BNAT Router

This module will properly route BNAT traffic and allow for connections to be established to machines on ports which might not otherwise be accessible. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

THC-ipv6 Toolkit – Attacking the IPV6 Protocol

THC-ipv6 Toolkit – Attacking the IPV6 Protocol A complete tool set to attack the inherent protocol weaknesses of IPV6 and ICMP6, and includes an easy to use packet factory library. Please note to get full access to all the available tools you need to develop IPV6 tools yourself or submit patches,...

GSC Privilege Escalation Exploit

Name: Michael Gray Website: www.ownerarium.net Contact: [email protected] Discovered Exploit: 06-05-2008 Vulnerable Software Title: GSC Vulnerable Version: = 2067 Severity: CRITICAL Website: http://www.getgsc.com Reported to vendor: Yes Actively exploited: Yes Exploit Discovery...

CVE-2004-1869

CVE-2004-1869 affects Etherlords I (≤1.07) and Etherlords II (≤1.03). The issue arises in network handling: a crafted packet sets the size for the next packet and is followed by a larger packet, causing Etherlords to read unallocated memory and crash (DoS). The provided sources do not specify a r...

CVE-2003-1163

CVE-2003-1163 affects Ganglia gmond 2.5.3. The vulnerability arises in hash.c where a UDP packet containing a single-byte name string is used as an out-of-bounds array index, causing a remote denial of service (segmentation fault). Exploitation details are not provided beyond the description, and...

CVE-2004-1869

Etherlords I 1.07 and earlier and Etherlords II 1.03 and earlier allows remote attackers to cause a denial of service crash by sending a packet that specifies the size for the next packet, then sending a larger packet than specified, which causes Etherlords to read unallocated memory...

TCP Connection Reset Remote Exploit

Exploit for unknown platform in category dos / poc =================================== TCP Connection Reset Remote Exploit =================================== / By: Paul A. Watson Build a TCP packet - based on tcp1.c sample code from libnet-1.1.1 COMPILE: gcc reset-tcp.c -o reset-tcp...

Linux pam_lib_smb < 1.1.6 - '/bin/login' Remote Overflow

/ Linux pamlibsmb include include include include include include include include include / first negotiate / / packet capture by ethereal / char packet1 = 0xff, 0xfd, 0x03, 0xff, 0xfb, 0x18, 0xff, 0xfb, 0x1f, 0xff, 0xfb, 0x20, 0xff, 0xfb, 0x21, 0xff, 0xfb, 0x22, 0xff, 0xfb, 0x27, 0xff, 0xfd, 0x0...

Arp spoofing в CISCO

ARP-пакет позволяет переписать arp-запись...

CVE-2001-0183

ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection...

Denial of service attack against tcpdump

Greetings. There is a way to disable tcpdump running on a remote host. By sending a carefully crafted UDP packet on the network which tcpdump monitors, it is possible, under certain circonstances, to make tcpdump fall into an infinite loop. This undesired behaviour has serious consequences for an...