what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 5 of 5

Files from BaCkSpAcE

lnx_execve_fupdisasm.c

Posted May 22, 2006

Authored by BaCkSpAcE | Site bitbyterz.org

32 byte execve() shellcode with 'fuck up disasm' ability.

tags | shellcode

SHA-256 | ad2250ea9791a84a522c61851997606eabe8ac44ff645a9b816167d06cf67db5

Download | Favorite | View

lnx_binsh4.c

Posted Sep 7, 2005

Authored by c0ntex, BaCkSpAcE

23 byte linux/x86 /bin/sh sysenter opcode array payload.

tags | x86, shellcode

systems | linux

SHA-256 | c6fcfb33ec9f6fc7239338c5b769cff2c18bd07163945629fb794f7efd19c361

Download | Favorite | View

yabbSESQL.txt

Posted Mar 1, 2004

Authored by BaCkSpAcE

YaBB SE versions 1.5.4 to 1.5.5b are all susceptible to various remote SQL injection attacks.

tags | advisory, remote, sql injection

SHA-256 | d37c5048d51d248294618dab5c91a0b3df20b1030af3cf3694cce090223ea121

Download | Favorite | View

yabbSE2.txt

Posted Feb 17, 2004

Authored by BaCkSpAcE

YaBB SE versions 1.54 and 1.55 are susceptible to a SQL injection vulnerability that allows a remote attacker to execute malicious SQL statements on the database remotely.

tags | advisory, remote, sql injection

SHA-256 | 0cb034ef99caa617751564217c86b7aa293f12c1a2e323fbaed9a9eb14a1dc80

Download | Favorite | View

yabbSE.txt

Posted Jan 20, 2004

Authored by BaCkSpAcE

YaBB SE versions 1.54 and 1.53 have the functions welcome and recentTopics which are vulnerable to SQL injection because the parameter ID_MEMBER is not checked against malicious input.

tags | exploit, sql injection

SHA-256 | 95e89384d3a5e60f55043d680923bf50f3a2d727d428ca8993e211fcbfc77dda

Download | Favorite | View