Mac OS X <= 10.2.4 DirectoryService (PATH) Local Root Exploit

No description provided by source. / OS X = 10.2.4 DirectoryService local root PATH exploit DirectoryService must be crashed prior to execution, per @stake advisory. If you discover how to crash DirectoryService e-mail me at [email protected] Neeko Oni -- Assuming DirectoryService has been...

Stake AntiSniff 1.0.1/Researchers Version 1.0 - DNS Overflow Vulnerability (3)

No description provided by source. source: http://www.securityfocus.com/bid/1207/info Certain versions of @Stake Inc.'s Antisniffer software contain a remotely exploitable buffer overflow. AntiSniff is a program that was released by L0pht Heavy Industries in July of 1999. It attempts, through a...

Microsoft Windows 2000 CreateFile API Named Pipe Privilege Escalation Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/8128/info It has been reported that Microsoft Windows does not properly handle named pipes through the CreateFile API. Because of this, an attacker may be able to gain access to the SYSTEM account. / tac0tac0.c - pay no...

FreeHost 1.00 - Upload Vulnerability

No description provided by source. ======================================================================================== | Title : FreeHost Version 1.00 Upload Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -0021377181886...

How I Got Here: Joe Grand

Dennis Fisher talks with Joe “Kingpin” Grand about his childhood taking apart early PCs and radios, his introduction to the BBS and early phreaking and hacking scene in Boston, his involvement with the L0pht, @stake and now his current life as an engineer running Grand Idea Studios.​ Download:...

Russian Facebook 'VKontakte' Dramatically Fires Original Founder 'Pavel Durov'

Yesterday reports revealed that Pavel Durov, the 29-year-old founder of Russia’s most popular social networking site VKontakte VK - Russia’s Facebook, had been fired from his post of general director of Vkontakte. On monday, Durov said that the social networking site VK is now under the complete...

How I Got Here: Brad Arkin

Dennis Fisher talks with Brad Arkin, CSO of Adobe, about his start with punch cards, finding bugs in online poker software, working at @stake and his challenges at Adobe. Download: 11arkin.mp3...

How I Got Here: Chris Wysopal

Dennis Fisher talks with Chris Wysopal of Veracode about his journey from a teenage BBS user to member of the L0pht to respected security researcher. Known as Weld Pond since his days at the L0pht, Chris also discussed his time at @stake and how the L0pht’s road trip to DC to testify before...

Recover MyFiles 3.8.4.3300 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =============================================== Recover MyFiles 3.8.4.3300 DLL Hijacking Exploit =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 1 1 | | | | | | | | | | | | \ \ / / 0 ...

Quick.Cart Multiple Vulnerabilities

Exploit for php platform in category web applications =================================== Quick.Cart Multiple Vulnerabilities =================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

Pixel Post v1.7.3 persian Reinstall login Vulnerability

Exploit for php platform in category web applications ======================================================= Pixel Post v1.7.3 persian Reinstall login Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 ...

Dmx Ready v2 lite Database Disclosure Exploit

Exploit for perl platform in category web applications ============================================= Dmx Ready v2 lite Database Disclosure Exploit ============================================= !/usr/bin/perl -w Dmx Ready v2 lite Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/201...

Microsoft Windows Based Script Host (Plugin.ocx) DLL Hijacking

Exploit for windows platform in category local exploits ============================================================== Microsoft Windows Based Script Host Plugin.ocx DLL Hijacking ==============================================================...

HHCTRLLib (hhctrl.ocx) Remote BOF Exploit (heap spray)

Exploit for windows platform in category remote exploits ====================================================== HHCTRLLib hhctrl.ocx Remote BOF Exploit heap spray ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...

Kleeja 1.0.0RC6 Database Disclosure

==================================================== kleeja1.0.0RC6 Database Disclosure Exploit ==================================================== Vendor: kleeja.com Date: 2010-05-27 Author : indoushka Contact : 00213771818860 Home : www.sec4ever.com Bug : Database Disclosure Exploit Tested on ...

EZ-Oscommerce 3.1 Cross Site Request Forgery / Shell Upload

==================================================== EZ-Oscommerce 3.1 Remote File Upload EZ-Oscommerce 3.1 Changer Login et Mot de Passe CSRF Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

3dl.am script mtxkl raidrush Multiple Vulnerabilty

Exploit for php platform in category web applications ============================================================== 3dl.am script mtxkl raidrush Directory Traversal Vulnerability ==============================================================...

Kanarya Shop Database Disclosure

======================================================================= kanarya shop Data Base Dump Vulnerability ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...

Satellite-X 4.0 SQL Injection / Shell Upload

======================================================================================== | Title : Satellite-X 4.0 Auth Bypass SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site :...

Satellite-X 4.0 - Authentication Bypass

======================================================================================== | Title : Satellite-X 4.0 Auth Bypass SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : | Dork : 2009 © Satellite-X | Tested on: windows...