Exploits Start.bg - уязвимости и експлойти в операционни системи, програми и уеб CMS. Сайтове за сигурност, security FAQ, снифери, sniffers, разбиване на пароли, crack. Експлойти за PHPBB, PHP-Nuke, IPB, Mambo, CPanel, SquirrelMail,

Counter Strike
cPanel exploits
Documentation
Exploits BG
Invision Board
Mambo exploits

Password crack
PHPBB - exploits
phpBB 2.0.10
phpBB 2.0.11
phpBB 2.0.12
phpBB 2.0.13

phpBB 2.0.14
phpBB 2.0.15
phpBB 2.0.16
phpBB 2.0.17
phpBB 2.0.18
PHPMyAdmin

PostNuke exploits
Security FAQ
Sniffers
SquirrelMail
Tools
Tutorials

UNIX Defense
Warning
Най-новото
Сайтове - библиотеки
Семинари

Start.bg инфо
	Това е страница от каталога Start.bg Често задавани въпроси Предложи линк Купи VIP линк

Documentation
	TCP SYN Flooding and IP Spoofing Attacks Spoofed/Forged Email Linux Security Administrator's Guide

Security FAQ
	SQL Injection Attacks by Example Old and New Hacker Ethics Rootkits: The "r00t" of Digital Evil Apache 2 with SSL/TLS Securing Linux Production Systems How to upgrade your network Best Practices for UNIX chroot() Operations A Proposal for Secure Storage of Credit Card Data An Illustrated Guide to IPsec An Illustrated Guide to Cryptographic Hashes HOWTO: set up ssh keys Cryptography FAQ How to break out of a chroot() jail Top Ten Secure Shell FAQs Linux IP Masquerade HOWTO Chroot-BIND HOWTO

Tools
	nbtscan - NETBIOS nameserver scanner websnarf - HTTP Port Listener/Capture Daemon pcascan - pcAnywhere Host Scanner whois - Front-end to Internet Whois dslrim - DSL Reports IM Checker ygpm - DSL Reports IM Checker eudinfo - Decode EUDORA.INI Files ordbscan - scan sendmail logs for ORDB bounces achart - simple command-line ASCII chart

Sniffers
	Yersinia is a network tool designed to take advantage of some weakeness in different layer 2 protocols Ethereal is a GTK+-based network protocol analyzer

Password crack tools
	An Md5 hashes cracker for lists (lists of hash or lists of word, but an incremental mode is available aswell) Main purpose of LCP program is user account passwords auditing and recovery in Windows NT/2000/XP/2003 Retrieve your lost XP system passwords, retrieve and change your XP Key. John the Ripper is a fast password cracker, currently available for many flavors of Unix DOS, Win32, BeOS, and OpenVMS Breaking PkZip-encryption VNC password cracker Cain & Abel is a password recovery tool for Microsoft Operating Systems

Tutorials
	TCP Exploits IP Spoofing and Fragmentation Root Kits Port Scanning Sniffers Buffer Overflow Viruses, Worms and Trojans Още уроци

phpBB 2.0.18
	phpBB 2.0.18 sql query problem

phpBB 2.0.17 - exploits
	phpBB Multiple Vulnerabilities phpBB 2.0.17 (maybe prior) remote avatar size phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit

phpBB 2.0.16 - exploits
	A cross site scripting bug exists in phpbb 2.0.16.

phpBB 2.0.15 - exploits
	phpbb 2.0.15 viewtopic.php php 2.0.15 remote command execution exploit for viewtopic.php. Written in Python. php 2.0.15 remote command execution exploit for viewtopic.php. Written in Python. phpbb versions 2.0.15 and below suffer from a code injection bug. phpbb versions 2.0.15 and below denial of service exploit that makes use of a flaw that relates to registering multiple users. Perl version of the exploit. phpbb versions 2.0.15 and below denial of service exploit that makes use of a flaw that relates to registering multiple users. C version of the exploit.

