

Adobe to Patch Reader Information Leak Bug

Adobe is planning to patch a fairly low severity security vulnerability in all of the current versions of Reader and Acrobat that could enable an attacker to track which users have opened a certain PDF document. The vulnerability can’t be used for code execution, but researchers say it could be...

CVE-2013-1914

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library aka glibc or libc6 2.17 and earlier allows remote attackers to cause a denial of service crash via a 1 hostname or 2 IP address that triggers a large number of domain conversion results...

Cisco Linksys WRT310N 2.0.00 Denial Of Service Vulnerability

Cisco Linksys WRT310N version 2.0.00 suffers from a remote denial of service vulnerability. Summary -------------------- Software : Cisco/Linksys Router OS Hardware : WRT310N v2 others currently untested Version : 2.0.00 others currently untested Website : http://www.linksys.com Issue : Remote...

Design/Logic Flaw

Cisco Universal Broadband aka uBR 10000 series routers, when an IPv4/IPv6 dual-stack modem is used, allow remote attackers to cause a denial of service routing-engine reload via unspecified changes to IP address assignments, aka Bug ID CSCue15313...