FreePBX 2.10.0 Elastix 2.2.0 - Remote Code Execution

FreePBX 2.10.0 Elastix 2.2.0 - Remote Code Execution !/usr/bin/python Exploit Title: FreePBX / Elastix pre-authenticated remote code execution exploit Google Dork: oy vey Date: March 23rd, 2012 Author: muts Version: FreePBX 2.10.0/ 2.9.0, Elastix 2.2.0, possibly others. Tested on: multiple CVE :...

Offense is Being Pushed Underground

VANCOUVER–One of the first things we’re taught as kids is that sharing is good. If you have two Chocodiles and Billy has none, you give him one. Sharing once was the norm in the security community–or, more specifically, certain sections of it–as well, but if the atmosphere at the CanSecWest...

An End to Offensive Security Research? Unlikely

Many industries tend to run in identifiable cycles. Financial services, the auto industry, entertainment–they all have cycles. Because the security industry isn’t nearly as old as any of these, it hasn’t had much of a chance to establish such cycles. But one seems to be appearing now in the form ...

MS11-080 AfdJoinLeaf Privilege Escalation

This module exploits a flaw in the AfdJoinLeaf function of the afd.sys driver to overwrite data in kernel space. An address within the HalDispatchTable is overwritten and when triggered with a call to NtQueryIntervalProfile will execute shellcode. This module will elevate itself to SYSTEM, then...

HP Data Protector 6.11 Remote Buffer Overflow

!/usr/bin/python HP Data Protector 6.11 Remote Buffer Overflow Tested on Windows 2003 R2 + DEP Enabled Authors: muts & dookie Reference: http://www.exploit-db.com/exploits/17458/ Reference: http://www.coresecurity.com/content/HP-Data-Protector-multiple-vulnerabilities...

HP Data Protector 6.11 Remote Buffer Overflow + DEP Bypass

Exploit for windows platform in category remote exploits !/usr/bin/python HP Data Protector 6.11 Remote Buffer Overflow Tested on Windows 2003 R2 + DEP Enabled Authors: muts & dookie Reference: http://www.exploit-db.com/exploits/17458/ Reference:...

VUPEN Security Research - 7T Interactive Graphical SCADA System (IGSS) Remote Memory Corruption

VUPEN Security Research - 7T Interactive Graphical SCADA System ODBC Remote Memory Corruption http://www.vupen.com/english/research.php I. BACKGROUND --------------------- 7T Interactive Graphical SCADA System IGSS is a state-of-the art SCADA system used for monitoring and controlling industrial...

Sonique 1.96 .m3u Buffer Overflow

Exploit for windows platform in category local exploits Application: Sonique BOF EIP Overwrite Version: 1.96 Author: Securityxxxpert Date Submitted: May 17, 2011 Download Link: http://www.tucows.com/preview/193562 Tested on: Windows XP SP3 EIP Overwritten: 239 Bytes Pita Bytes: 0x00 0x83 0x88 0x9...

CoolPlayer Portable 2.19.2 - Local Buffer Overflow

CoolPlayer+ Portable Buffer Overflow Version: 2.19.2 Author: Securityxxxpert Date Submitted: May 16, 2011 Download Link: http://download.cnet.com/CoolPlayer-Portable/3000-21394-75448619.html Tested on: Windows Xp Sp3 print...

Mantra: A Browser based Security Framework !

Mantra is a dream that came true for the author. It is a collection of free and open source tools integrated into a web browser – Firefox, which can become handy for students, penetration testers, web application developers, security professionals etc. It is portable, ready-to-run, compact and...

Arabian YouTube Script - Blind SQL Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The Mercifull-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Tybe: blind SQL Injection Vulnerabilities Vendor: www.4smart.net + Software: arabian youtube script + author: R3d-D3v!L + TEAM: Xp10hACKEr ? contact: Xathotmail.co.jp - ? Date:...

Foxit Reader 4.1.1 Stack Buffer Overflow Exploit

Exploit for windows platform in category local exploits ================================================ Foxit Reader 4.1.1 Stack Buffer Overflow Exploit ================================================ Exploit Title : Foxit 4.1.1 Author : Sud0 Bug found by : dookie Software Link :...

Microsoft Internet Explorer 6 / 7 / 8 Memory Corruption

Internet Explorer Memory Corruption 0day Vulnerability CVE-2010-3962 Tested on Windows XP SP3 IE6 IE7 IE8 Coded by Matteo Memelli ryujin at offsec.com http://www.offensive-security.com/0day/ie-0day.txt Thx to dookie at offsec.com notes : This is a quick and dirty exploit! No DEP/ASLR bypass here...

Joomla! Component com_jfuploader < 2.12 - Arbitrary File Upload

========================================================================================================= Type : Joomla Component comjfuploader 2.12 Remote File Upload Author : Setr0nix Home : www.Setr0nix.com Contact : [email protected]...

TeamMate Audit Management Software Suite - mfc71enu.dll DLL Hijacking

TeamMate Audit Management Software Suite - mfc71enu.dll DLL Hijacking / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Anirban ,Ganesha, Dinesh Arora Site : www.beenuarora.com Exploit Title: TeamMate Audit Management Software Suite DLL Hijacking Date:...

Acrobat Acrobat - Font Parsing Integer Overflow

Acrobat Acrobat - Font Parsing Integer Overflow From the authors site: In this article, I'm going to share with you my observations and analysis on recent Adobe Acrobat Font Parsing vulnerability. Source document exists here: http://securityevaluators.com/files/papers/CrashAnalysis.pdf page 51-58...

Talk on Chinese Cyber Army Pulled From Black Hat

A talk on China’s state-sponsored offensive security efforts scheduled for the Black Hat conference later this month has been pulled from the conference after concerns were raised by some people within the Chinese and Taiwanese government about the talk’s content. The presentation was to be...

Adobe Flash Reader - Live Malware

Adobe Flash Reader - Live Malware Exploit-DB Note - Live POC originally found at http://qoop.org/security/poc/cve-2010-1297/ File is malicious! Taken from the wild! Beware! To decrypt the file: openssl aes-256-cbc -d -a -in adobe-0day-2010-1297.tar.enc -out adobe-0day-2010-1297.tar Password is...

Press Release Script SQL Injection

In The Name Of Allah The Mercifull Tybe: SQL Injection Vulnerabilities Vendor: www.v-eva.com + Software: Press Release Script + author: R3d-D3v!L + TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ----4.!.5 ? contact: Xathotmail.co.jp - ? Date: 14.Jan.2010 ? T!ME: 05:15 am GMT ? Home: © Offensive Security ?...

Link Bid Script (links.php id) SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Link Bid Script links.php id SQL Injection Vulnerability ========================================================== In The Name Of Allah The Mercifull Tybe: SQL Injection Vulnerabiliti...