9108 matches found
Digipass Go3 Token Dumper (at least for 2006)
The initial reverse engineering of Vasco’s Digipass Go3 algorithm follows in C++. I think this implementation is a "rough" approximation, if we take some limitations about 2006 and the calculations made into account. Or I'm just joking… : This generator was able to predict an "otp" collision,...
Kaspersky Internet Security 6.0.0.303 IOCTL KLICK Local Exploit
Exploit for unknown platform in category local exploits =============================================================== Kaspersky Internet Security 6.0.0.303 IOCTL KLICK Local Exploit =============================================================== //////////////////////////////////// ///// AVP...
MS Windows 2000 sp1/sp2 isapi .printer Extension Overflow Exploit
No description provided by source. / iishack 2000 - eEye Digital Security - 2001 This affects all unpatched windows 2000 machines with the .printer isapi filter loaded. This is purely proof of concept. Quick rundown of the exploit: Eip overruns at position 260 i have 19 bytes of code to jump back...
Debian DSA-934-1 : pound - several vulnerabilities
Two vulnerabilities have been discovered in Pound, a reverse proxy and load balancer for HTTP. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-1391 : Overly long HTTP Host: headers may trigger a buffer overflow in the addport function, which may lea...
To bypass the firewall of the reverse connection Alarm-vulnerability warning-the black bar safety net
Author: Polymorphours Email: [email protected] Homepage:http://www. whitecell. org Date: 2005-11-17 / Author: Polymorphours Date: 2005/1/10 Another will be your own code injected into the puppet of the process of the method, with the rebound Trojan can bypass the firewall Reverse...
security flaw
OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address...
Free kill often with a few important tools-vulnerability warning-the black bar safety net
C32Asm V0. 4. 1 2 C32Asm is set reverse assemble, 1 6 hex tools, Hiew modify the features and integration PE Explorer 1.98 Powerful resource tool, can directly Browse and modify the software resources, including menus, dialog boxes, string tables, etc.; in addition, also equipped with W32DASM...
WS_FTP LE 5.08 (PASV response) Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================================= WSFTP LE 5.08 PASV response Remote Buffer Overflow Exploit ============================================================= / wsexp.c WSFTP LE 5.08 PASV response 0day buffer overflo...
Ipswitch WS_FTP LE 5.08 - PASV Response Remote Buffer Overflow
/ wsexp.c WSFTP LE 5.08 PASV response 0day buffer overflow exploit Coded by h07 Tested on XP SP2 Polish, 2000 SP4 Polish Example: C:\wsexp 1 192.168.0.1 4444 WSFTP LE 5.08 PASV response 0day buffer overflow exploit Coded by h07 + Listening on 21 + Connection accepted from 192.168.0.3 + Client...
VulnCheck KEV: CVE-2004-1464
Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell RSH, Secure Shell SSH, and in some cases, Hypertext Transport Protocol HTTP access to the Cisco device...
Generic Command Shell, Reverse TCP Inline
Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 0 include Msf::Payload::Single include Msf::Payload::Generic def initializeinfo =...
Texas Imperial Software WFTPD 3.23 - 'SIZE' Remote Buffer Overflow
/ wftpdexp.c WFTPD server 3.23 SIZE 0day remote buffer overflow exploit coded by h07 tested on XP SP2 polish, 2000 SP4 polish example.. C:\wftpdexp 0 0 192.168.0.2 h07 open 192.168.0.1 4444 WFTPD server 3.23 SIZE 0day remote buffer overflow exploit coded by h07 FTP response: 331 Give me your...
barracudaExec.txt
Severity: High - Full system compromise possible Date: 04 August 2006 Discovered by: Matthew Hall [email protected] Credits for original discovery to Greg Sinclair Discovered on: 03 Aug 2006 Summary: Lack of input sanitisation in the Linux based Barracuda spam firewall web interface allows executio...
eIQnetworks ESA - Syslog Server Remote Buffer Overflow
eIQnetworks ESA - Syslog Server Remote Buffer Overflow !/usr/bin/perl -w http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom - 03/23/2006 Bug found by KF of digitalmunition.com. http://www.zerodayinitiative.com/advisories/ZDI-06-023.html Exploit for Syslog Server by...
eIQnetworks ESA (Syslog Server) Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================================== eIQnetworks ESA Syslog Server Remote Buffer Overflow Exploit ============================================================== !/usr/bin/perl -w http://www.digitalmunition.com...
Microsoft Excel 2003 (Italian) - Hlink Local Buffer Overflow
Microsoft Excel 2003 Italian - Hlink Local Buffer Overflow !perl "Microsoft Office Excel 2003" Hlink Stack/SEH Overflow Exploit Author: Giuseppe Gottardi aka oveRet [email protected] Note: This exploit was originaly written by Manuel Santamarina Suarez, but it was working by clicking on the...
Microsoft Excel 2003 (Italian) - Hlink Local Buffer Overflow
!perl "Microsoft Office Excel 2003" Hlink Stack/SEH Overflow Exploit Author: Giuseppe Gottardi aka oveRet [email protected] Note: This exploit was originaly written by Manuel Santamarina Suarez, but it was working by clicking on the link and then on the "Yes" button. In this version of explo...
[SA20912] Taskjitsu Task Script Insertion Vulnerabilities
---------------------------------------------------------------------- Reverse Engineer Wanted Secunia offers a Security Specialist position with emphasis on reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerability reports...
[SA20936] Vincent LECLERCQ News Cross-Site Scripting and SQL Injection
---------------------------------------------------------------------- Reverse Engineer Wanted Secunia offers a Security Specialist position with emphasis on reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerability reports...
Pound: HTTP request smuggling
Background Pound is a reverse proxy, load balancer and HTTPS front-end. It allows to distribute the load on several web servers and offers a SSL wrapper for web servers that do not support SSL directly. Description Pound fails to handle HTTP requests with conflicting "Content-Length" and...