what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 6 of 6

Files from GML

PHP 4 unserialize() ZVAL Reference Counter Overflow

Posted Oct 27, 2009

Authored by H D Moore, Stefan Esser, GML | Site metasploit.com

This Metasploit module exploits an integer overflow vulnerability in the unserialize() function of the PHP web server extension.

tags | exploit, web, overflow, php

advisories | CVE-2007-1286

SHA-256 | 436f0bc029967671da472d8ca912c40b8636846cfd3d8f81e3a0fd1d8a030e1f

Download | Favorite | View

pam_rootkit.tar.gz

Posted Jul 17, 2004

Authored by GML

This pam backdoor allows access to a machine using a backdoor password and arbitrary commands can also be executed without logging in. Logs normal users passwords to a log file. Configurable without recompilation.

tags | tool, arbitrary, rootkit

systems | unix

SHA-256 | 7f794ba5e8bc118b85ff262f027ec88781fe67d05316514d8796bbbf098b9f09

Download | Favorite | View

bb.c

Posted Dec 15, 2003

Authored by GML | Site phrick.net

Buffer Builder v1.5 is a tool which assists in building buffer overflow strings for local and remote exploits. Goes well with a disassembler and netcat and contains several useful shell codes.

Changes: Added ability to change offset, cleaned up output, added more byte order parameters, added new shellcodes, fixed $SHELLCODE offset calculation problem on freebsd, and added author strings to shellcode.

tags | remote, overflow, shell, local, shellcode

SHA-256 | 39c3af509337569eee964333a3439de850f8fc3714f170e17d504bf6ee4104ed

Download | Favorite | View

pam_backdoor.tar.gz

Posted Nov 5, 2003

Authored by GML

Proof of concept PAM backdoor for Linux and FreeBSD that adds a magic password.

tags | tool, rootkit, proof of concept

systems | linux, unix, freebsd

SHA-256 | 016c0aa981fb671c3623d1daa0ce0b685f7973cd7dcffdc1a02430078f3d3814

Download | Favorite | View

elfbinder_1.5.tar.gz

Posted May 7, 2003

Authored by GML

Elf binder v1.5 will bind a tar file to the end of an executable. It will then untar the file in /tmp, run the installation script, and can be useful for automation.

systems | linux

SHA-256 | 7c68d9e3a950633449b73b3e7cc149f45eb56ccbd2ba6ed0f2f1cd101337429c

Download | Favorite | View

drdos_v2.0.tar.gz

Posted May 15, 2002

Authored by GML

Drdos v2.0 is a tool for distributed reflection denial of service attacks.

tags | denial of service

SHA-256 | 456d80aab4b5ffa8109f6d73877742da6799b8a3e6ae666b0dd14e32b80c4cd7

Download | Favorite | View