what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 4 of 4

Files from petko d. petkov

wirelessg-multi.txt

Posted Nov 26, 2007

Authored by petko d. petkov | Site gnucitizen.org

The Wireless-G ADSL Gateway with SpeedBooster (WAG54GS) suffers from persistent cross site scripting and cross site request forgery vulnerabilities.

tags | exploit, vulnerability, xss, csrf

SHA-256 | 4b17ddab5f1abda0d7cf284ccb9ff382a2608ce27aab158d6b8a36ab2ac4d96f

Download | Favorite | View

appleqt-exec.txt

Posted Sep 13, 2007

Authored by petko d. petkov | Site gnucitizen.org

Apple Quicktime proof of concept command execution exploit that leverages browsers.

tags | exploit, proof of concept

systems | apple

SHA-256 | c877deb8b315ef3440d68833644675a5aafe7641e58cac18e44be9b40b4e27e5

Download | Favorite | View

pdf-xss.txt

Posted Jan 4, 2007

Authored by petko d. petkov | Site gnucitizen.org

It appears that PDF has a flaw in it that allows arbitrary javascript to be executed.

tags | exploit, arbitrary, javascript, xss

SHA-256 | 85bbcb63199d754f10492eb4044a1ad5d4d6b49a7d6cdd32ea55098b05e30a08

Download | Favorite | View

AttackAPI.zip

Posted Oct 20, 2006

Authored by petko d. petkov | Site gnucitizen.org

AttackAPI provides simple and intuitive web programmable interface for composing attack vectors with JavaScript and other client (and server) related technologies. The current release supports several browser based attacking techniques, simple but powerful JavaScript console and powerful attack channel and associated API for controlling zombies.

tags | web, javascript

SHA-256 | 9eff982804aed2813db91db112a8fb122c40b8ebedb5503b2fe3ab2647c5cf14

Download | Favorite | View