phpBB 2.0.14 - exploits
	phpbb 2.0.14 and below suffers from a lack of input filtering on the bbcode url. phpbb 2.0.14 suffers from various cross site scripting flaws.

phpBB 2.0.13 - exploits
	Remote phpbb 2.0.13 command execution exploit that makes use of admin_styles.php The up.php script in phpbb 2.0.x allows malicious remote attackers to upload files and execute them with the permissions of the webserver uid. phpbb versions 2.0.13 and below Calendar Pro module exploit that retrieves a users md5 hash. A SQL injection vulnerability was found in the LinksLinks Pro module in phpbb 2.0.x systems. The DLMan Pro module in phpbb 2.0.x suffers from a SQL injection vulnerability. phpbb versions 2.0.13 and below remote user level exploit that makes use of an input validation flaw. phpbb versions 2.0.13 and below are susceptible to full path disclosure and directory listing flaws. phpbb versions 2.0.13 and below fail to reset the user_level variable after a failed autologin

phpBB 2.0.12 - exploits
	phpbb versions 2.0.12 and below remote session autologin exploit that gives a user administrative rights. phpbb 2.0.12 admin_styles remote code injection exploit that shuffles back a shell phpbb versions 2.0.12 and below have a flaw that allows for access to the admin control panel without authorization. phpbb version 2.0.12 session handling authentication bypass exploit phpbb 2.0.12 session handling exploit that allows for administrative compromise phpbb version 2.0.12 is susceptible a full path disclosure flaw.

Сайтове - библиотеки с експлойти
	http://evuln.com/ http://securityfocus.com/ http://www.securiteam.com/ http://www.phrack.org/ http://www.insecure.org/ http://www.securitytracker.com/ http://www.astalavista.com/ http://securityreason.com/ http://www.frsirt.com/exploits/ http://www.hackerscenter.com/ http://www.packetstormsecurity.org/ http://www.makesecure.com/ http://www.infosecwriters.com/ http://www.startplaza.nu/ http://secinf.net/ http://www.vandyke.com/ http://www.security-forums.com/ http://www.securemac.com/ http://www.windowsecurity.com/ http://www.hackinthebox.org/ http://www.web-hack.ru/ http://www.linuxsecurity.com/ http://www.morx.org/ Още антивирус Още сигурност

Семинари
	21st Chaos Communication Congress

Warning (Readme)
	ВАЖНО :: Прочети, преди да продължиш надолу!

SquirrelMail exploits
	SquirrelMail Address Add Plugin Add.PHP Cross-Site Scripting Vulnerability SquirrelMail Folder Name Cross-Site Scripting Vulnerability SquirrelMail Vacation Plugin FTPFile Input Validation Vulnerability SquirrelMail Change_Passwd Plug-in Buffer Overrun Vulnerability SquirrelMail From Email Header HTML Injection Vulnerability Squirrelmail Multiple Remote Vulnerabilities SquirrelMail Multiple Cross Site Scripting Vulnerablities

Invision Power Board Exploits
	Invision Power Board Attached File Cross-Site Scripting Vulnerability Invision PowerBoard SQL Injection Privilege Escalation Vulnerability Invision Community Blog Multiple Input Validation Vulnerabilities Invision Power Services Invision Gallery SQL Injection Vulnerability Invision Power Board Unauthorized Access Vulnerability Invision Power Board Login.PHP SQL Injection Vulnerability Invision Power Board Act Parameter Cross-Site Scripting Vulnerability Invision Power Board QPid Parameter SQL Injection Vulnerability Invision Power Board ST Parameter SQL Injection Vulnerability Invision Power Board SML Code Script Injection Vulnerability Invision Power Board HTML Injection Vulnerability Invision Community Blog EID Parameter SQL Injection Vulnerability nvision Power Board Index.PHP Post Action SQL Injection Vulnerability

