what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 25 of 56

Files from Valentin Hoebel

Joomla JMSFileSeller Local File Inclusion

Posted May 28, 2011

Authored by Valentin Hoebel

Joomla JMSFileSeller component version 1.0 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | e935372257a3e73870aae7652b89def888c1b4e53016c2e5e61a49173d744c35

Download | Favorite | View

Simple LAN Scanner 1.0

Posted Jan 8, 2011

Authored by Valentin Hoebel

Simple LAN Scanner is a simple python script that leverages scapy for discovering live hosts on a network.

tags | tool, scanner, python

systems | unix

SHA-256 | 5b9a1073a20d03e4e93144a5db6e630a62b90fb9f3bbaace030de8b42c127d90

Download | Favorite | View

Simple Local File Inclusion Vulnerability Scanner

Posted Dec 29, 2010

Authored by Valentin Hoebel

This tool helps discover local file inclusion vulnerabilities. It creates a random user agent for the connection, supports nullbytes, supports common Unix systems, and more.

tags | tool, local, scanner, vulnerability, file inclusion

systems | unix

SHA-256 | 0c1637f07029317c9015b1f6d44d3a4c08567372e22ad7436e02997621345c13

Download | Favorite | View

The Joomla Hacking Compendium

Posted Dec 20, 2010

Authored by Valentin Hoebel

Whitepaper called The Joomla Hacking Compendium. This document should provide you with security related information about Joomla and the extensions which are available for it. This paper focuses on how to hack Joomla installations and how to protect them.

tags | paper

SHA-256 | 467489c738a22376e6abfc1c7ea3f4678310dbccccce20aa044f48669be1df77

Download | Favorite | View

Simple Local File Inclusion Exploiter 1.0

Posted Nov 22, 2010

Authored by Valentin Hoebel

The Simple Local File Inclusion Exploiter tool helps you exploit LFI (Local File Inclusion) vulnerabilities. Post discovery, simply pass the affected URL and vulnerable parameter to this tool. You can also use this tool to scan a URL for LFI vulnerabilities.

tags | tool, local, scanner, vulnerability, file inclusion

systems | unix

SHA-256 | ea5cb58e3cce77677069748f7e460b34d2b1081d8978484c039bc2c523a9ec03

Download | Favorite | View

South Korean UTW CMS Disclosure / Local File Inclusion / CSRF

Posted Nov 19, 2010

Authored by Valentin Hoebel

South Korean UTW CMS suffers from cross site request forgery, source code disclosure, local file inclusion and various other vulnerabilities.

tags | exploit, local, vulnerability, sql injection, file inclusion, csrf

SHA-256 | a0de06ac87db2f75cd8996bb2375f8eed1b3a45b7a4597eeeebb4404f5127c2b

Download | Favorite | View

OneOrZero AIMS 2.6.0 Members Edition Local File Inclusion / SQL Injection

Posted Nov 14, 2010

Authored by Valentin Hoebel

OneOrZero AIMS version 2.6.0 Members Edition suffers from local file inclusion and remote SQL injection vulnerabilities.

tags | exploit, remote, local, vulnerability, sql injection, file inclusion

SHA-256 | dbcc68c759bf3c1aba9e8f46635fc2ef4edacefaf7749b6b4830d741d930de4f

Download | Favorite | View

Joomla JSupport 1.5.6 SQL Injection

Posted Nov 12, 2010

Authored by Valentin Hoebel

The Joomla JSupport component version 1.5.6 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 4b803c5016270ee6808924d7ce0a83fc6ac436b22328d84419f6547282a8d99e

Download | Favorite | View

Joomla JSupport 1.5.6 Cross Site Scripting

Posted Nov 12, 2010

Authored by Valentin Hoebel

The Joomla JSupport component version 1.5.6 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 4c2779496afa3a01005f153d309b4f041b981023b3039e39e092a4f267eda0d6

Download | Favorite | View

Zeeways Adserver Cross Site Request Forgery / SQL Injection

Posted Nov 8, 2010

Authored by Valentin Hoebel

The Zeeways Adserver suffers from cross site request forgery, disclosure and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, sql injection, csrf

SHA-256 | 4644425593b6f8e6e158f90457d3bb20482769bbcc0e0229c3b1149bf170a7c4

Download | Favorite | View

VideoDB 3.0.3 Local File Inclusion / SQL Injection

Posted Oct 11, 2010

Authored by Valentin Hoebel

VideoDB versions 3.0.3 and below suffer from local file inclusion and remote SQL injection vulnerabilities.

tags | exploit, remote, local, vulnerability, sql injection, file inclusion

SHA-256 | b9e1d3b7d68e4088239f63fffe555c018425194ad6b9d2e5dbb40d68a3592a22

Download | Favorite | View

Joomla Restaurant Guide Cross Site Scripting / Local File Inclusion / SQL Injection

