exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 26 - 37 of 37

Files from Michael Brooks

php_nuke_captcha.zip

Posted Apr 21, 2008

Authored by Michael Brooks | Site rooksecurity.com

Tool that demonstrates how the CAPTCHA used in PHP-Nuke version 8.1 can be deciphered with 100% accuracy.

tags | exploit, php

SHA-256 | b6a2d80689a601a1e69a0dc8960bbdc9c3765dfc74c229767bceb218d7547ada

Download | Favorite | View

motsurf-csrf.txt

Posted Apr 21, 2008

Authored by Michael Brooks

The Motorola Surfboard cable modem suffers from cross site request forgery vulnerabilities.

tags | exploit, vulnerability, csrf

SHA-256 | b98c308fb47b4f3a9bf954a422d5ba85c189c273d9b9eac792e5a7f6e88acea2

Download | Favorite | View

torrent-pwnage.txt

Posted Apr 18, 2008

Authored by Michael Brooks

uTorrent, Azurues, and TorrentFlux all suffer from cross site request forgery vulnerabilities in their WebUI functionality.

tags | exploit, vulnerability, csrf

SHA-256 | 0c77874a8b315936bd78c690d6f9b19703cbc2bb9b80c1c2a0634de438d0f593

Download | Favorite | View

phprpg-sql.txt

Posted Dec 18, 2007

Authored by Michael Brooks

PHP RPG version 0.8.0 appears to suffer from SQL injection and information disclosure vulnerabilities.

tags | exploit, php, vulnerability, sql injection, info disclosure

SHA-256 | 82606c7cdc6c253a2d398c5aa5215f03f2ad16e494c479fe212350a6f8aa3a9e

Download | Favorite | View

oreon-rfi.txt

Posted Dec 18, 2007

Authored by Michael Brooks

Oreon version 1.4 and Centreon version 1.4.1 appear to suffer from multiple remote file inclusion vulnerabilities.

tags | exploit, remote, vulnerability, code execution, file inclusion

SHA-256 | babe76aa990cbb462beaf937f7e31d54522de7b559f940fe3a0696304916b7c7

Download | Favorite | View

aps-exec.txt

Posted Dec 18, 2007

Authored by Michael Brooks

Anon Proxy Server version 0.100 appears to suffer from an arbitrary code execution vulnerability.

tags | exploit, arbitrary, code execution

SHA-256 | 546be51042004c1bc6c153d65e803b58a852f9576b7520c91e77a376c8fac11f

Download | Favorite | View

phpay-lfi.txt

Posted Dec 18, 2007

Authored by Michael Brooks

Phpay version 2.02.1 appears to suffer from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | 741c11f7dda709d31033b3778cd48d4326a4afac212c4779499746aab9325d1a

Download | Favorite | View

smf-blind.txt

Posted Oct 23, 2007

Authored by Michael Brooks

Simple Machines Forum aka SMF version 1.1.3 blind SQL injection exploit.

tags | exploit, sql injection

SHA-256 | 150c8055dd94f3a16a6ace6999869d9b44af882ca9dcbe3d0378d701dca59ec8

Download | Favorite | View

smf-sql.txt

Posted Oct 22, 2007

Authored by Michael Brooks

Simple Machines Forum versions 1.1.3 remote blind SQL injection exploit.

tags | exploit, remote, sql injection

SHA-256 | ae7d767ab1ec0d118e94ce183c5703b9bb8bc55baa12a09028641fcc49b7d402

Download | Favorite | View

igcal10-sql.txt

Posted Jan 5, 2007

Authored by Michael Brooks

IG Calendar version 1.0 suffers from a SQL injection vulnerability in user.php.

tags | exploit, php, sql injection

SHA-256 | 330ddca9d3193ac3e81fc215f957dbb8aeb3adf8abf7446b1b619280e33c8d0b

Download | Favorite | View

igshop10-multiple.txt

Posted Jan 5, 2007

Authored by Michael Brooks

IG Shop version 1.0 suffers from multiple remote vulnerabilities relating to eval usage and SQL injection.

tags | exploit, remote, vulnerability, sql injection

SHA-256 | 331fdd51cbd8f8fe064d9f19ab3eea1caa9b0f46a4e5c692016894f43e88d1d6

Download | Favorite | View

hlstats-sql.txt

Posted Dec 28, 2006

Authored by Michael Brooks

HLStats versions between 1.34 and 1.20 suffer from a SQL injection vulnerability. Exploit included.

tags | exploit, sql injection

SHA-256 | 9e67ad11170a524c053956f06e2e53775c68666873dc6581ef70942a72c85d59

Download | Favorite | View