Stripo Inc: No rate limit in email subscription

I managed to bypass the following report 1029723 please follow the steps below: Description: No rate limit in Email Subscription, you just have to add a fixed throttle in Burp Suite to avoid the 429 response. Note: I will use tempmail in the screenshots PoC Steps: 1. Go to https://stripo.email/ a...

Raptor WAF v0.04 - Web Application Firewall using DFA

Raptor WAF is a simple web application firewall made in C, using KISS principle, to make poll use select function, is not better than epoll or kqueue from BSD but is portable, the core of match engine using DFA to detect XSS, SQLi and path traversal. No more words, look at the following : WAF...

Raptor WAF v0.2 - Web Application Firewall using DFA

Raptor WAF is a simple web application firewall made in C, using KISS principle, to make poll use select function, is not better than epoll or kqueue from BSD but is portable, the core of match engine using DFA to detect XSS, SQLi and path traversal. No more words, look at the following : WAF...

Raptor WAF - Web Application firewall to Train Attacks

Raptor is an Open Source Tool, yout focus is study of attacks and find intelligent ways to block attacks. Raptor is made in pure C, don’t use regex or other common ways to block attacks, yes is diferent and fast like a raptor dinosaur, Raptor follow principle KISS Keep It Simple, you can use Rapt...

Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2012-43)

It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine JVM, or bypass Java sandbox restrictions. CVE-2012-0497 It...

ip-geolocation-ipinfodb NSE Script

Tries to identify the physical location of an IP address using the IPInfoDB geolocation web service . There is no limit on requests to this service. However, the API key needs to be obtained through free registration for this service: http://ipinfodb.com/login.php See also:...

KarjaSoft Sami HTTP Server 1.0.41.0.52.0.1 - Request Remote Denial of Service

KarjaSoft Sami HTTP Server 1.0.41.0.52.0.1 - Request Remote Denial of Service source: https://www.securityfocus.com/bid/22159/info Sami HTTP Server is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the server application, denying further...

CVE-1999-1548

Cabletron SmartSwitch Router SSR 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit...

Personal Web Sharing remote stop

Personal Web Sharing Remote Stop. Versions affected: Personal Web sharing v1.5.5, probably earlier. Problem: Personal Web Sharing extension, which ships with MacOS 9, can't handle a request longer than 6000 characters. A request, which contains 6000 or more characters seems to stop the file...

mimeflood.pl

Date: Thu, 3 Sep 1998 12:34:22 +0200 From: Laurent FACQ Subject: Web servers / possible DOS Attack / mime header flooding ! /bin/perl mimeflood.pl - 02/08/1998 - L.Facq [email protected] Web servers / possible DOS Attack / "mime header flooding" looking at the apache 1.2.5 source code i found th...