PostNuke exploits
	XML-RPC for PHP Remote Code Injection Vulnerability PostNuke DL-viewdownload.PHP SQL Injection Vulnerability PostNuke Multiple Cross Site Scripting Vulnerabilities PostNuke SQL Injection and Cross-Site Scripting Vulnerabilities PostNuke Multiple Remote Input Validation Vulnerabilities PostNuke Phoenix Module Parameter Remote Cross-Site Scripting Vulnerability PostNuke Blocks Module Directory Traversal Vulnerability PostNuke Phoenix SID Parameter Remote SQL Injection Vulnerability PostNuke Phoenix OP Parameter Remote Cross-Site Scripting Vulnerability PostNuke Phoenix SHOW Parameter Remote SQL Injection Vulnerability PostNuke Phoenix CATID Parameter Remote SQL Injection Vulnerability PostNuke Reviews Module Cross-Site Scripting Vulnerability PostNuke Install Script Administrator Password Disclosure Vulnerability PHPNuke Multiple Cross-Site Scripting Vulnerability PostNuke Phoenix Multiple Cross-Site Scripting And Path Disclosure Vulnerabilities PostNuke Downloads / Web_Links Modules TTitle Cross-site Scripting Vulnerability PostNuke User.PHP UNAME Cross-Site Scripting Vulnerability PostNuke Modules.PHP Multiple Cross-Site Scripting Vulnerabilities PostNuke Phoenix Rating System Denial Of Service Vulnerability PostNuke Phoenix Glossary Module SQL Injection Vulnerability PostNuke File Path Disclosure Vulnerability

Mambo exploits
	Mambo Open Source Com_Contents SQL Injection Vulnerability Mambo Open Source Multiple Input Validation Vulnerabilities Mambo Open Source mod_mainmenu.php Remote File Include Vulnerability Mambo Open Source Index.PHP Cross-Site Scripting Vulnerability Mambo Open Source Index.PHP SQL Injection Vulnerability Mambo Open Source Itemid Parameter Cross-Site Scripting Vulnerability Mambo Open Source PollBooth.PHP Multiple SQL Injection Vulnerabilities Mambo Open Source 4.0.14 Server SQL Injection Vulnerability Mambo Server user.php Script Unauthorized Access Vulnerability Mambo Site Server Cookie Validation Vulnerability Mambo Site Server Path Disclosure Vulnerability Mambo Site Server PHPInfo.PHP Information Disclosure Vulnerability

Exploits BG
	PCWorm Подкрепете сайта - гласуваите от тук Още хакeри

phpBB 2.0.10 - exploits
	phpbb 2.0.x session handling administrator authentication bypass exploit. phpbb versions 2.0.10 and below are susceptible to a directory traversal attack via the attachment module Remote command execution exploit for phpbb 2.0.10 phpbb v1.0.0 - 2.0.10 remote exploit which takes advantage of a bug in admin_cash.php phpbb version 2.0.x - 2.0.10 is susceptible to a SQL injection attack.

phpBB 2.0.11 - exploits
	phpbb 2.x with PHP phpbb versions below 2.0.11 suffer from addition SQL injection and directory traversal flaws

Ново от Компютърна сигурност
	Вирусни чистачи - aко сте открили вирус Kaspersky Antivirus Нов вирус заразява банкомати SSL Сертификати И Безплатен Антивирус Софтуер От GetSSL Google ни предупреждава и за вируси

UNIX Defense
	Security Patches Linux Security UNIX Loggers IDS Tools Sniffers Port Scan Detectors Firewall Unix Utilities Miscellaneous Tools Secure Deletion Още Linux Още OS

PHPMyAdmin exploits
	PHPMyAdmin Local File Include Vulnerability PHPMyAdmin Error.PHP Cross-Site Scripting Vulnerability PHPMyAdmin Convcharset Cross-Site Scripting Vulnerability PHPMyAdmin Multiple Libraries And Themes Remote Cross-Site Scripting Vulnerabilities PHPMyAdmin Multiple Local File Include Vulnerabilities phpMyAdmin Multiple Remote Vulnerabilities phpMyAdmin Multiple Input Validation Vulnerabilities

