MySQL Local/Remote FAST Account Password Cracking

FAST Cracking of MySQL account passwords locally or over the network post-auth to the maintainers: you don't need to patch this, looks alot like a minor bug, prolly documented :D I found a method to crack mysql user passwords locally or over the network pretty efficiently. During Tests it was...

Microsoft SQL Server NTLM Stealer

This module can be used to help capture or relay the LM/NTLM credentials of the account running the remote SQL Server service. The module will use the supplied credentials to connect to the target SQL Server instance and execute the native "xpdirtree" or "xpfileexist" stored procedure. The stored...

Multi Gather GnuPG Credentials Collection

This module will collect the contents of all users' .gnupg directories on the targeted machine. Password protected secret keyrings can be cracked with John the Ripper JtR. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framewo...

CVE-2011-5165

Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file...

Stack overflow

Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file...

CVE-2011-5165

CVE-2011-5165 concerns Free MP3 CD Ripper (versions 1.1, 2.6 and earlier). The vulnerability is a stack-based buffer overflow in the WAV conversion path that can be triggered by a crafted WAV file, enabling user-assisted remote code execution. In practice, an attacker could exploit this by convin...

CVE-2011-5165

Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file...

CVE-2010-5260

Untrusted search path vulnerability in Agrin All DVD Ripper 4.0 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .ifo file. NOTE: some of these details are obtained from third party...

Design/Logic Flaw

Untrusted search path vulnerability in Agrin All DVD Ripper 4.0 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .ifo file. NOTE: some of these details are obtained from third party...

CVE-2010-5260

CVE-2010-5260 describes an untrusted search path (DLL hijacking) vulnerability in Agrin All DVD Ripper 4.0. A local attacker can gain privileges by placing a malicious wnaspi32.dll in the current working directory, demonstrated using a directory containing an .ifo file. Affected component/file: w...

CVE-2010-5260

Untrusted search path vulnerability in Agrin All DVD Ripper 4.0 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .ifo file. NOTE: some of these details are obtained from third party...

John the Ripper AIX Password Cracker

This module uses John the Ripper to identify weak passwords that have been acquired from passwd files on AIX systems...

Mini-stream Ripper [.m3u] 3.1.3.2 buffer overflow vulnnerability

Exploit for windows platform in category local exploits ///////////////////////////////////////////////////////////////////////////////////// // Mini-stream Ripper Version 3.1.3.2.2010.06.13 buffer overflow vulnnerability // Exploit Title: Mini-stream Ripper .m3u 3.1.3.2 buffer overflow...

Johnny - GUI for John the Ripper

Johnny - GUI for John the Ripper Johnny is a GUI for John the Ripper. It was proposed by Shinnok. s release includes all things from development release plus nice tabbed panel for mode selection and some additional clean-ups. Basic functionality is supposed to work: password could be loaded from...

BackTrack 5 R2 Released, New Kernel, New Tools

BackTrack 5 R2 Released, New Kernel, New Tools Hacker are your Ready ? Backtrack 5 R2 finally released with bug fixes, upgrades, and the addition of 42 new tools. With the best custom-built 3.2.6 kernel, the best wireless support available at maximum speed. This release have included Metasploit...

Mini-Stream Ripper And RM-MP3 Converter '.pls' File Buffer Overflow Vulnerability

This host is installed with Mini-Stream Ripper or RM-MP3 Converter and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbministreamripperandrmmp3convbofvuln.nasl 6517 2017-07-04 13:34:20Z cfischer $ Mini-Stream Ripper And RM-MP3 Converter '.pls' File Buffer Overflow...

Mini-Stream Ripper And RM-MP3 Converter '.pls' File Buffer Overflow Vulnerability

Mini-Stream Ripper or RM-MP3 Converter is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

CVE-2009-5109

Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long entry in a .pls file...

Stack overflow

Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long entry in a .pls file...

CVE-2009-5109

CVE-2009-5109 is a stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 that permits remote code execution through a crafted long entry in a .pls file. Public references describe attacking via specially crafted .pls files, with exploit code and proof-of-concept material (exploit-db, Metasplo...