Posted Sep 18, 2010

Authored by Valentin Hoebel

The Joomla Restaurant Guide component version 1.0.0 suffers from cross site scripting, local file inclusion and remote SQL injection vulnerabilities.

tags | exploit, remote, local, vulnerability, xss, sql injection, file inclusion

SHA-256 | d00ec099221f493dc999b3a2f3953d7bb9c694088a81a3a26e0827e0d9be13fc

Download | Favorite | View

Joomla NKC 2.0.b Beta SQL Injection

Posted Sep 11, 2010

Authored by Valentin Hoebel

The Joomla NKC component version 2.0.b Beta suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 45ca253843d6ea6b03b81c6912b72fd22f8e7295cc1a5e8fdfd47157c943c25b

Download | Favorite | View

Mechbunny PaysiteReviewCMS Cross Site Scripting

Posted Sep 11, 2010

Authored by Valentin Hoebel

Mechbunny PaysiteReviewCMS suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | d0154411fd57aa82f3e94396e50469c4028f68d806217fdbfbd681540818cada

Download | Favorite | View

Mechbunny Porn Tube Search Cross Site Scripting / Redirection

Posted Sep 11, 2010

Authored by Valentin Hoebel

Mechbunny Porn Tube Search Script suffers from cross site scripting and redirection vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 518ae81e989dd2abe6ef51e44ec44a1f41d5e60ff7af603d71f1cf87d9885065

Download | Favorite | View

GaleriaSHQIP 1.0 SQL Injection

Posted Aug 30, 2010

Authored by Valentin Hoebel

GaleriaSHQIP version 1.0 Full suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | f6b0bdd1d60114446786726fcff1644efaafc976e25bcda4255f78cd20b9ee15

Download | Favorite | View

Joomla GolfCourseGuide SQL Injection

Posted Jul 23, 2010

Authored by Valentin Hoebel

Joomla GolfCourseGuide component versions 0.9.6.0 Beta and 1 Beta suffer from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | c3d20cf389cff928da4dbb4ad7fd832d03fccb5ab9c000e761ebb0bc5f5bae5f

Download | Favorite | View

Membership Site Script SQL Injection

Posted Jun 16, 2010

Authored by Valentin Hoebel

Membership Site Script suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 2125b74111357c07a03c807cbeac1a9f6a58a487573f3f9178eb4463ea9584d9

Download | Favorite | View

Daily Inspirational Quotes Script SQL Injection

Posted Jun 16, 2010

Authored by Valentin Hoebel

Daily Inspirational Quotes Script suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | c83afcf0fb9993bd48572338626c6daa7b1ca54314a8cdb1f93d23528be40c9b

Download | Favorite | View

Joke Website Script Cross Site Scripting / SQL Injection

Posted Jun 16, 2010

Authored by Valentin Hoebel

Joke Website Script suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

SHA-256 | b98a4a882c70f214f89b09cb1ed34e82e14f364de8cf568a63eae108df97e83d

Download | Favorite | View

E-Book Store SQL Injection

Posted Jun 16, 2010

Authored by Valentin Hoebel

E-Book Store suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 11b7962e20c8a77c2c0b5d2ad3499fce8e66c954b83e532cc180b12033bdd91c

Download | Favorite | View

Lyrics Script Cross Site Scripting / SQL Injection

Posted Jun 16, 2010

Authored by Valentin Hoebel

Lyrics Script suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

SHA-256 | 2d1d7a33c445cfdc1a4265f377971b26471aac781dd3fccb162b94d8fb788e93

Download | Favorite | View

Dijitals CMS Cross Site Scripting

Posted Jun 14, 2010

Authored by Valentin Hoebel

Dijitals CMS suffers from cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 981d0da6b7038d7b129309c5037ffbdb6440a403e72829878214d3f1a3a327f4

Download | Favorite | View

Simple Log File Analyzer 1.0

Posted Jun 8, 2010

Authored by Valentin Hoebel

Simple Log File Analyzer is a tool that looks for different attack attempts in Apache2 access logs. Written in Python.

tags | tool, scanner, python

systems | unix

SHA-256 | dc83d6b8d40632e18697f4392d2309499e45fec75ed2aede879735ffae1421de

Download | Favorite | View

Simple SQL Injection Vulnerability Scanner 0.3

Posted Jun 4, 2010

Authored by Valentin Hoebel

Simple SQL Injection Vulnerability Scanner is a tool that helps you find SQL injection vulnerabilities within your website. Simply provide an URL and let the tool do all the work. Written in Python.

tags | tool, scanner, vulnerability, sql injection, python

systems | unix

SHA-256 | 96063e29053ad04993390a1466220d3646a0934ad8abc17d8811741f2145659a

Download | Favorite | View