MyBulletinBoard (MyBB) 1.2.5 - 'calendar.php' Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " MyBulletinBoard \n"; print " Example: perl mybb.pl www.host.com /mybb/ -u 5 \n"; print " \n"; print " Options: \n"; print " -u User-ID, default: 1 \n"; print " -p Proxy support \n"; print " \n"; exit;...

ivan-rfi.txt

!/usr/bin/perl Ivan Gallery Script V.0.1 index.php Remote File Include Exploit Coded by SekoMirza & HypNosis Usage: exploit.pl target cmd shell shell variable Greetings: Sh4dowM4n , PhanTOmOrhcid , Starhack.0rg , CaRaMeL , MBrain! , and all Turkishz Hackerzz Vulnerable Code:...

mxBB Module MX Shotcast 1.0 RC2 (getinfo1.php) RFI Exploit

No description provided by source. !/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code: includeonce$mxrootpath . 'common.'.$phpEx;...

mxBB Module MX Shotcast 1.0 RC2 - getinfo1.php Remote File Inclusion

mxBB Module MX Shotcast 1.0 RC2 - getinfo1.php Remote File Inclusion !/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code:...

mxBB Module MX Shotcast 1.0 RC2 - 'getinfo1.php' Remote File Inclusion

!/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code: includeonce$mxrootpath . 'common.'.$phpEx; Vendor:...

Wserve HTTP Server 4.6 (Long Directory Name) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ====================================================================== Wserve HTTP Server 4.6 Long Directory Name Denial of Service Exploit ====================================================================== !perl Wserve HTTP Server 4.6 Versio...

cyboards-rfi.txt

!/usr/bin/perl CyBoards PHP Lite 1.21 scriptpath Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: include"$scriptpath/include/defaultstyle.css"; Vendor:...

Wserve HTTP Server 4.6 - Long Directory Name Denial of Service

Wserve HTTP Server 4.6 - Long Directory Name Denial of Service !perl Wserve HTTP Server 4.6 Version Long Directory Name Buffer Overflow - Denial Of Service Type : Buffer Overflow - Denial of Service Release Date : 2007-04-05 Product / Vendor : Wserve HTTP Server...

Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Wordpress 2.1.2 SQL Injection POC Credits: [email protected] Thanks to ferruh [email protected] improving my exploitation skills website:www.notsosecure.com Wordpress version 2.1.2 is vulnerable to sql injection. This POC works when...

CyBoards PHP Lite 1.21 - 'script_path' Remote File Inclusion

!/usr/bin/perl CyBoards PHP Lite 1.21 scriptpath Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: include"$scriptpath/include/defaultstyle.css"; Vendor:...

CyBoards PHP Lite 1.21 (script_path) Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================ CyBoards PHP Lite 1.21 scriptpath Remote File Include Exploit ================================================================ !/usr/bin/perl CyBoards PHP Lite 1.21 scriptpat...

Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== Wordpress 2.1.2 xmlrpc Remote SQL Injection Exploit ===================================================== !/usr/bin/perl -w Wordpress 2.1.2 SQL Injection POC Wordpress version 2.1.2 is...

icebb-1.0.txt

!/usr/bin/perl IceBB 1.0-rc5 Remote Create Admin Exploit 1. register a user 2. run this exploit with this usage : $perl xpl.pl host&path uname pass 3. login with admin access : - magicquotesgpc = Off Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use LWP::UserAgent; use HTTP::Cookies;...

IceBB 1.0-rc5 - Remote Create Admin

!/usr/bin/perl IceBB 1.0-rc5 Remote Create Admin Exploit 1. register a user 2. run this exploit with this usage : $perl xpl.pl host&path uname pass 3. login with admin access : - magicquotesgpc = Off Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use LWP::UserAgent; use HTTP::Cookies;...

PBlang <= 4.66z Remote Create Admin Exploit

No description provided by source. !/usr/bin/perl PBlang 4.66z Create Admin Exploit this exploit register a user with admin access Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1; $passwd = $ARGV2; $url...

IceBB 1.0-rc5 - Remote Code Execution

!/usr/bin/perl IceBB 1.0-rc5 Remote Code Execution Exploit 1. register a user 2. run this exploit with this usage : $perl xpl.pl host&path uname pass 3. login with admin access : Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use LWP::UserAgent; use HTTP::Cookies; $port = "80"; $host =...

Mambo Module Flatmenu <= 1.07 Remote File Include Exploit

Exploit for unknown platform in category web applications ========================================================= Mambo Module Flatmenu "Team Hell Crew :: Mambo 4.5.1 Modules Flatmenu geometry '500x300' ; $mw-resizable0,0; $mw-Label-text = 'Mambo 4.5.1 Modules Flatmenu 'Verdana 7...

PBlang &lt;= 4.66z Remote Create Admin Exploit

No description provided by source. !/usr/bin/perl PBlang 4.66z Create Admin Exploit this exploit register a user with admin access Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1; $passwd = $ARGV2; $url...

PBlang 4.66z - Remote Code Execution

PBlang 4.66z - Remote Code Execution !/usr/bin/perl PBlang 4.66z Remote Command Execution Exploit this Exploit register a user with admin access - magicquotesgpc = Off - Only work on 4.66z Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookie...

PBlang 4.66z - Remote Code Execution

!/usr/bin/perl PBlang 4.66z Remote Command Execution Exploit this Exploit register a user with admin access - magicquotesgpc = Off - Only work on 4.66z Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1;...