exploit

Simple introduction to sqlmap

Article/201108/99282.htmlsqlmapisanopensourcepenetrationtestingtoolthatautomatestheprocessofdetectingandexploitingSQLinjectionflawsandtakingoverofdatabaseser
kaka20080622·2013-07-04 00:00

oracle提高查询效率

本文转载自：http://oracle.chinaitlab.com/exploiture/827715.html（1）选择最有效率的表名顺序(只在基于规则的优化器中有效)：ORACLE的解析器按照从右到左的顺序处理
54958512·2013-07-03 14:03

WordPress Feed SQL Injection

##################################IranianExploitDataBase#http://exploit.iedb.ir######################
cnbird2008·2013-07-03 11:46

WordPress Feed SQL Injection

##################################IranianExploitDataBase#http://exploit.iedb.ir######################
cnbird2008·2013-07-03 11:00

MSSQL2K - SQL Injector - Query String Parameter Attack

操作如下：root@root:/pentest/exploits/fasttrack#.
feier7501·2013-07-01 23:00

Web Jacking Attack Method登录人人网

操作如下：root@bt:/pentest/exploits/set#./set .--..--..-----. :.--':.--'`-..-' `.`.:`;:: _`,:::__:: `.__.
feier7501·2013-06-28 21:00

Man Left in the Middle Attack Method中间人攻击

操作如下：root@bt:/pentest/exploits/set#.
feier7501·2013-06-27 22:00

Malware FAQ: How does the Ptrace exploit work o...

SangramGayalThispapercoversaninternalincidentthatoccurredatasmallsoftwaredevelopmentfirminIndia.Theattacker-anemployeeofthefirm,usedasophisticatedtwo-stepmethodtoexploitaninternalserverandretai
LiSteven·2013-06-27 10:00

Plesk PHP Code Injection

ReliableexploitforthePleskPHPcodeinjectionvulnerabilitydisclosedbyKingcopeinJune2013.Candeliverinlineandreverseshellsusingthepayloadslibrary
cnbird2008·2013-06-26 18:00

linux 本地提权exp网址集合

http://www.exploit-db.com史上最强大的漏洞库，这个肯定得放第一位http://sebug.net/paper/linux_expsebug的，不过很久没更新了http://localroot.th3
god_7z1·2013-06-24 00:11

利用Glibc库-ORIGIN-提权

实验环境：centos5.5原理：在Linux中,/tmp的权限是777，利用suid，将一个带有suid权限的执行文件/bin/ping 硬链到/tmp的文件cd/tmp/mkdirexploitln
fsxchen·2013-06-05 12:00

metasploit、SET、Tabnabbing Attack Method（没有得到信息）

环境：BT5，火狐浏览器操作如下：root@bt:/pentest/exploits/set#.
feier7501·2013-05-30 23:00

metasploit的SET的Credential Harvester Attack Method

环境：BT5，XP或者Win7，IE6、IE8、谷歌浏览器操作如下：root@bt:/pentest/exploits/set#.
feier7501·2013-05-29 23:00

metasploit的WEB攻击向量

环境：BT5R3，XPSP3，IE6XP要安装java，并且设置java环境变量操作如下：root@bt:/pentest/exploits/set#.
feier7501·2013-05-28 21:00

Scheduling in Heterogeneous Computing Environments for Proximity Queries

SchedulinginHeterogeneousComputingEnvironmentsforProximityQueriesMay14th,2013Abstract:Wepresentanovel,LinearProgramming(LP)basedschedulingalgorithmthatexploitsheterogeneousmulti-corearchitecturessucha
OpenHero·2013-05-28 12:00

metasploit针对性钓鱼攻击向量（BT5R3失败）

root@bt:~#cd/pentest/exploits/set/ root@bt:/pentest/exploits/set#.
feier7501·2013-05-26 23:00

metasploit针对性钓鱼攻击向量（BT5R1失败）

root@root:~#cd/pentest/exploits/set/ root@root:/pentest/exploits/set#.
feier7501·2013-05-26 22:00

metasploit文件格式漏洞渗透攻击（成功获得shell）

环境BT5R1msf>usewindows/fileformat/ms11_006_createsizeddibsection msfexploit(ms11_006_createsizeddibsection
feier7501·2013-05-14 23:00

