what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Swan

vcalendar-disclose.txt

Posted Nov 21, 2008

Authored by Swan

VCalendar suffers from a remote database disclosure vulnerability.

tags | exploit, remote, info disclosure

SHA-256 | 45cacb6669fc1d5e521d3abbd86982f6330224e0ebd4d43db25a8d11c60ac1fc

Download | Favorite | View

msdtc.cpp

Posted Dec 1, 2005

Authored by Swan

Microsoft Windows Distributed Transaction Coordinator remote proof of concept exploit for the flaw listed in MS05-051.

tags | exploit, remote, proof of concept

systems | windows

SHA-256 | 5a516d222a183472ce165846622b1deb7443c5cc0b80551438fb933e3bac6c4d

Download | Favorite | View

creating_a_asp_command_shell_using_BACKUP.txt

Posted Oct 24, 2004

Authored by Swan | Site 0x557.org

This is a small text document that describes how MS SQL can be "tricked" into creating a command.asp script under the webroot, even when you do not have access to 'sa' privs (dbo privs are probably still a must, though). The technique described uses the SQL server 'backup' command.

tags | paper, web, asp

SHA-256 | 00f4e7c9f7cd17235e6b6b60f335065c99183f5e4af191f5b7d9dfcb8975e8a2

Download | Favorite | View