proactive-lfi.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE and all darkc0de members ---...

Technote 7 - 'shop_this_skin_path' Remote File Inclusion

-----------webDEViL - w3bd3vil at gmail dot com ----------- -----------Technote 7 Remote File Inclusion------------------------ ----------developers site: http://www.technote.co.kr-------------- bash-3.1 cat technote7/skinshop/standard/3plugintwindow/twindownotice.php ...snip... $TWINSET'dirpath'...

Linux Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 184 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def...

other google chrome crash

another proof of concept of how to break the google chrome, there is not much detail in reality. the result of error in ollydbg is: Access violation when reading 00000000 nigun effect obviously does not cause "dangerous" but it is a curiosity. Juan Pablo Lopez Yacubian POC:...

phpauction32-rfi.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com ---d3hydr8-rsauron -P47r1ck - r45c4l - baltazar - sh4rpr00ter - Smasher - sinner01 - FeDeReR - Anarki- Marezzi - Author: Beenu Arora...

google-chrome-dos3.txt

?php / Google Chrome 0.2.149.27 1583 Silent Crash PoC WHK - elhacker.net / $nombre =...

AWStats Totals 1.14 - 'AWStatstotals.php' Remote Code Execution

\nEx: awtotalhack.php host.tld on\n";...

ACG-ScriptShop - cid SQL Injection

ACG-ScriptShop - cid SQL Injection || | |ACG-ScriptShop cid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script...

Invision Power Board (IP.Board) 2.3.5 - Multiple Vulnerabilities (2)

Invision Power Board IP.Board 2.3.5 - Multiple Vulnerabilities 2 !/usr/bin/php -q mhead; Gimme your args $this-pattack = $this-getp'attack', true; $this-pprox = $this-getp'proxhost'; $this-pproxa = $this-getp'proxauth'; $this-initglobal; Proxy params if $this-pprox $this-web-proxy$this-pprox; if...

Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Command Execution

lamers.RunApp "cmd" ,"cmd /k echo So Simple, So Lame -- Somebody should get fired." ,0 milw0rm.com 2008-08-28...

Acoustica Mixcraft 4.2 Build 98 - mx4 Local Buffer Overflow

Acoustica Mixcraft 4.2 Build 98 - mx4 Local Buffer Overflow !/usr/bin/perl Acoustica Mixcraft mx4 file Local Buffer Overflow Exploit Author: Koshi Date: 08-28-08 0day Application: Acoustica Mixcraft Versions: Possibly Older / 4.1 Build 96 / 4.2 Build 98 Site:...

MyBulletinBoard (MyBB) 1.2.11 - private.php SQL Injection (2)

MyBulletinBoard MyBB 1.2.11 - private.php SQL Injection 2...

Active PHP Bookmarks 1.1.02 Remote SQL Injection Vulnerability

No description provided by source. || | | Bookmarks V 1.1.02 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | script :...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 flatread.php, 2 post.php, 3 processpost.php, 4 processsearch.php, 5 forum.php, 6 processsubscribe.php, 7 read.php, 8...

SFS Affiliate Directory (id) SQL Injection Vulnerability

No description provided by source. || | | Affiliate Directory id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

linux/x86 - writes a php connectback shell to the fs 508 bytes

linux/x86 writes a php connectback shell to the fs 508 bytes. Shellcode exploit for linx86 platform include / Grayscale Research: Linux Write FS PHP Connect Back Utility Shellcode Function: Opens /var/www/cb.php and writes a php connectback shell to the filesystem. Shellcode Size: 508 bytes No...

vim-ftp.txt

Vim: Netrw: FTP User Name and Password Disclosure 1. SUMMARY Product : Vim -- Vi IMproved Versions : Tested with Vim 7.1.266, 7.2, autoload/netrw.vim v131, v109 Impact : Credentials disclosure Wherefrom: Remote Original : http://www.rdancer.org/vulnerablevim-netrw-credentials-dis.html The Vim Net...

ZeeBuddy 2.1 (bannerclick.php adid) SQL Injection Vulnerability

No description provided by source. || | | ZeeBuddy v2.1adid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script : http://www.zeescripts.com | ||...

Vacation Rental Script 3.0 (id) Remote SQL Injection Vulnerability

No description provided by source. ┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes a...

Vista under the file name spoofing-vulnerability warning-the black bar safety net

Author: est Source: est's Blog Open a folder say, E:\test that blank space right click, select Properties, select Customize, and then you can give the folder a icons, this may the earth people know, but Vista has more fun things, first just to a folder change icon, click OK, and then open the...