Kloxo 6.1.6 - Local Privilege Escalation

/bin/sh#ExploitTitle:KloxoLocalPrivilegeEscalation#GoogleDork:inurl:kiddies#Date:August2012orso#ExploitAuthor
cnbird2008·2013-05-14 17:00

metasploit文件格式漏洞渗透攻击（成功生成doc）

msf>usewindows/fileformat/ms11_006_createsizeddibsection msfexploit(ms11_006_createsizeddibsection)>setpayloadwindows
feier7501·2013-05-13 23:00

metasploit对IE浏览器的极光漏洞进行渗透利用

msf>usewindows/browser/ms10_002_aurora msfexploit(ms10_002_aurora)>setpayloadwindows/meterpreter/reverse_tcp
feier7501·2013-05-12 17:00

剖析一个由sendfile引发的linux内核BUG

示例的代码如下：http://www.securityfocus.com/data/vulnerabilities/exploits/36038-4.tgz在ubuntu9.04，内核版本2.6.28.12
ctthunagchneg·2013-05-11 19:00

TinyMCE Ajax File Manager suffers from a remote code execution vulnerability.

\___\_/__\_/__\ ()|\___/\___\||||\/\___/\___/ \____/|___|/\___>____>|_||__|\___>\___> \/\/\/\/\/ #ExploitTitle
cnbird2008·2013-05-09 09:00

sudo 1.8.3p1 Local Root

/* death-star.c sudov1.8.0-1.8.3p1(sudo_debug)formatstringrootexploit+glibcFORTIFY_SOURCEbypass byaeon-http
cnbird2008·2013-05-09 09:00

sudo漏洞

 /* death-star.c sudov1.8.0-1.8.3p1(sudo_debug)formatstringrootexploit+glibcFORTIFY_SOURCEbypass byaeon
公羊角·2013-05-07 23:58

sudo漏洞

/*death-star.csudov1.8.0-1.8.3p1(sudo_debug)formatstringrootexploit+glibcFORTIFY_SOURCEbypassbyaeon(万古
公羊角·2013-05-07 23:58

Protostar final1

Whenyouareexploitingthisandyoudon'tnecessarilyknowyourIPaddressandportnumber(proxy,NAT/DNAT,etc),youcandeterminethatthestringisproperlyalignedbyseeingifitcrashesornotwhenwritingtoanaddressyouknowisgoo
terrying·2013-05-02 16:43

Protostar final1

Whenyouareexploitingthisandyoudon'tnecessarilyknowyourIPaddressandportnumber(proxy,NAT/DNAT,etc),youcandeterminethatthestringisproperlyalignedbyseeingifitcrashesornotwhenwritingtoanaddressyouknowisgoo
terrying·2013-05-02 16:43

metasploit通过附加的Railgun组件操作Windows API

msf>useexploit/windows/smb/ms08_067_netapi msfexploit(ms08_067_netapi)>setPAYLOADwindows/meterpreter/
feier7501·2013-04-28 15:00

metasploit将命令行shell升级为meterpreter

msf>useexploit/windows/smb/ms08_067_netapi msfexploit(ms08_067_netapi)>setPAYLOADwindows/meterpreter/
feier7501·2013-04-28 14:00

metasploit控制持久化

msfexploit(ms08_067_netapi)>exploit [*]Startedreversehandleron192.168.1.11:4444 [*]Attemptingtotriggerthevulnerability
feier7501·2013-04-27 23:00

国内第一本Web前端黑客书

那时候圈子里流行的还是系统级别的exploit，远程溢出和本地提权很红火。“自动传播”、“拿下系统权限”是当时黑客们的主要目标，那也是网络安全时代最美好的时期。
SGS0635·2013-04-27 11:23

Protostar format0

Exploitingformatstringvulnerabilities"
terrying·2013-04-20 01:00

Protostar format0

Exploitingformatstringvulnerabilities"
terrying·2013-04-20 01:00

GNU/Linux内核的地址随机化

地址空间布局随机化(ASLR)是一项增加安全性的技术，攻击者发现漏洞之后开始编写exploit时如果要考虑绕过ASLR这会增加编写exploit的难度，最早是2001年Grsecurity社区(强悍的社区
丬Fzn丶浪漫·2013-04-19 23:40

ms08_067被成功exploit

昨天用的环境是FC9，exploit失败。我怀疑是xp版本的问题，于是下了xp+sp2的英文版本，然后再用FC9里的metasploit来exploit，还是失败。
feier7501·2013-04-12 22:00

