http-affiliate-id NSE Script

Grabs affiliate network IDs e.g. Google AdSense or Analytics, Amazon Associates, etc. from a web page. These can be used to identify pages with the same owner. If there is more than one target using an ID, the postrule of this script shows the ID along with a list of the targets using it. Support...

MySql.Com Hacked with Blind SQL Injection by Jackh4xor !

MySql.Com Hacked with Blind SQL Injection by Jackh4xor ! The Mysql website offers database software, services and support for your business, including the Enterprise server, the Network monitoring and advisory services and the production support. The wide range of products include: Mysql clusters...

POP Peeper 3.7 SEH Overflow

!/usr/bin/ruby Title: POP Peeper 3.7 SEH Exploit Tested on: Windows XP SP2 EN Target: POP Peeper 3.7.0.0 Download Link: http://www.poppeeper.com/download.php Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Greetz: offsec team, inj3ct0r team appdata = ENV'APPDATA' file = appdata...

ACTi ASOC 2200 Web Configurator 2.6 Remote Root Command Execution

!/usr/bin/python This was written for educational purpose and pentest only. Use it at your own risk. Author will be not responsible for any damage! !!! Special greetz for my friend sinner01 !!! Toolname : actiroot.py Coder : baltazar a.k.a b4ltazar Version : About : ACTi ASOC 2200 Web Configurato...

Fake Webcam 6.1 - Local Crash (PoC)

!/usr/bin/ruby Title: Fake Webcam v.6.1 Local Crash PoC Impact: Crashes the process Tested on: Windows XP SP1/SP2 EN Target: Fake Webcam v.6.1 Download Link: http://www.fakewebcam.com/Download/setup.exe Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Greetz: offsec team, inj3ct0r...

Adobe ColdFusion - Directory Traversal

$Id: coldfusiontraversal.rb 11986 2011-03-16 10:15:54Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

DEBIAN-CVE-2011-0001

Double free vulnerability in the iscsirxhandler function usr/iscsi/iscsid.c in the tgt daemon tgtd in Linux SCSI target framework tgt before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via...

Double free

Double free vulnerability in the iscsirxhandler function usr/iscsi/iscsid.c in the tgt daemon tgtd in Linux SCSI target framework tgt before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via...

CVE-2011-0001

CVE-2011-0001 affects the Linux SCSI Target Framework (tgt) tgtd daemon prior to version 1.0.14 (scsi-target-utils). The vulnerability is a double-free in iscsi_rx_handler (usr/iscsi/iscsid.c) that can cause memory corruption and a crash; remote attackers may trigger this via network/blob-related...

CVE-2011-0001

Double free vulnerability in the iscsirxhandler function usr/iscsi/iscsid.c in the tgt daemon tgtd in Linux SCSI target framework tgt before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via...

nping-brute NSE Script

Performs brute force password auditing against an Nping Echo service. See for Echo Mode documentation. Script Arguments passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. creds.service, creds.global See the documentation for the cred...

RHEL 5 / 6 : scsi-target-utils (RHSA-2011:0332)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:0332 advisory. The scsi-target-utils package contains the daemon and tools to set up and monitor SCSI targets. Currently, iSCSI software and iSER targets are...

Important: Red Hat Security Advisory: scsi-target-utils security update

An updated scsi-target-utils package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

scsi-target-utils security update

1.0.4-3.1 - fix the buffer overflow bug before iscsi login CVE-2011-0001...

PT-2011-1055 · Lio +1 · Tgt +2

Name of the Vulnerable Software and Affected Versions: scsi-target-utils versions prior to 1.0.14 tgt versions prior to 1.0.14 Description: The issue is related to a double free vulnerability in the iscsi rx handler function, which can lead to memory corruption and a crash, potentially allowing...

BoutikOne (description.php) SQL Injection Vulnerability

Exploit for php platform in category web applications -------------------------------------------------------- BoutikOne® description.php Sql Injection Vulnerability -------------------------------------------------------- Date 05-03-2011 --------------------------------------------------------...

dns-brute NSE Script

Attempts to enumerate DNS hostnames by brute force guessing of common subdomains. With the dns-brute.srv argument, dns-brute will also try to enumerate common DNS SRV records. Wildcard records are listed as "A" and "AAAA" for IPv4 and IPv6 respectively. See also: dns-nsec3-enum.nse...

BoutikOne - description.php SQL Injection

BoutikOne - description.php SQL Injection | || \ / \ / \ | | / \ / \ | | | | / \ | \ ||| | \ \ / / \ \ / \ || / / \ \ / / | ||| || / / \ \ | | \ \ | | | |/ / / / \ \ | | | | / / \ \ / / | | | | | | / / \ \ | |/ / | | |/ / / | | \ \ | | | | | |/ / | | \ \ / / | | | | / / | | \ \ |/ | | | | \ \ | |...

HP Data Protector Manager RDS Denial of Service

HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The Raima Database Server process RDS.EXE runs on the Data Protector Cell Manager and...

Windows Escalate Locked Desktop Unlocker

This module unlocks a locked Windows desktop by patching the respective code inside the LSASS.exe process. This patching process can result in the target system hanging or even rebooting, so be careful when using this module on production systems. This module requires Metasploit:...