Mercur Messaging 2005 <= SP4 IMAP Remote Exploit (egghunter mod)

No description provided by source. !/usr/bin/python Mercur Messaging 2005 SP3 IMAP service - Egghunter mod [email protected] http://www.offensive-security.com Original exploit by Winny Thomas Thanks Thomas, this code really came in handy ! VMWare seems to alter the stack a bit as the...

Linux Kernel 2.6.17 - Sys_Tee Local Privilege Escalation

Linux Kernel 2.6.17 - SysTee Local Privilege Escalation source: https://www.securityfocus.com/bid/22823/info The Linux kernel is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to gain superuser privileges, facilitating the complete compromise of...

Unfixed XSS vulnerability at www.pislick.net

Security researcher St@rExT, has submitted on 02/08/2007 a cross-site-scripting XSS vulnerability affecting www.pislick.net, which at the time of submission ranked 235977 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is current...

BO-BLOG vulnerability to submit 1 sentence horse tool[html]-vulnerability warning-the black bar safety net

Belongs to type:Web Apps The following proceduresmethodsmay carry offensive,for security research and teaching purposes. At your own risk! Code ! DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" HTMLHEADTITLEThe Csript For The "? php eval$POSTcmd?& gt;" /TITLE META...

Examples to explain: a network of deception methods, and offensive and defensive!- Vulnerability warning-the black bar safety net

Lure the enemy in depth is a very practical tactics, ancient and modern, many military, politicians, entrepreneurs all of the tactics talked about, in the network attack and Defense is no exception, the system administrator will also use such tactics. Since each network system has a security...

Empire 4.3.2 - strncat Denial of Service

Empire 4.3.2 - strncat Denial of Service Empire = 4.3.2 strncat Denial of Service Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/1782.zip 05132006-empiredos.zip milw0rm.com 2006-05-14...

LibTiff 3.x - TIFFFetchData Integer Overflow

LibTiff 3.x - TIFFFetchData Integer Overflow source: https://www.securityfocus.com/bid/17732/info Applications using the LibTIFF library are prone to an integer-overflow vulnerability. An attacker could exploit this vulnerability to execute arbitrary code in the context of the vulnerable...

linux/x86 - xor-encoded Connect Back Shellcode 371 bytes

linux/x86 xor-encoded Connect Back Shellcode 371 bytes. Shellcode exploit for linx86 platform linux/x86 xor-encoded Connect Back Shellcode 371 bytes https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/13366.tar.gz black-RXenc-con-back.tar.gz milw0rm.com 2006-04-1...

FreeBSD : mod_dosevasive -- insecure temporary file creation (88ff90f2-6e43-11d9-8c87-000a95bc6fae)

An LSS Security Advisory reports : When a denial of service attack is detected, moddosevasive will, among other things, create a temporary file which it will use to trace actions from the offensive IP address. This file is insecurely created in /tmp and it's name is easily predictable. It is then...

In-game server crash in Call of Duty 1.5b and United Offensive 1.51b

Luigi Auriemma Applications: Call of Duty = 1.5b Call of Duty: United Offensive = 1.51b http://www.callofduty.com Platforms: Windows only Linux is safe and Mac has not been tested Bug: crash Exploitation: remote, versus server in-game Date: 02 Apr 2005 Author: Luigi Auriemma e-mail:...

In-game players kicking in the Quake 3 engine

Luigi Auriemma Application: Quake 3 engine http://www.idsoftware.com Vulnerables: - Call of Duty = 1.5 - Call of Duty: United Offensive = 1.51 - Quake III Arena = 1.32 - Return to Castle Wolfenstein = 1.41 - Soldier of Fortune II: Double Helix = 1.03 - Star Wars Jedi Knight II: Jedi Outcast = 1.0...

ISS.txt

ISS products are meant to be used in a defensive role. Here we will look at using them in an offensive role. ===Please note that the writer has NO responsibility for YOUR actions with this === ===information! I did not make you do it. I just made you aware it COULD be done.=== Internet Scanner an...