在线广告的exploration/exploitation trade-off（勘探和开采问题）

刚刚在看ICML2010的一篇关于搜索广告CTR预估的文章：Web-ScaleBayesianClick-ThroughRatePredictionforSponsoredSearchAdvertisinginMicrosoft’sBingSearchEngine上周跟中科院的同学吃饭时，他们说在KDDCUP竞赛时，这篇文章的算法效果非常好。当时就想好好读一下，拖了几天，今天终于看了个开头。Bin
overstack·2013-04-12 01:00

用metasploit来exploit虚拟机XPSP3的ms08_067

看到MS08-067:VULNERABLE，说明有漏洞exploit失败，不知道原因。书里写着这样几句话：“这暗示我们或许能够对这台主机进行攻击。
feier7501·2013-04-11 22:00

Exploiting hard filtered SQL Injections

http://websec.wordpress.com/2010/03/19/exploiting-hard-filtered-sql-injections/WhileparticipatingatsomeCTFchallengeslikeCodegate10orOWASPEU10recentlyInoticedthatitisextremelytrendytobuildSQLinjectionc
cnbird2008·2013-04-10 09:00

ftp扫描器

/* *FTPScan(C)1996KitKnox * *ExploitsbuginFTPprotocolthatallowsusertoconnecttoarbritary *IPaddressandport
qiangwu·2013-04-07 18:28

VsFtp2 Version 2.3.4后门漏洞

+Nmap的使用 测试搭建虚拟机nmap�CsT�CA (IPaddress）或者使用metaspliot的扫描以ftp�Cversion来扫描#这里使用别人的图  metasploit漏洞利用useexploit
GeForever·2013-04-06 19:10

安全漏洞网站和exploit

www.ourren.com/http://www.nxadmin.com/http://sebug.net/vuldb/toolhttps://www.91ri.org/category/hackertoolsexploit
earbao·2013-03-28 10:00

iOS and Android Security Mechanisms and Exploit Mitigations

https://speakerdeck.com/marpaia/ios-and-android-security-mechanisms-and-exploit-mitigations
lhj0711010212·2013-03-26 18:00

Dll Injection Using Code Caves, by: Darawk

ThecodecavemethodInsteadofexploitingawindowsAPIfunctiontoforcetheprocesstoloadourDll,thistimewe'llallocatealittlechunkmemoryinsidethetargetapplication
laogaoAV·2013-03-16 03:00

遇到的几个Php问题

可能的方案： a.引自http://www.exploit.cz/php/zend-studio-code-autocomplete-fix.html 删除用户目录Zend文件夹中的org.eclipse.dltk.ui.prefs
xinglongbing·2013-03-06 08:00

Know Your JavaScript (Injections)

HTMLinjectionvulnerabilitiesmakeagreatVoigt-Kampfftestforprovingyoucareaboutsecurity.Weneedsomekindoftooltodealwithdeveloperswhotakerefugeintheexcuse,“Butit’snotexploitable
cnbird2008·2013-02-08 11:10

Know Your JavaScript (Injections)

HTMLinjectionvulnerabilitiesmakeagreatVoigt-Kampfftestforprovingyoucareaboutsecurity.Weneedsomekindoftooltodealwithdeveloperswhotakerefugeintheexcuse,“Butit’snotexploitable
cnbird2008·2013-02-08 11:00

IE浏览器鼠标坐标跟踪安全风险,通杀全版本

影响版本:IE6-10测试：在系统目录下新建一个html文件，代码如下： ExploitDemo window.attachEvent("onload",function(){ vardetector
perlin·2013-01-21 17:44

Web安全，向“前”看！――读国内第一本Web前端黑客书

那时候圈子里流行的还是系统级别的exploit，远程溢出和本地提权很红火。“自动传播”、“拿下系统权限”是当时黑客们的主要目标，那也是网络安全时代最美好的时期。
鲜橙加冰·2013-01-18 16:52

Web安全，向“前”看！——读国内第一本Web前端***书

那时候圈子里流行的还是系统级别的exploit，远程溢出和本地提权很红火。“自动传播”、“拿下系统权限”是当时***们的主要目标，那也是网络安全时代最美好的时期。
鲜橙加冰·2013-01-18 16:52
上一页 38 39 40 41 42 43 44 45 下一页
按字母分类： ABCDEFGHIJKLMNOPQRSTUVWXYZ其他