Най-новото
	aoblogger Multiple Vulnerabilities Multiple Translation websites Cross Site Scripting vulnerability (Google, Altavista, IBM) SimpleBBS v1.1 remote commands execution Mambo versions 4.5.2 remote command execution exploit. The Blog System version 1.2 is susceptible to SQL injection attacks. Multiple Vulnerabilities In SugarCRM FreeFTPd Buffer Overflow PHP Fusion CMS Multiple Vulnerabilities (subheader.php, options.php) PmWiki 2.0.12 Cross Site Scripting VHCS 2.x HTTP Error Cross Site Scripting Qualcomm WorldMail IMAP Server Directory Traversal Vulnerability XMB HTML Injection & Path Disclosure Schneier's PasswordSafe password validation flaw Template Seller Pro 3.25 Arbitrary code execution, SQL Injection(s) Multiple Vendor GTK+ gdk-pixbuf XPM Loader Heap Overflow Vulnerability Multiple vulnerabilities in phpMyAdmin Affiliate Network Pro v7.2 SQL Injections, Arbitrary code execution, XSS PHPWCMS - Directory traversal vulnerability,CSS attack Multible Sql injections in Wizz Forum Cyphor (Release: 0.19) Sql injection OTRS 1.x/2.x Multiple Security Issues Walla TeleSite Multiple Vulnerabilities PHPCalendar (and some more codegrrl.com products) arbitrary code execution Multiple Bugs in MyBB 1.0 PR2 Rev 686(Updated Nov 1, 2005) Veritas Storage Foundation VCSI18N_LANG buffer overflow

PHPBB - exploits
	Multi-CMS/Forum Vulnability's Proof of concept information for a flaw in BBCode that works against vBulletin and phpbb phpbb suffers from SQL injection vulnerabilities. phpbb Auction module version 1.2m suffers from a SQL injection vulnerability. phpBB - Knowledge Base MOD - QL-Injection vulnerability and Full Path Disclosure Multiple SQL injection and Cross-site Scripting issues in phpbb versions 1.52 The downloads.php mod in phpbb versions 2.0.13 and below is susceptible to SQL injection attacks. Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB Postnuke all versions + pnphpbb phpBB Group phpBB2 Arbitrary File Unlink Vulnerability Santy.b phpbb worm that affects versions 2.0.10 and below and installs a bot. Uses AOL/Yahoo search New version of the phpbb worm that successfully works against a patched phpbb 2.0.11 phpbb versions 1.4.4 and below are susceptible to cross site scripting flaws. Vulnerabilities that allow an attacker to inject malicious PHP code exist in the phpbb2 forum using the Cash_Mod module. Още phpBB

cPanel exploits
	cPanel User Parameter Cross-Site Scripting Vulnerability cPanel Guestbook.cgi Remote Command Execution Vulnerability cPanel Front Page Extension Installation Information Disclosure Vulnerability cPanel Passwd Remote SQL Injection Vulnerability cPanel Killacct Script Customer Account DNS Information Deletion Vulnerability cPanel Local Privilege Escalation Vulnerability cPanel Multiple Module Cross-Site Scripting Vulnerabilities CPanel Multiple Cross-Site Scripting Vulnerabilities cPanel dir Parameter Cross-Site Scripting Vulnerability cPanel Resetpass Remote Command Execution Vulnerability CPanel Admin Interface HTML Injection Vulnerability cPanel/Formail-Clone E-Mail Restriction Bypass Vulnerability cPanel Openwebmail Local Privileges Escalation Vulnerability

Counter Strike - Cheats
	Counter-Strike: Source - CHEATS Още Counter Strike

Страницата се редактира от

Start.bg инфо

Ново от Компютърна сигурност